Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/ctWwy2TWtw6JUCVnlnf2_FzDd3o.roa
File: ctWwy2TWtw6JUCVnlnf2_FzDd3o.roa (raw, json)
Hash identifier: 6g89j6lwmKKxx3sf4EWo7vCTV4kCO4aaqlxIFtDdcUA=
Subject key identifier: 72:D5:B0:CB:64:D6:B7:0E:89:50:25:67:96:77:F6:FC:5C:C3:77:7A
Certificate issuer: /CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Certificate serial: 018870D54330D5BC7A673B59A93E62A0A317
Authority key identifier: 84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/ctWwy2TWtw6JUCVnlnf2_FzDd3o.roa
Signing time: Wed 31 May 2023 08:03:24 +0000
ROA not before: Wed 31 May 2023 08:03:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52013
IP address blocks: 46.183.224.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 10:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:d5:43:30:d5:bc:7a:67:3b:59:a9:3e:62:a0:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841f36fcbf7334eff6b91e80297ea5b25c4ecfd2
Validity
Not Before: May 31 08:03:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72d5b0cb64d6b70e895025679677f6fc5cc3777a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:58:e0:c6:a3:62:91:15:cd:91:14:e1:04:
8a:20:bc:ea:32:95:e3:47:85:ed:14:93:24:af:7c:
11:9e:91:dc:0f:f6:e2:4c:64:f9:a1:da:39:79:80:
05:26:ca:f0:ca:e4:60:a6:21:6f:21:be:89:ce:cd:
46:ee:49:04:d0:95:42:16:92:88:8d:f5:69:10:2e:
70:88:69:12:7e:fc:5f:0c:68:d1:c6:d9:3e:e7:eb:
3c:cc:6b:50:84:16:a6:35:12:4b:73:51:d8:b1:ec:
92:42:82:88:15:98:52:d1:f4:98:9e:72:bb:b4:5c:
56:d9:31:90:2a:f7:1f:15:3e:88:f2:59:8f:53:9b:
8f:28:8b:b5:82:89:8c:64:7f:79:f8:2e:ea:16:52:
b9:50:f6:d5:fd:95:69:ff:28:02:1c:e1:e1:7e:7f:
1b:98:2b:64:dc:b3:e7:89:80:33:7f:c9:21:da:e3:
df:66:57:2b:b5:e5:45:ee:4c:dd:5d:93:a4:4b:29:
21:54:f3:54:12:1d:01:a8:16:8c:79:b9:9e:23:8e:
48:6a:02:b7:bc:20:91:49:60:78:c0:7b:5a:4d:f8:
d8:87:0f:4a:6b:11:72:e7:2b:86:f6:ca:39:61:50:
1d:65:1a:73:50:5e:8e:0a:5e:7f:63:50:46:62:86:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D5:B0:CB:64:D6:B7:0E:89:50:25:67:96:77:F6:FC:5C:C3:77:7A
X509v3 Authority Key Identifier:
keyid:84:1F:36:FC:BF:73:34:EF:F6:B9:1E:80:29:7E:A5:B2:5C:4E:CF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB82_L9zNO_2uR6AKX6lslxOz9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/ctWwy2TWtw6JUCVnlnf2_FzDd3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c37c16-0603-4845-b4d4-95ddb0974e4b/1/hB82_L9zNO_2uR6AKX6lslxOz9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.224.0/21
Signature Algorithm: sha256WithRSAEncryption
83:c7:57:c9:ff:9f:95:62:ce:30:95:5c:8b:3e:27:46:58:f2:
5f:c1:c7:c8:d7:aa:fe:35:5a:a7:17:f6:d2:73:71:b5:3c:c4:
7e:4f:90:85:a5:06:69:6d:61:37:bd:fa:14:5e:fa:db:d3:d5:
44:b8:01:4c:49:b9:ef:16:07:80:08:6a:d0:1f:cb:7d:53:36:
51:04:a2:4e:50:02:9f:d0:d1:72:0b:4d:3d:de:37:4c:49:50:
ef:8c:c2:45:f6:40:39:83:17:c3:66:df:5f:1f:3f:0b:a2:d4:
11:7b:8e:67:b3:60:46:4b:6e:0c:ba:aa:7e:d2:f0:79:c4:7e:
e3:91:76:11:db:61:cf:ac:fb:86:ba:f8:2a:c5:ca:e7:14:64:
72:54:35:1f:9d:a6:af:1d:89:de:c0:53:9d:d1:99:04:1e:5f:
a7:c5:32:76:aa:9c:22:4d:52:b8:16:b9:bd:92:6b:be:7d:2f:
a7:70:f5:4b:40:b6:3a:77:5f:9c:4f:6d:74:c5:49:8d:37:e3:
d9:0f:61:f8:67:b3:eb:2a:df:fe:1a:84:5d:2a:39:d2:0d:3f:
0a:b8:bb:67:0d:84:c0:75:45:c1:dc:5a:53:d8:58:5f:cb:d0:
12:a5:a8:82:d1:22:be:30:ed:f2:09:25:69:31:cf:97:f3:2b:
a3:11:14:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org