Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/5T5TUJjCZAjxeaz5f2ZTPEEbthY.roa
File: 5T5TUJjCZAjxeaz5f2ZTPEEbthY.roa (raw, json)
Hash identifier: MMjMyb+kpZiJnItWQCzHQJTIu6k9ZhJuayV/W1JGMNo=
Subject key identifier: E5:3E:53:50:98:C2:64:08:F1:79:AC:F9:7F:66:53:3C:41:1B:B6:16
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01872772A1BA9ECA786C7DC1A6883F780C07
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/5T5TUJjCZAjxeaz5f2ZTPEEbthY.roa
Signing time: Tue 28 Mar 2023 09:00:36 +0000
ROA not before: Tue 28 Mar 2023 09:00:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39361
IP address blocks: 46.231.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:72:a1:ba:9e:ca:78:6c:7d:c1:a6:88:3f:78:0c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Mar 28 09:00:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53e535098c26408f179acf97f66533c411bb616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:a3:86:5c:25:e7:b9:88:92:8d:5b:73:67:
04:14:29:8a:fb:d8:98:13:28:39:c5:c3:d8:6f:f2:
54:98:7b:41:66:45:85:c7:1f:1e:80:73:e4:08:80:
33:14:45:d0:ac:8c:5a:ac:60:14:02:17:88:73:45:
f2:27:d3:d1:f4:97:ed:b8:da:0b:6a:5e:28:b2:eb:
0b:75:21:91:d6:b4:3c:ca:e4:5a:45:d3:a5:07:90:
38:3d:36:2e:76:af:04:b0:f8:dd:45:39:57:5d:89:
ba:a3:3b:36:1b:3a:e5:5f:0d:27:16:34:2b:db:81:
77:b1:63:35:9c:98:1e:4d:d7:9f:7b:95:57:74:86:
e6:b3:28:87:d4:50:4a:5c:a4:d8:b3:c3:8d:56:9a:
77:a4:fc:b2:8c:9b:b2:37:6c:d6:73:84:99:6f:25:
a1:19:d3:0d:42:d4:f9:d8:58:74:eb:8a:7d:76:98:
ce:e8:4f:5b:f2:c0:93:7f:98:d0:47:a2:57:cf:d7:
98:01:93:21:96:89:38:65:6d:35:04:45:8a:36:25:
ae:e8:aa:e7:c0:f7:b4:f6:99:36:71:55:82:9b:f1:
17:8f:5c:d7:00:27:f2:92:d5:b8:53:2a:e4:35:02:
56:3f:f8:32:4d:4e:b1:34:b3:aa:2e:33:18:f6:e1:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:53:50:98:C2:64:08:F1:79:AC:F9:7F:66:53:3C:41:1B:B6:16
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/5T5TUJjCZAjxeaz5f2ZTPEEbthY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
68:12:e0:cf:a8:56:82:73:42:b5:59:63:a6:58:e4:4e:33:14:
43:aa:55:40:f2:7e:88:b3:c6:cb:3c:74:86:06:e0:c7:1a:0f:
93:2a:da:94:49:f6:29:c0:79:6f:74:ca:67:ae:4d:d4:9a:bf:
ce:de:75:68:3a:37:a2:7a:f0:a4:60:ab:8e:98:12:77:82:c7:
af:47:0a:da:09:45:17:dd:3e:b8:0d:c2:ac:8a:09:db:09:e6:
73:8d:5f:e8:6a:5d:a2:22:a1:7c:58:fc:06:a1:4f:74:2f:43:
db:db:ae:94:9d:6a:57:57:cc:5d:43:98:ca:d9:b6:7c:6f:83:
a3:28:59:c2:4e:5a:74:a2:2e:00:02:36:d4:5a:34:0a:8e:00:
f7:8d:3e:90:fa:af:21:34:41:56:50:94:50:26:3c:58:72:97:
ad:83:a6:e1:dd:35:05:3f:cf:08:3a:67:cc:67:59:0b:2a:74:
73:f0:73:6b:00:de:89:6c:37:fc:75:dc:42:ba:7d:8f:6a:6b:
62:4b:91:e2:d6:64:1c:f1:f0:e0:85:c6:be:59:bc:16:40:44:
82:62:9a:e7:0c:0b:5c:74:b5:b2:f9:e8:5a:cf:a0:b3:21:04:
99:3c:50:cd:cf:08:a7:17:08:31:8f:16:af:83:1b:37:e7:3f:
32:b5:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:57 2024 by rpki-client on console-fra.rpki-client.org