Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/9VhsV1YOHC7EdfgimDjaxJaBOhA.roa
File: 9VhsV1YOHC7EdfgimDjaxJaBOhA.roa (raw, json)
Hash identifier: cJYpyKQ1H23bLolkATXOyM28iElCkIBhcVJIwSWTbWQ=
Subject key identifier: F5:58:6C:57:56:0E:1C:2E:C4:75:F8:22:98:38:DA:C4:96:81:3A:10
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 018905CA29D2555B7C069549BC475656E738
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/9VhsV1YOHC7EdfgimDjaxJaBOhA.roa
Signing time: Thu 29 Jun 2023 06:14:42 +0000
ROA not before: Thu 29 Jun 2023 06:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197290
IP address blocks: 46.31.128.0/23 maxlen: 24
46.31.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:05:ca:29:d2:55:5b:7c:06:95:49:bc:47:56:56:e7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Jun 29 06:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5586c57560e1c2ec475f8229838dac496813a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:d3:cb:79:26:fe:2f:2a:3c:d0:4b:78:74:
c3:d6:76:aa:4a:48:a3:f2:b7:0a:18:7e:66:31:95:
f0:46:d0:70:61:6c:19:5a:08:b9:a6:3a:d2:85:72:
91:a8:21:9f:e8:c4:6e:61:ad:9e:e7:78:fa:44:0c:
66:73:de:c7:a7:7a:7c:1f:d6:59:25:9d:70:50:c5:
8e:84:e1:82:11:49:b6:9b:b4:76:20:32:5e:30:46:
4c:70:0a:99:15:90:30:1e:75:2d:3f:65:ef:f2:89:
9c:d5:c7:38:82:ce:3a:3a:dd:ed:61:95:9a:6f:9f:
70:b3:ef:b8:ff:27:27:ca:a6:b4:b9:b7:29:8a:95:
46:24:ae:a7:f3:3e:30:5d:64:5a:31:4a:1c:b8:95:
10:bf:4e:a1:07:a5:84:e8:94:9b:75:81:58:2a:7f:
fb:ea:5e:b9:c8:8e:bd:29:b0:3c:6b:fd:be:1f:6d:
52:75:8a:2e:38:16:9b:6d:c6:9c:84:20:be:9d:2f:
3b:29:7d:c0:30:91:6f:a6:ba:ff:b9:fc:53:05:46:
85:9a:42:6e:26:fc:09:66:50:ab:d1:5c:7e:41:4b:
5e:62:4e:51:1c:5a:e0:b3:30:fb:c1:f8:df:36:be:
0e:87:dc:b0:b8:23:bc:3f:de:f8:f8:b6:26:3c:d3:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:6C:57:56:0E:1C:2E:C4:75:F8:22:98:38:DA:C4:96:81:3A:10
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/9VhsV1YOHC7EdfgimDjaxJaBOhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.128.0/22
Signature Algorithm: sha256WithRSAEncryption
07:87:14:94:08:54:ca:5a:7a:2c:0f:05:85:0f:32:af:1d:d1:
c8:1a:26:15:33:64:1a:bf:73:3f:34:88:95:32:25:b2:50:cf:
91:c6:5b:c9:4f:11:ef:85:c2:b6:52:67:5d:a8:2b:4d:e5:91:
8d:0c:3f:db:c3:61:fd:fc:85:9d:30:e4:dc:4b:06:1d:ae:7f:
65:d2:f7:5f:35:d3:0d:61:fd:11:1b:d3:03:27:dc:62:33:7a:
a0:09:c8:95:30:8d:2b:ed:cd:b8:ba:86:53:86:d6:63:8e:49:
e4:aa:e6:14:d9:85:41:e7:e2:5a:b3:3d:f5:f8:cb:c7:ad:2d:
50:5a:77:0b:44:99:72:7e:6e:de:bb:f7:43:56:e7:ed:b5:79:
bd:d0:78:f3:89:6a:72:0e:5a:d9:46:3b:ae:e8:a0:d6:ee:a9:
89:5c:5d:d7:f3:f9:de:44:a2:bd:9f:ab:a0:31:b8:d5:c8:83:
fc:26:32:ad:2f:a0:cc:38:c4:16:1e:59:f0:39:dc:ff:37:05:
0d:ad:16:6e:e1:1c:1f:e7:05:68:93:e2:65:ab:04:99:2e:21:
7b:35:ed:a3:4e:9d:27:e1:6b:86:05:55:e7:4d:f6:49:d6:00:
43:10:16:a3:5e:63:ac:92:68:e3:c5:c5:68:1b:21:d6:f2:76:
6a:36:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org