Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/G9GGDIz5VkQ04sdYWY4ROv4Pj88.roa
File: G9GGDIz5VkQ04sdYWY4ROv4Pj88.roa (raw, json)
Hash identifier: zSVTC5ELsU5VCCfSTsUT1zvZit1dvcH5haeBDUdSdnk=
Subject key identifier: 1B:D1:86:0C:8C:F9:56:44:34:E2:C7:58:59:8E:11:3A:FE:0F:8F:CF
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F9E7A4BAD9613FF0DC0FC06EA2E27
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/G9GGDIz5VkQ04sdYWY4ROv4Pj88.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57543
IP address blocks: 46.143.216.0/21 maxlen: 21
46.143.224.0/21 maxlen: 21
46.143.232.0/22 maxlen: 22
46.143.236.0/23 maxlen: 23
46.143.238.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9e:7a:4b:ad:96:13:ff:0d:c0:fc:06:ea:2e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bd1860c8cf9564434e2c758598e113afe0f8fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:75:de:ea:8f:f9:bc:21:c7:8e:8c:c5:22:
d8:4b:a6:b0:79:d0:f1:3a:93:38:64:26:41:e5:4d:
7a:9e:bb:2a:2a:1e:28:91:12:71:0e:09:4b:0c:67:
05:a2:18:15:cb:04:7f:82:4e:4d:fe:97:9b:3d:71:
6b:b0:1b:67:29:8c:8a:09:9b:21:34:05:99:7f:a4:
c5:37:1e:27:64:97:7e:cb:62:58:23:91:42:09:4d:
2a:5e:cf:2f:42:3d:0d:e1:6d:e5:d2:58:e8:44:64:
3e:a8:8b:63:ad:85:e7:98:ac:d8:7b:90:f7:18:d0:
a2:d2:c4:15:ed:98:80:13:39:c7:e5:bb:53:de:74:
2b:bb:f7:13:e4:58:6a:c8:3e:9e:48:31:f4:a5:b5:
3e:6e:5a:f3:24:c0:d2:61:30:06:71:18:f7:e2:99:
a2:52:ae:6e:06:ca:c2:9e:a5:c5:ea:36:5c:2d:29:
f6:2d:c5:87:d1:9e:72:c7:c0:5a:84:94:39:37:5e:
3c:77:8e:ec:fb:fe:2a:86:10:e4:d5:7c:d7:09:30:
10:6c:a3:d5:7c:a5:1a:b6:b6:74:f9:a3:35:89:94:
10:b7:d8:c7:fb:01:a6:94:1c:14:7b:2a:aa:c1:b9:
ff:16:39:71:05:36:4d:ab:d0:a7:13:06:92:0b:20:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D1:86:0C:8C:F9:56:44:34:E2:C7:58:59:8E:11:3A:FE:0F:8F:CF
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/G9GGDIz5VkQ04sdYWY4ROv4Pj88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.216.0-46.143.239.255
Signature Algorithm: sha256WithRSAEncryption
66:25:d2:6f:5b:18:83:bb:75:00:3c:ab:9c:39:8b:f1:51:c5:
1f:94:e0:97:3a:66:97:6e:2b:96:24:dd:76:24:66:59:6d:f7:
1c:cb:50:30:5a:84:3d:f7:1d:8b:34:e7:0c:5c:7d:77:b1:6c:
97:76:aa:e7:8a:c8:a3:5f:35:bc:2d:32:b4:c7:c3:06:49:81:
f6:60:3b:f8:d3:5d:5b:97:55:6e:ce:30:1b:ab:04:15:eb:98:
26:6e:2d:fa:04:68:f1:c7:96:07:03:2d:57:b8:d2:e8:a5:03:
c6:8d:c6:cf:f0:ad:d2:65:a3:5a:d5:ee:42:10:9b:59:f7:27:
f9:a3:fe:96:01:13:9e:4e:27:14:18:c5:f9:01:ed:d5:2d:9f:
06:94:81:5a:fc:37:06:92:d6:3c:0a:29:0f:07:45:69:8f:97:
65:2b:5c:86:5a:9a:45:e4:2e:e2:4d:63:70:c7:8a:dd:eb:bd:
8f:9f:50:a7:c8:21:bf:01:c0:30:dd:4a:58:47:3f:0a:c6:38:
f0:cf:58:45:80:cb:c5:38:aa:27:15:3f:30:44:c3:7d:74:00:
76:1c:e3:44:be:71:bc:bc:7d:2a:bb:c6:13:6a:25:b9:80:18:
4b:07:77:97:05:73:16:e2:c9:b3:91:cb:98:95:e1:e2:bb:a4:
35:8c:fa:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:45 2024 by rpki-client on console-fra.rpki-client.org