Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/VoO6qSUh5JwQBOc62_wcsQHyDBc.roa
File: VoO6qSUh5JwQBOc62_wcsQHyDBc.roa (raw, json)
Hash identifier: lEsRqaGIFDHPk+A62DfRjVqlKhmyIkiNLNJmsp4kZbs=
Subject key identifier: 56:83:BA:A9:25:21:E4:9C:10:04:E7:3A:DB:FC:1C:B1:01:F2:0C:17
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 0185D446F5412B2E1172701E1DC34EF264C6
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/VoO6qSUh5JwQBOc62_wcsQHyDBc.roa
Signing time: Sat 21 Jan 2023 12:21:38 +0000
ROA not before: Sat 21 Jan 2023 12:21:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61008
IP address blocks: 46.143.240.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:46:f5:41:2b:2e:11:72:70:1e:1d:c3:4e:f2:64:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 21 12:21:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5683baa92521e49c1004e73adbfc1cb101f20c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:60:c5:85:1d:79:33:a0:7f:70:34:e4:0f:
b1:7f:fd:29:6a:aa:70:c8:f8:6d:b6:54:c0:43:9e:
8f:a8:49:50:bb:d2:c5:8a:4b:30:64:92:fc:3b:4a:
a2:e0:3e:2f:6a:2b:e7:d7:04:cd:84:2c:67:ba:bb:
0b:c6:91:1e:0c:45:f1:31:d6:49:21:fd:2c:d5:84:
83:e6:07:cc:47:6c:32:6c:d8:de:35:c5:b6:9c:dd:
99:5a:c5:b4:36:a1:7e:6e:e4:78:65:69:0e:41:39:
4e:cd:8c:d2:90:a1:de:55:ff:b6:d0:07:ae:9c:af:
bd:7d:4e:69:8b:d5:f8:83:7c:a6:b8:57:10:5d:41:
99:71:73:c4:67:61:3d:02:75:3d:f0:8b:3b:f7:de:
f7:e5:74:b2:c4:c4:ef:5a:f2:6a:fb:5f:12:76:4f:
8f:02:70:7e:ad:f5:3a:fb:2c:6e:4b:68:71:8b:31:
c9:f4:90:77:bb:d0:f3:14:b5:28:06:f7:c8:2e:66:
61:44:f3:de:0b:23:cb:9b:c7:83:27:9c:85:53:1c:
bb:42:51:97:cf:c0:f4:aa:4a:0c:ba:a2:98:39:2c:
07:41:35:c0:6f:a4:5b:42:c0:23:03:76:45:fc:41:
5a:0d:b3:45:4c:ce:59:27:dd:52:43:ce:e2:c2:02:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:BA:A9:25:21:E4:9C:10:04:E7:3A:DB:FC:1C:B1:01:F2:0C:17
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/VoO6qSUh5JwQBOc62_wcsQHyDBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:b4:21:e3:a0:c0:1f:c5:f1:13:9b:99:fb:fa:f0:13:0a:14:
0d:2e:9d:aa:a4:b8:eb:70:14:23:0a:e7:c0:de:76:7e:c1:2f:
2d:79:fe:7a:74:a0:bb:d9:a5:e7:dd:b0:92:72:5c:bb:ad:24:
ae:91:44:f4:38:0d:e9:27:79:6a:05:31:58:17:f4:b7:2f:a3:
17:3b:0e:3a:ba:31:71:c3:0b:47:d2:b4:64:db:3e:49:08:a0:
45:82:94:ec:88:55:81:43:c9:c2:cf:63:31:eb:e7:2d:5d:80:
89:31:7f:e0:86:38:4c:ef:38:20:d4:98:a3:67:c1:d9:40:8a:
d8:74:f9:8d:18:40:d6:68:35:8d:43:ca:fa:76:26:a3:4d:d6:
bd:d2:a5:1a:2f:f0:1f:ff:7e:b1:a8:6e:28:86:41:ec:e9:3d:
2a:dd:02:fc:2f:d0:26:26:88:b9:10:79:d9:a7:c8:3b:93:37:
bd:c0:77:48:e7:34:bf:d4:f4:00:59:5b:b6:d5:8a:51:fb:be:
67:d4:79:0c:ed:bc:cf:b2:fc:cb:59:b4:ac:73:0e:40:02:09:
35:5a:b7:0d:78:e7:72:ab:71:92:95:f1:5b:48:3f:62:fc:ec:
e9:47:ff:bd:a5:55:26:8d:6b:74:f3:85:b4:e0:da:8c:1f:f6:
da:d4:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:45 2024 by rpki-client on console-fra.rpki-client.org