Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/s2Mjft8SGThUPQ8fPEfYWFq9sAA.roa
File: s2Mjft8SGThUPQ8fPEfYWFq9sAA.roa (raw, json)
Hash identifier: kBTIO4vQWvIVNsdlx2qJllZtN1J79bhYEVEVfM/yYtQ=
Subject key identifier: B3:63:23:7E:DF:12:19:38:54:3D:0F:1F:3C:47:D8:58:5A:BD:B0:00
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 01856F6FF14FAFD8E9FC8F6F6C0A0E5BD4EC
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/s2Mjft8SGThUPQ8fPEfYWFq9sAA.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.174.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f1:4f:af:d8:e9:fc:8f:6f:6c:0a:0e:5b:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b363237edf121938543d0f1f3c47d8585abdb000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:a2:8b:07:2b:f2:33:2c:d0:79:0d:b6:af:
08:90:e3:db:1e:c6:4c:da:8b:9c:fd:06:c0:1d:45:
98:be:6c:7b:cd:bc:7b:e9:a7:f1:1c:56:e2:ea:6d:
df:cd:c5:c0:ca:78:70:81:b4:df:c3:66:6c:09:dd:
cb:d3:44:71:df:0e:00:92:1d:d9:39:58:5e:d1:78:
43:2e:41:7e:ab:ed:21:67:8d:5d:a0:1a:4f:36:ed:
40:0c:c3:46:ab:d5:6e:1b:71:06:12:49:5c:1d:7a:
13:ef:e3:74:81:65:c1:36:78:7f:ff:80:6a:d2:b5:
11:2e:06:98:1c:db:c2:92:db:c0:b7:61:5d:36:ef:
1f:e6:38:d0:5b:58:86:51:a2:8a:6c:95:56:9e:fc:
ae:62:1f:71:f1:ac:6c:d6:2d:66:54:b7:a4:78:ab:
ba:c6:4c:e7:4e:aa:21:ec:8f:00:7b:4e:fe:49:27:
e6:d6:af:a8:56:09:36:39:b9:e2:d1:c5:8b:ab:53:
5e:00:f1:2f:d7:52:57:41:1d:c7:0f:5f:5d:06:c3:
0d:cd:5e:7f:3a:db:b0:06:3f:6c:1b:fa:f7:18:1f:
22:81:e5:6b:51:b1:e6:56:32:e9:53:99:00:98:f7:
d2:6f:81:f5:01:b5:14:04:cd:0e:82:cd:10:32:d5:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:23:7E:DF:12:19:38:54:3D:0F:1F:3C:47:D8:58:5A:BD:B0:00
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/s2Mjft8SGThUPQ8fPEfYWFq9sAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0/22
Signature Algorithm: sha256WithRSAEncryption
16:80:c6:ef:1b:89:d0:9f:f5:ce:15:d0:51:a2:7f:28:5a:06:
22:9f:97:46:50:d3:72:47:6c:91:5e:ee:cd:7b:54:b0:02:f6:
f4:81:ed:7f:6b:78:f8:c1:f7:a5:d4:4f:aa:84:80:2b:72:ad:
e9:6b:34:8d:48:21:c0:ca:75:ef:0a:bd:35:df:aa:95:86:45:
31:a3:61:d9:b6:84:24:ac:0b:c0:9a:b7:5b:4a:73:36:1e:5b:
d4:8b:ef:db:0c:c4:bb:b3:8c:f4:b7:27:a5:47:73:09:c0:89:
79:ac:2b:76:e2:6e:77:3a:06:98:49:ed:14:ae:91:c5:e9:12:
b8:8b:d4:3b:0d:3a:8e:cd:48:9b:63:08:9d:8a:1b:85:b1:d3:
91:e1:f5:8a:86:15:b6:95:33:40:f3:17:61:0e:92:19:08:73:
ab:56:41:7f:4b:5e:88:5c:23:a2:e1:1b:f0:c3:51:1e:a3:5f:
2e:38:40:ee:32:73:c8:a7:d4:66:6e:77:8d:20:c9:e1:a0:40:
04:6e:bf:18:d8:ca:b4:b0:77:e4:d6:cb:ec:ac:66:8c:51:5e:
e5:2a:ce:30:33:9f:c1:53:6f:c2:08:9b:f5:84:ba:d3:aa:f8:
26:ca:f0:f9:95:b2:fb:5c:fb:5c:e1:9d:d8:2c:72:54:16:e3:
35:e0:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:31 2023 by rpki-client on console-fra.rpki-client.org