Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/w-1BWa7mKvEwX5ojQ3wjSIW2ilA.roa
File: w-1BWa7mKvEwX5ojQ3wjSIW2ilA.roa (raw, json)
Hash identifier: BPQEVSllsdoAsY5tlhKi/kdmQsg+2USpV8PteHieXzg=
Subject key identifier: C3:ED:41:59:AE:E6:2A:F1:30:5F:9A:23:43:7C:23:48:85:B6:8A:50
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A9987D33D54474E5D9A11538B98F2451B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/w-1BWa7mKvEwX5ojQ3wjSIW2ilA.roa
Signing time: Fri 15 Sep 2023 15:48:50 +0000
ROA not before: Fri 15 Sep 2023 15:48:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.249.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:87:d3:3d:54:47:4e:5d:9a:11:53:8b:98:f2:45:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 15:48:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3ed4159aee62af1305f9a23437c234885b68a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:b8:d8:be:94:64:b1:6a:bd:de:ce:9d:8f:
1e:64:b0:5f:ab:cd:58:3a:2a:d4:6f:d3:af:ad:c9:
8d:26:0c:b9:ab:8a:5a:59:35:a6:a2:21:83:01:51:
b5:56:a2:da:c5:d2:d8:74:25:2d:b4:79:2c:a2:0a:
eb:28:19:92:ef:77:e5:47:70:0c:05:d0:7c:7a:23:
3e:81:6d:7b:39:77:70:d7:41:20:7f:d6:d7:42:bd:
65:d9:59:eb:6f:0f:49:2f:53:6a:66:a4:84:5b:4c:
4b:3f:c0:52:32:1d:78:17:43:04:15:d6:a1:00:29:
64:87:65:32:c6:33:3d:65:79:54:d1:bf:1b:69:d1:
94:68:66:d4:3f:2f:20:34:57:b7:08:0d:5a:2c:95:
cf:73:6e:39:d8:ec:4f:61:80:89:e8:f8:00:b9:6a:
ae:9b:db:d2:c2:3f:81:3d:5b:7b:b4:17:1e:1d:ad:
f2:02:4b:17:73:85:e6:68:f2:24:a1:30:d9:3c:4f:
1e:94:29:d8:62:3c:03:f1:6f:dd:0b:f3:36:83:fa:
ac:f9:34:ec:c4:a0:bb:60:1f:aa:1f:74:26:2b:a6:
2a:aa:c1:d7:fa:e3:3e:44:bf:2c:74:47:80:2c:30:
93:ca:0a:23:31:9c:d6:ca:35:81:d5:08:e4:c3:b9:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:41:59:AE:E6:2A:F1:30:5F:9A:23:43:7C:23:48:85:B6:8A:50
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/w-1BWa7mKvEwX5ojQ3wjSIW2ilA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
29:ba:21:07:ce:a2:ca:25:22:aa:f6:64:5a:68:63:b7:80:2e:
06:7c:92:8e:a2:b2:1a:66:87:58:3e:7b:84:b6:23:e5:a2:e0:
6a:1c:19:b6:3c:3a:3c:3a:cf:24:31:06:48:84:09:fd:b0:bb:
18:3d:88:37:c5:11:89:7f:c4:b7:48:85:b9:2e:a6:cf:55:8f:
6d:58:f2:25:a9:59:1a:6c:52:cf:bb:e9:70:87:b1:4a:f3:04:
c9:6d:3c:3c:e0:50:47:62:2c:0b:7b:28:c4:f6:46:be:1d:c8:
32:6e:8e:33:df:ba:6a:06:7b:cc:58:1e:b4:84:c3:0b:aa:d8:
ec:83:44:e6:01:59:53:0c:c7:39:c7:ed:4d:25:c6:6d:4d:0b:
83:03:45:eb:7b:68:3c:dc:00:95:39:55:10:3c:a4:69:9a:0b:
cd:77:74:66:14:2f:b5:fe:f8:12:b4:5a:ec:e6:2b:a0:5a:7f:
cc:89:3a:ea:9e:e5:bd:a3:d7:66:56:b5:c7:1b:ef:07:92:f5:
fa:8f:00:b7:7c:2f:b6:6c:9f:4a:d5:00:1f:8b:33:d8:06:05:
29:07:21:77:7d:88:0a:95:14:a4:75:e9:8a:5b:4c:87:ef:1a:
0d:2c:0e:d9:38:5f:0a:17:81:8c:94:1e:c7:43:16:b4:3b:fb:
98:36:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:24 2024 by rpki-client on console-ams.rpki-client.org