Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8Ab6mWuMV6VgkQ7L_OfNv6GWP0c.roa
File: 8Ab6mWuMV6VgkQ7L_OfNv6GWP0c.roa (raw, json)
Hash identifier: bjWZaLzjS7Pr0lPphAqyKl514Kw9mWGixXact5SyBvo=
Subject key identifier: F0:06:FA:99:6B:8C:57:A5:60:91:0E:CB:FC:E7:CD:BF:A1:96:3F:47
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018BCF3C9ADF409205BDD683577FE59E7432
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8Ab6mWuMV6VgkQ7L_OfNv6GWP0c.roa
Signing time: Tue 14 Nov 2023 19:08:57 +0000
ROA not before: Tue 14 Nov 2023 19:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.20.212.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:3c:9a:df:40:92:05:bd:d6:83:57:7f:e5:9e:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 14 19:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f006fa996b8c57a560910ecbfce7cdbfa1963f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:4a:04:49:a5:9c:56:54:95:3e:3b:24:7a:
37:28:a5:b7:6c:bd:a5:94:d8:35:ee:64:96:0f:fa:
70:14:43:6b:21:4b:9c:ea:5b:96:b2:8c:6c:a2:3f:
fb:4f:21:bd:af:bb:a5:6b:eb:d8:84:87:58:95:f8:
4e:e9:45:1c:5a:2e:3e:b6:a1:30:21:34:80:ea:d9:
16:5e:8d:23:ee:91:46:a7:41:36:d0:ac:0c:a7:1b:
da:2a:6b:b5:ab:ed:b8:8b:af:e1:92:a2:44:0d:6d:
02:81:58:e5:0b:39:e2:fc:a1:63:be:ec:c8:40:ea:
bc:94:19:9c:14:6f:81:51:c1:b3:35:2f:d7:68:80:
75:94:b1:29:c1:71:e7:f8:1a:fe:11:d8:f6:69:0f:
b4:f8:d0:ab:5f:7f:72:fe:10:dc:50:51:0e:bd:8e:
af:12:50:50:53:b5:0f:23:ed:7a:e1:b4:e0:e1:a9:
25:b8:11:dd:4d:af:c9:2d:5d:3c:3c:12:60:ed:cf:
e0:44:49:23:dd:a4:b9:84:98:26:2b:58:6d:16:00:
7a:b9:5a:ea:07:bf:63:5b:99:2a:cd:27:4f:b4:1d:
ce:5d:bc:7e:1e:3d:85:eb:b1:cd:29:a4:b5:50:53:
df:53:7a:71:ac:66:e3:80:aa:f7:ec:4d:d5:f6:2f:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:FA:99:6B:8C:57:A5:60:91:0E:CB:FC:E7:CD:BF:A1:96:3F:47
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8Ab6mWuMV6VgkQ7L_OfNv6GWP0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a2:6f:26:f8:00:05:f9:88:68:7c:4c:13:9f:40:f9:84:db:
2b:2e:a9:b3:7c:3f:95:3e:d9:37:ae:97:08:2e:2b:57:54:0b:
cf:dc:c9:6a:5c:5a:9e:3c:f5:16:ef:81:21:57:53:dd:83:52:
2d:e1:58:aa:07:60:01:aa:1e:91:94:7d:41:4c:d8:14:10:f1:
41:2e:94:db:1c:07:79:f3:aa:83:c4:1f:c4:57:7f:d9:8b:9f:
db:10:f4:54:b2:ef:bf:e4:1d:d0:33:f6:e5:5f:77:92:55:0a:
31:1a:47:50:19:3d:89:97:9a:4e:f6:ad:f6:81:53:79:31:84:
de:2c:94:b4:70:52:76:d0:2d:f6:5c:46:eb:40:35:09:92:3d:
d9:fa:8b:ed:62:f9:e8:8c:80:f9:a6:9a:10:d6:d2:aa:4a:47:
38:9d:2e:17:00:8c:0a:b5:32:b5:0b:30:70:d0:19:a0:3d:c0:
b6:6b:f9:66:4b:32:77:24:2f:76:e1:e5:ae:21:44:d3:c1:b8:
a6:82:1f:c0:dc:75:e5:eb:02:55:9c:b9:14:7b:99:96:83:3e:
79:a6:5d:5d:53:35:84:fa:ae:d4:e2:c5:31:61:97:02:fb:da:
2b:69:51:cc:70:35:5d:17:6e:b8:b5:3b:e5:a4:32:33:7e:ba:
ff:22:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org