Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/30yHof4sXmdJ4ZM9RsTtORGJqpU.roa
File: 30yHof4sXmdJ4ZM9RsTtORGJqpU.roa (raw, json)
Hash identifier: ERxa0BYC88uE+3RsCg1/rQ7QYYBqraFhIxqsZyEhRPw=
Subject key identifier: DF:4C:87:A1:FE:2C:5E:67:49:E1:93:3D:46:C4:ED:39:11:89:AA:95
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0189DE6526EABE0BF2C4692AE7BFCF40C7EB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/30yHof4sXmdJ4ZM9RsTtORGJqpU.roa
Signing time: Thu 10 Aug 2023 07:41:58 +0000
ROA not before: Thu 10 Aug 2023 07:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208864
IP address blocks: 46.243.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 10 Aug 2023 09:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:65:26:ea:be:0b:f2:c4:69:2a:e7:bf:cf:40:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Aug 10 07:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df4c87a1fe2c5e6749e1933d46c4ed391189aa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:e1:dc:59:eb:07:be:c7:bf:81:98:e4:60:
26:a6:36:e5:55:78:20:30:0f:24:8a:d3:4a:18:d7:
23:ed:29:46:9c:f1:3a:20:c5:b7:43:6e:57:86:2f:
05:fd:c3:c2:a2:79:57:c6:03:60:dc:2c:26:18:48:
10:c5:90:0d:07:0d:d1:25:49:54:00:b7:44:51:78:
ca:9d:82:1a:3f:08:e6:fc:3d:d4:79:87:0f:40:ce:
1e:e5:a5:19:e0:32:96:ef:b5:05:24:25:c7:86:2c:
f0:d5:39:ba:46:e9:d5:9f:ac:28:86:af:cc:ef:c4:
e5:16:4d:40:bd:8b:03:03:cc:f0:2f:d2:b6:dc:91:
d9:67:88:ca:2d:66:91:15:b3:05:89:4f:66:60:68:
0c:37:cd:04:54:7b:dc:71:c5:d5:84:dd:08:f4:cd:
ce:f1:3d:9c:df:63:c3:d2:dc:f2:7b:67:be:27:f7:
ad:c6:56:c2:55:be:4b:b5:3d:82:31:c6:79:91:e2:
8f:61:07:45:8f:0c:40:78:78:01:3e:5e:cb:1a:bf:
fc:9f:d7:c0:87:e1:de:3d:e8:97:15:59:b3:6f:3e:
7c:34:35:e0:cd:dc:50:8a:d7:73:12:b0:e5:80:63:
64:28:b6:b8:e2:56:b6:17:60:95:02:4f:4d:5a:df:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:87:A1:FE:2C:5E:67:49:E1:93:3D:46:C4:ED:39:11:89:AA:95
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/30yHof4sXmdJ4ZM9RsTtORGJqpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
96:4b:ca:f2:8e:78:4b:ec:d4:45:93:ac:4e:ef:17:58:bb:6e:
85:f4:fe:76:51:c8:cc:2a:df:d1:be:ab:02:9d:51:20:36:cb:
e5:a3:8d:5b:8a:05:d3:92:2c:af:86:98:fd:24:4f:57:4e:ca:
88:08:d7:5e:73:c5:ad:6d:f8:93:1a:39:00:82:e3:fe:0d:17:
02:80:28:ff:22:05:3a:21:6f:cd:6c:69:1c:34:2a:18:df:08:
ce:ec:5b:8c:9f:de:fd:23:c7:29:1e:45:ea:5a:5d:0d:10:a2:
ce:18:cd:6d:ba:eb:d9:41:89:5e:1e:69:24:9c:6c:38:d9:ed:
91:9c:f1:3b:38:91:83:c9:74:e9:cf:23:df:69:bb:07:66:c7:
76:3f:1f:d3:e6:2b:f3:6d:e9:ac:59:42:a8:af:d9:cf:c1:54:
c3:c5:18:ce:c0:48:5d:16:ab:13:80:f7:be:5f:6c:53:b9:30:
63:fe:f3:9e:29:08:89:f0:d2:0b:e7:08:ff:0c:14:2f:e2:10:
a5:e8:47:8d:45:aa:8d:65:87:25:cc:81:41:51:79:da:64:ba:
cd:c5:86:0c:f8:09:f0:21:45:f6:1f:e3:28:cb:19:c2:51:0a:
02:a9:27:33:20:0a:78:0a:32:96:86:28:b3:ea:40:9d:fc:02:
f7:6b:61:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org