Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/oN6Hk9LJhhHIGJ2PwC9_F9pfE0w.roa
File: oN6Hk9LJhhHIGJ2PwC9_F9pfE0w.roa (raw, json)
Hash identifier: EkCOLrvR7BtkU//gu873F0Yx4GaK8wZMSZADuRDmSik=
Subject key identifier: A0:DE:87:93:D2:C9:86:11:C8:18:9D:8F:C0:2F:7F:17:DA:5F:13:4C
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F9E05606CC053FA39A9AC62D67218
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/oN6Hk9LJhhHIGJ2PwC9_F9pfE0w.roa
Signing time: Sun 01 Jan 2023 16:34:52 +0000
ROA not before: Sun 01 Jan 2023 16:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57405
IP address blocks: 46.143.224.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9e:05:60:6c:c0:53:fa:39:a9:ac:62:d6:72:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0de8793d2c98611c8189d8fc02f7f17da5f134c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:8e:5f:19:8f:94:77:86:03:dc:0a:d6:b8:
f9:54:8c:28:ff:7e:c6:e2:58:96:c4:19:d5:28:08:
99:1f:ac:b9:04:c6:0e:f0:2b:02:ab:bc:5f:ef:98:
4f:83:40:83:6a:41:3e:f5:ab:f9:fb:b0:7a:75:62:
98:a9:69:a5:f0:c0:fe:20:18:05:63:a7:3f:c0:60:
6a:0c:60:d6:2e:84:82:78:5b:82:ab:6b:96:f1:bd:
41:43:78:3f:e5:5a:45:c3:15:4f:ad:9c:1b:c1:3e:
0a:01:76:8e:33:1c:96:39:a7:3f:a0:94:d7:df:50:
d4:bc:29:8b:a9:39:06:8e:8e:79:4f:b1:05:c3:a4:
65:ac:56:45:6b:41:6a:cd:12:ee:47:f2:b5:df:59:
8d:d3:ad:96:2a:7b:5a:e1:cf:73:37:20:2c:00:62:
f2:f7:41:82:f2:89:ae:bf:c4:64:15:10:59:99:38:
12:5e:9b:9b:1b:25:54:db:a4:99:af:90:6b:bb:d0:
7d:1a:1f:b4:ad:af:c0:27:cf:4c:8f:5e:85:54:70:
20:52:56:d8:65:5f:47:c9:d0:4c:86:71:15:3c:4e:
ed:f6:3d:e0:85:dd:45:d0:19:92:24:bd:38:00:02:
74:84:27:ed:29:31:f6:63:9f:74:11:1f:c2:a8:8c:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:87:93:D2:C9:86:11:C8:18:9D:8F:C0:2F:7F:17:DA:5F:13:4C
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/oN6Hk9LJhhHIGJ2PwC9_F9pfE0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.224.0/20
Signature Algorithm: sha256WithRSAEncryption
73:19:7f:1d:6d:a8:73:41:4c:b1:ab:b4:96:e8:32:08:03:73:
ab:97:15:29:73:a5:31:f8:7e:45:cf:8c:d0:31:02:c5:73:b8:
78:5d:2d:a7:b8:38:f3:91:97:10:4e:72:9b:e6:c7:a3:1c:53:
ce:7b:a4:6e:e0:04:15:da:58:bd:49:00:a3:ce:94:a9:45:ef:
7f:ec:0c:45:e9:06:f9:39:3d:8b:95:a0:44:a1:4e:79:99:e9:
45:b9:ab:4e:51:1b:92:e0:02:98:62:40:f2:71:30:5c:a2:67:
3b:ef:a8:ad:3c:1a:56:56:39:ce:ed:58:c9:2d:8c:ef:ff:7f:
99:87:50:f4:2d:65:89:c3:f7:45:b2:2a:2b:8f:1f:67:d1:f1:
cb:98:f9:a4:55:bb:20:37:a7:bf:e8:df:ff:cd:f7:79:81:02:
ff:0d:ad:61:c8:71:37:37:93:f4:2c:56:b6:09:75:00:74:e9:
91:80:74:91:d6:aa:bf:fb:f7:d0:b8:eb:e3:f3:5d:ed:2c:7d:
f0:8c:ba:bd:c9:fb:8c:ce:7e:f0:80:bf:d3:e5:1a:6c:9d:07:
cd:3a:a3:52:1e:da:b2:8a:63:f8:ee:82:7b:ce:29:3b:46:0c:
c1:0f:75:9b:f0:a2:ba:ca:cb:b5:7c:68:50:ef:b3:39:8f:9b:
8b:ff:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:45 2024 by rpki-client on console-fra.rpki-client.org