Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/gW_40r64IKUIXht-W6RS1cgD974.roa
File: gW_40r64IKUIXht-W6RS1cgD974.roa (raw, json)
Hash identifier: xR+TWorUpJNlnkYlyBBlK1FXQX40KBI4N6GspaG5D1Q=
Subject key identifier: 81:6F:F8:D2:BE:B8:20:A5:08:5E:1B:7E:5B:A4:52:D5:C8:03:F7:BE
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018C38D558420C8FE997DE9954728259F3EE
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/gW_40r64IKUIXht-W6RS1cgD974.roa
Signing time: Tue 05 Dec 2023 07:15:54 +0000
ROA not before: Tue 05 Dec 2023 07:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 92.114.40.0/22 maxlen: 24
46.20.212.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:d5:58:42:0c:8f:e9:97:de:99:54:72:82:59:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Dec 5 07:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=816ff8d2beb820a5085e1b7e5ba452d5c803f7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:5c:1e:f0:7d:e2:84:81:f8:fa:a0:32:9f:
2d:8a:6a:1c:77:cb:f5:91:24:23:e8:2b:3a:f2:9a:
9e:9d:b9:21:f8:40:5f:7c:a2:96:be:48:8c:db:01:
bd:7d:25:01:de:f4:00:dc:2a:88:35:92:16:02:e0:
6a:07:df:5c:55:65:9b:43:50:af:ea:35:c1:f1:b7:
13:33:40:94:e7:0f:e0:d4:1a:c6:b2:ff:79:d9:8f:
9f:3d:ef:e4:fb:19:a9:1b:22:ae:96:b2:09:5b:b9:
3e:f3:71:c1:9a:10:0a:37:1e:10:30:c5:9d:3b:1f:
74:b5:cd:fd:90:4c:74:9a:c1:64:dc:6a:5d:bd:8b:
2b:91:b5:69:29:4e:2d:cf:cd:b6:21:01:de:57:49:
24:a1:3e:fa:6c:14:5c:9d:1f:15:8e:99:da:32:cb:
fe:fb:3b:9f:c0:ce:0e:3a:f1:ca:57:eb:03:53:83:
38:51:30:ff:e8:42:e7:92:3e:0a:e4:14:74:bb:c8:
7b:ff:83:21:1b:65:04:99:98:25:cf:91:4d:3b:66:
8c:e7:72:c3:ce:e4:d1:99:4a:f6:58:60:68:b3:8a:
bc:45:db:94:16:50:ce:cf:08:e7:7c:48:a2:28:3e:
74:90:f0:03:00:7d:1c:65:2f:84:6e:7a:53:11:fd:
07:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:F8:D2:BE:B8:20:A5:08:5E:1B:7E:5B:A4:52:D5:C8:03:F7:BE
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/gW_40r64IKUIXht-W6RS1cgD974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
92.114.40.0/22
Signature Algorithm: sha256WithRSAEncryption
47:3c:95:02:f9:11:a2:57:a9:02:f2:bb:9b:9f:ce:be:2d:da:
ab:e9:3c:f1:9b:67:55:80:b8:ca:10:34:32:56:1b:63:32:04:
60:34:01:c6:f0:0e:4c:5e:04:4e:70:11:aa:9a:6d:f4:11:42:
e9:9f:ee:44:32:e4:96:41:66:da:9d:41:44:16:ac:02:a1:ff:
c3:f9:a0:ec:60:5b:d7:31:64:da:6c:80:4c:1d:68:49:01:9a:
f0:51:47:04:eb:04:a3:07:ab:04:23:dc:40:ad:f5:a6:7c:20:
83:19:a2:77:7f:c5:52:9d:26:b2:76:09:d0:e1:14:25:d5:c8:
64:28:6d:d8:81:b8:63:45:74:8e:11:38:ff:cb:30:7d:de:e2:
58:f0:ec:fe:df:6f:8a:5d:ea:93:19:5a:c2:4a:ac:fa:9e:cf:
3c:85:8d:67:59:29:bc:15:70:c8:e8:09:5d:2e:52:bb:c7:10:
41:97:31:1d:73:ee:bf:9b:79:84:7d:bd:ae:c5:99:d5:74:6a:
e3:b2:6d:8d:fd:2d:92:19:7c:47:51:05:37:54:e4:f9:20:cb:
86:1f:4f:09:53:95:f9:1c:94:83:7a:9d:5f:42:30:c3:b2:26:
fd:a8:7d:37:59:d5:92:5d:ba:86:bc:33:47:90:e1:29:19:78:
e2:7d:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org