Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/_QXycq3o1IgJrpkl4OKqsp26x7Y.roa
File: _QXycq3o1IgJrpkl4OKqsp26x7Y.roa (raw, json)
Hash identifier: Hrr+nsKmCtlRZchaJ2y6HMmbRiJ7UiZofY/ytXLjLAs=
Subject key identifier: FD:05:F2:72:AD:E8:D4:88:09:AE:99:25:E0:E2:AA:B2:9D:BA:C7:B6
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 01856CEF3938F587D5EA51F9C67C9E445561
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/_QXycq3o1IgJrpkl4OKqsp26x7Y.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.255.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:39:38:f5:87:d5:ea:51:f9:c6:7c:9e:44:55:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd05f272ade8d48809ae9925e0e2aab29dbac7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:f2:24:bb:8f:62:9c:57:20:5d:d5:13:72:
15:6c:1a:de:61:b1:0a:01:f3:0c:f0:57:cf:d1:f9:
0f:bf:c0:a8:58:91:31:1f:87:67:45:fc:69:bf:51:
cc:d5:4e:ca:b6:af:c3:92:ff:87:71:af:27:61:81:
92:37:1e:3f:94:7d:26:2d:a8:c4:8d:50:9c:ae:ab:
4b:f4:9c:a2:86:73:f4:ad:39:d8:e4:72:53:2d:fa:
f9:b5:fc:91:50:85:06:8a:cf:22:10:8b:72:4b:08:
71:30:b3:f8:29:b3:44:30:06:5d:a3:92:31:6b:15:
59:b5:08:99:bb:21:ca:57:3a:f0:09:95:d5:da:f3:
d4:b8:8f:f9:56:2d:9f:76:b5:12:b9:a4:a3:ab:1d:
00:70:b5:4c:f0:32:1b:d5:37:5c:57:35:d5:ee:17:
cc:eb:7e:16:40:4f:27:3d:8b:1a:f3:bf:4d:16:91:
a3:81:de:f5:67:03:2f:91:85:96:9d:3d:e1:79:cc:
2e:d7:e3:45:55:82:8f:a4:24:7b:60:f5:8b:23:28:
41:ca:42:30:73:6b:df:fa:48:16:78:44:88:90:c3:
a4:d9:d9:61:ad:59:b0:9d:c5:b6:b9:be:5d:3e:46:
d8:63:84:f2:42:6e:d9:93:bc:51:60:52:f0:39:67:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:F2:72:AD:E8:D4:88:09:AE:99:25:E0:E2:AA:B2:9D:BA:C7:B6
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/_QXycq3o1IgJrpkl4OKqsp26x7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:20:25:81:e6:ed:54:13:e2:14:27:29:59:3e:05:58:5c:10:
9c:4d:68:78:74:90:91:ce:58:2f:f4:c2:82:f6:7e:f9:70:8c:
13:d4:9f:7f:1f:3e:47:d7:9d:3d:5e:c0:a6:98:e4:82:31:d4:
55:07:43:cd:f7:72:31:2a:e5:02:a9:4a:e0:93:6c:d2:27:69:
5c:ff:22:ff:af:05:32:b4:73:18:d1:38:35:f3:83:b4:80:09:
4a:ec:1a:e6:f1:e3:1e:93:cf:e6:d4:53:91:84:4c:d3:c1:1b:
04:3a:c1:98:f2:0d:39:72:91:ed:85:cd:c0:93:8f:80:e4:bc:
28:68:88:45:43:27:73:ec:c7:99:87:49:29:d7:05:47:86:ed:
4b:70:8d:0c:a4:d8:4a:7e:7d:b1:81:14:e0:0d:58:86:ae:66:
9e:ed:4e:61:20:a2:97:1c:a4:3d:69:16:1d:dd:f1:76:d3:02:
1f:e4:97:bf:4c:a5:79:3d:31:78:ef:89:24:62:e9:a9:b0:7f:
cc:e0:fd:7d:78:d3:3d:34:0e:e4:60:b5:b7:5a:f9:c8:0f:7d:
5a:a8:28:5c:56:43:11:44:4d:4d:64:6c:ca:a5:27:bc:31:8e:
52:0f:86:0e:d3:89:6b:b0:c0:7d:0d:4e:ec:af:3c:28:a8:46:
96:68:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org