Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa
File: SoxVAB1SfDC6pFzK5DY9nhbj57E.roa (raw, json)
Hash identifier: HrDXbNZM6m0ZYYte3eMUGoKcVr99Q72IEFallkFKI+c=
Subject key identifier: 4A:8C:55:00:1D:52:7C:30:BA:A4:5C:CA:E4:36:3D:9E:16:E3:E7:B1
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F993BE97AC6DA622AF3E3DF1AA10A
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa
Signing time: Sun 01 Jan 2023 16:34:51 +0000
ROA not before: Sun 01 Jan 2023 16:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42163
IP address blocks: 46.143.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:99:3b:e9:7a:c6:da:62:2a:f3:e3:df:1a:a1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a8c55001d527c30baa45ccae4363d9e16e3e7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:00:56:f9:74:bd:de:9c:91:0a:b4:9c:d7:
cc:4f:3a:ba:07:86:a8:61:69:df:20:4e:ad:de:e0:
e0:79:1f:9d:b1:ac:14:ba:ca:01:6a:d9:7f:13:9d:
b6:09:e8:09:01:73:3d:43:0e:79:00:66:2f:cd:67:
fe:5c:55:3c:4b:fd:4e:f8:42:60:49:db:d6:b2:aa:
e6:c7:c0:b9:32:8e:0a:68:f1:30:23:7e:53:94:db:
e6:a7:79:88:88:75:88:78:a3:56:58:a5:6a:32:5b:
b9:73:85:85:75:0d:57:7a:4d:c2:86:38:57:e4:f4:
43:51:51:7c:8d:93:25:d8:bb:f5:41:87:77:a9:09:
cb:ad:3d:9d:df:7d:e4:bc:4b:19:9e:ba:3f:d7:8d:
60:11:d4:ed:1e:41:95:21:38:f0:f1:dc:de:a7:38:
26:3c:bb:6c:a2:ea:b6:11:33:7e:c8:d7:24:33:46:
2a:2d:0f:21:62:9c:47:f0:72:ca:17:9e:c3:65:0d:
28:c2:be:80:a1:89:c1:68:c4:52:c4:34:1b:3f:8b:
76:1b:90:2a:0d:e8:76:b8:63:d5:87:01:0b:0f:f4:
38:71:b1:f9:61:93:aa:36:3d:21:de:75:51:5c:d2:
96:29:19:7e:db:5a:52:e1:e2:d6:f9:87:ef:2f:5f:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8C:55:00:1D:52:7C:30:BA:A4:5C:CA:E4:36:3D:9E:16:E3:E7:B1
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/SoxVAB1SfDC6pFzK5DY9nhbj57E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.194.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7a:16:1a:b5:af:ce:ec:c0:81:49:ce:02:4b:e9:eb:6d:b8:
54:bb:ac:7b:23:56:a1:f5:35:05:00:2d:ea:06:37:ab:0d:19:
fd:17:9f:d4:a4:e9:4d:5b:dc:3e:36:28:eb:81:71:60:c9:2e:
0b:42:97:05:83:60:b7:14:37:08:9c:ad:fd:fd:61:a2:96:31:
82:ea:1b:18:a5:fd:af:da:41:4a:83:0c:84:5c:ea:aa:60:73:
28:9c:10:9d:5e:a4:f7:15:26:6d:63:77:83:7c:02:17:33:c7:
ab:93:f8:1b:d0:3a:d0:4f:0d:53:a6:5d:dd:51:1b:ae:66:95:
32:df:50:46:26:42:2a:9a:c5:70:fb:85:2a:ff:6e:87:85:2f:
8b:12:4e:e1:38:0a:35:32:99:65:c0:2e:08:98:e0:91:5b:8c:
d1:10:0e:0e:cf:91:db:49:b8:1d:3d:3c:1d:56:32:6c:19:05:
e4:91:74:1b:8c:36:09:57:f9:4f:17:2e:a7:ae:3a:97:61:96:
6f:5f:14:9a:b0:c6:7d:42:d8:96:db:e1:43:1f:5a:ff:95:48:
a1:7d:f7:fc:8b:2a:ed:65:29:10:f7:17:0e:62:10:84:1d:61:
3f:10:41:07:73:8a:96:45:60:fa:4d:0d:ce:4b:e2:a2:55:8c:
84:49:dd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:45 2024 by rpki-client on console-fra.rpki-client.org