Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UOaebKDAhThdI-fC3fEJ67zXx_E.roa
File: UOaebKDAhThdI-fC3fEJ67zXx_E.roa (raw, json)
Hash identifier: rFiDa8xOPUlDNc0DVoluFZBem5FK88c/caNK7yliKNU=
Subject key identifier: 50:E6:9E:6C:A0:C0:85:38:5D:23:E7:C2:DD:F1:09:EB:BC:D7:C7:F1
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0188D7C8742BE4A72400FEE6E8756805161C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UOaebKDAhThdI-fC3fEJ67zXx_E.roa
Signing time: Tue 20 Jun 2023 07:50:18 +0000
ROA not before: Tue 20 Jun 2023 07:50:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40975
IP address blocks: 46.102.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:c8:74:2b:e4:a7:24:00:fe:e6:e8:75:68:05:16:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 20 07:50:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50e69e6ca0c085385d23e7c2ddf109ebbcd7c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:ff:bb:ad:10:38:e2:cc:af:f7:ae:c3:2a:
74:ca:14:39:b1:87:bf:ae:ca:f4:0f:6b:de:4b:dc:
86:14:a3:62:8c:48:82:18:e4:84:4d:83:f7:14:f0:
89:bc:14:62:62:66:87:c8:23:48:39:c0:ac:2e:a3:
2d:39:0b:73:20:a7:33:0f:2d:22:c1:7e:69:ef:aa:
b2:ee:35:bf:58:56:7e:1a:35:46:d3:6f:19:65:67:
01:5e:a0:d9:c7:49:2a:45:af:6c:ae:f2:d4:17:c4:
82:e1:7a:4f:d2:2d:39:e4:6b:a7:d9:af:ad:96:95:
a4:ab:06:b9:a7:80:16:5a:f0:00:9b:a3:b4:8c:8f:
e6:61:c6:5a:4a:dc:4e:a1:06:79:e4:de:e8:36:16:
15:cd:f6:0e:9c:b3:34:6f:65:27:b5:5f:7d:fd:01:
d7:c8:ce:51:1f:bb:72:d9:fb:19:fb:d8:ce:9b:6f:
fd:11:6f:1b:86:5c:b8:9e:20:d8:0d:67:51:10:74:
ef:19:72:d2:39:62:1c:41:08:51:aa:83:41:5c:8e:
fe:9e:91:de:81:e3:7d:bb:19:c1:c8:33:bb:eb:86:
4b:1f:54:17:fb:d5:e5:c5:a0:61:76:6e:f8:e2:de:
36:ca:04:36:bd:eb:33:99:b8:01:ff:4c:12:33:f8:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E6:9E:6C:A0:C0:85:38:5D:23:E7:C2:DD:F1:09:EB:BC:D7:C7:F1
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UOaebKDAhThdI-fC3fEJ67zXx_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.235.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:9b:e5:a8:4f:49:cc:63:b1:52:cc:5c:d6:8d:73:48:01:15:
b5:ce:fe:93:b4:a8:f0:ec:1c:17:c0:8f:1e:47:dd:63:52:09:
7a:6d:c0:ff:eb:64:82:e9:f8:73:a4:09:f3:62:b3:e3:9b:1c:
09:3c:6e:7a:7c:22:53:d2:62:b2:f7:ea:b3:84:72:7f:8b:dd:
05:45:3f:a5:cf:fb:8c:f1:1a:ed:12:ef:0f:ab:31:b5:9b:a8:
29:4f:d0:a1:ad:fb:d2:fe:99:0d:8e:fc:2c:26:69:df:0e:ab:
84:92:e8:fa:33:94:40:64:17:b8:ad:b9:e0:83:e6:90:6a:2a:
40:65:0d:25:2c:6e:a0:a2:56:bc:79:f9:9f:0e:94:53:87:71:
7d:50:62:12:27:91:33:1b:c3:69:4f:df:43:26:67:3e:6a:dd:
27:59:2a:ee:92:de:e6:33:5e:b4:28:02:09:04:d5:7b:78:9d:
0a:ed:70:1a:a5:90:48:c9:71:e7:a2:06:4e:70:db:2d:24:e5:
54:0b:5b:d7:30:a6:84:ad:85:6b:4f:28:c8:88:a1:75:cc:c6:
57:ed:37:e6:f6:57:b3:41:0e:18:96:84:b6:b1:fb:aa:d5:4b:
a0:d4:88:5a:6e:dd:38:21:c4:e8:b7:04:ff:e9:af:00:05:72:
b4:6c:9e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org