Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/muTCzs37DEQzfy57qvjif-vVaWM.roa
File: muTCzs37DEQzfy57qvjif-vVaWM.roa (raw, json)
Hash identifier: 41wYA1Basi7tz7pBPBqmbkHHZiNlToqTDaQPZJkK4t4=
Subject key identifier: 9A:E4:C2:CE:CD:FB:0C:44:33:7F:2E:7B:AA:F8:E2:7F:EB:D5:69:63
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 018CC492446D681A63E4B78071391D46264D
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/muTCzs37DEQzfy57qvjif-vVaWM.roa
Signing time: Mon 01 Jan 2024 10:29:29 +0000
ROA not before: Mon 01 Jan 2024 10:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198246
IP address blocks: 46.31.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 15:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:44:6d:68:1a:63:e4:b7:80:71:39:1d:46:26:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 1 10:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ae4c2cecdfb0c44337f2e7baaf8e27febd56963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:1e:aa:9b:90:28:09:21:00:42:48:df:33:
10:79:62:83:b1:55:db:c3:d8:79:4d:50:60:c3:a2:
50:ce:25:89:36:4e:02:c6:81:e1:70:05:36:cb:57:
bb:9f:4b:98:8f:28:da:b8:c2:52:63:1f:40:48:3d:
87:77:9a:c8:f7:ed:99:30:c1:30:30:42:0a:92:a4:
4d:35:a5:25:af:4c:cb:5a:34:fb:88:36:1d:9d:d9:
1e:61:b9:f7:65:51:3b:16:f2:61:0e:12:c3:d3:b1:
7d:ba:b9:f8:bb:a5:8f:c3:60:97:a2:d2:54:81:b2:
0b:5f:60:2c:76:47:e4:49:a3:2c:02:e3:be:da:27:
56:ab:a0:76:7a:47:64:93:c3:91:2e:83:bb:34:8f:
09:db:19:c0:eb:43:fb:33:4f:4a:e1:06:e2:95:75:
c2:0b:11:8b:2e:1e:93:0d:d1:ef:8c:0d:a7:fb:c3:
28:21:c0:d0:3d:bc:5f:d7:cb:73:ac:4f:05:0e:d9:
25:7a:67:cd:47:a7:3f:6b:c8:12:69:98:a4:9d:34:
6f:1f:33:9b:90:36:54:3c:89:5d:e9:77:1b:d1:e0:
c1:7e:6e:de:ee:0e:2e:43:1b:2c:92:9b:d1:ad:7b:
7f:df:79:13:56:9b:ed:45:a1:44:b5:f9:f8:80:84:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:C2:CE:CD:FB:0C:44:33:7F:2E:7B:AA:F8:E2:7F:EB:D5:69:63
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/muTCzs37DEQzfy57qvjif-vVaWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.68.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a5:06:d5:b6:05:e5:d6:9c:77:92:69:2d:5e:62:08:c6:e6:
3e:50:0f:3a:14:62:2a:9e:6f:49:9b:5c:15:da:3c:81:84:ef:
1f:b6:7d:45:bc:ef:b9:83:8c:97:f9:a8:dc:33:56:05:90:5c:
e4:72:b7:9b:3a:42:fa:0e:67:68:ba:32:de:bc:3c:e0:8c:8c:
62:f7:22:34:f5:88:7a:b4:be:70:53:a4:81:fc:41:2b:fe:d5:
84:9d:d4:f0:68:70:0f:4b:cb:5e:1e:fd:14:0d:25:71:07:42:
51:02:72:b5:ec:4a:e6:16:19:08:c8:69:bf:ae:67:48:81:3b:
e8:39:95:5a:34:36:1b:7a:4d:8f:d8:ad:8f:ac:69:21:5c:40:
61:2d:29:bd:71:e1:a9:81:4e:64:03:6e:d3:c7:9a:71:bf:2f:
79:46:a2:84:91:d9:f7:0b:b5:7a:d9:9d:59:e1:29:f9:a0:34:
ec:94:1e:54:87:33:88:1c:4e:06:cd:7c:48:bf:ef:e2:e5:29:
c7:06:94:2d:36:27:00:e8:d7:97:16:f3:ab:54:57:f5:91:17:
74:9c:3f:06:8a:34:fa:0a:83:d1:af:f9:c5:e0:99:2a:33:cd:
6e:03:99:5e:ed:65:ab:b2:bd:61:d4:43:e1:00:74:74:f9:28:
23:4c:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 19:32:02 2024 by rpki-client on console-fra.rpki-client.org