Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/v2PqI6BpFQc8ZBh4T86-BQ8co9g.roa
File: v2PqI6BpFQc8ZBh4T86-BQ8co9g.roa (raw, json)
Hash identifier: TkJEuF8XHFBU47WPyI0bPuPElnAajIkZpyYD1mVepVY=
Subject key identifier: BF:63:EA:23:A0:69:15:07:3C:64:18:78:4F:CE:BE:05:0F:1C:A3:D8
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 0185711526342B48950DEAE154BCCC79C0C4
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/v2PqI6BpFQc8ZBh4T86-BQ8co9g.roa
Signing time: Mon 02 Jan 2023 06:04:49 +0000
ROA not before: Mon 02 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29396
IP address blocks: 46.22.176.0/23 maxlen: 24
195.189.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:26:34:2b:48:95:0d:ea:e1:54:bc:cc:79:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jan 2 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf63ea23a06915073c6418784fcebe050f1ca3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:cf:24:42:15:d8:69:21:ca:e0:34:0a:e1:
c1:d0:5d:e7:ae:39:51:07:b7:37:85:1b:5f:a2:57:
e4:65:37:cd:a8:78:64:fe:12:74:ae:cc:d7:56:d6:
a8:6c:98:43:70:39:ab:26:a1:11:f4:ba:f5:68:b4:
c1:f3:24:5d:0b:d1:91:3a:2e:88:42:eb:64:df:66:
0a:7e:74:95:e7:db:27:a7:fd:0f:49:77:73:97:e7:
1e:62:ec:a0:05:4d:49:e9:a7:ba:97:14:93:6f:4e:
23:7a:99:f3:ce:a8:3f:bc:61:f2:f4:58:81:a7:f1:
89:7d:cc:f7:50:d8:1a:56:8b:9b:d3:df:45:d1:71:
b7:9d:38:c6:89:c0:f1:1f:6a:ff:44:25:1d:a0:81:
c2:26:41:75:bb:40:5f:2a:59:5d:59:dc:6f:be:fc:
0b:e6:d4:d4:e0:64:1f:5b:64:79:a3:37:8d:79:33:
25:11:60:05:90:bb:a0:41:1e:b1:b5:90:94:a8:95:
36:d8:80:c1:f6:63:b7:42:ae:ad:4b:1a:1a:76:0b:
25:c9:18:33:d9:ed:af:86:b3:4b:52:d2:a5:0d:29:
71:19:f4:f2:fc:0c:2e:aa:9f:cb:b4:3b:ee:37:51:
f4:80:22:82:7e:21:32:60:3d:58:b1:5f:a5:b9:53:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:EA:23:A0:69:15:07:3C:64:18:78:4F:CE:BE:05:0F:1C:A3:D8
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/v2PqI6BpFQc8ZBh4T86-BQ8co9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.176.0/23
195.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
05:40:f8:b7:0c:08:16:a6:a1:4c:23:58:45:77:a1:d2:b8:9f:
61:e2:1e:ba:0c:17:f0:22:17:81:49:5d:0b:84:92:6b:87:55:
7e:aa:d2:2d:e8:f1:cc:04:61:be:61:d7:6a:5e:74:67:22:89:
3e:ff:1f:e7:37:d1:18:ec:06:ff:af:0a:83:90:67:9b:07:df:
54:98:1a:69:89:55:34:2a:8e:a5:9c:e3:2c:bb:96:45:31:cc:
fe:36:e0:b2:9b:8d:49:e7:dc:be:dd:28:10:88:b0:52:f4:f3:
34:ef:29:56:29:8a:a7:fb:51:42:07:db:bb:93:08:12:8e:52:
16:f6:27:ab:10:61:bc:a5:7b:b9:8d:38:a5:e9:a7:93:f3:bd:
6e:13:b3:40:a0:95:03:6c:e0:f6:f7:58:cc:da:87:6d:8d:30:
fd:9f:42:cc:9e:f9:a7:fe:02:4d:64:44:cc:07:dc:2d:54:45:
9d:a0:d5:2a:70:c0:36:90:6d:47:6a:9d:6d:5c:b4:ff:0b:ca:
7e:5f:1b:56:ef:18:11:96:a7:8e:16:84:63:8a:52:99:f7:7e:
08:d7:5b:fd:68:7e:c3:37:ae:63:7c:bd:f8:17:91:8e:d2:34:
02:89:8a:36:c6:3c:81:25:af:74:36:c5:70:ef:68:fb:40:af:
ca:84:fb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:03 2024 by rpki-client on console-ams.rpki-client.org