Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HjJr_YzEzv8E0nuztkkxiNhrDQo.roa
File: HjJr_YzEzv8E0nuztkkxiNhrDQo.roa (raw, json)
Hash identifier: T8Timx0GO7+P/lgjPYciyEsp+ES0+RSx5Yt+P++kTAk=
Subject key identifier: 1E:32:6B:FD:8C:C4:CE:FF:04:D2:7B:B3:B6:49:31:88:D8:6B:0D:0A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3E54B372327FA3CD01B7F3C90DDB
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HjJr_YzEzv8E0nuztkkxiNhrDQo.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202795
IP address blocks: 46.243.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3e:54:b3:72:32:7f:a3:cd:01:b7:f3:c9:0d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e326bfd8cc4ceff04d27bb3b6493188d86b0d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8b:39:b2:66:4d:d8:63:46:51:f3:0e:f5:d4:
be:68:ca:5a:ba:3f:bc:b3:7e:a9:90:46:73:df:6b:
58:9a:f2:c2:ad:df:ee:cc:ab:2a:e6:cc:59:02:63:
5f:62:59:10:e9:6c:a9:48:f8:90:38:1e:06:1e:4c:
c0:78:5a:34:df:69:ea:d6:ed:7f:ce:64:3b:ba:a1:
e8:a2:64:a2:a2:bb:f2:1f:5f:74:f1:e4:0d:d9:91:
c3:91:80:4c:6c:a8:c4:a9:f6:87:20:b1:7d:10:e6:
55:53:ca:56:2f:ea:19:82:fd:ce:a3:f2:37:98:26:
e0:2e:10:cb:c7:72:a8:81:fe:e5:d7:b0:98:1f:94:
47:c3:04:70:79:d4:e0:67:2a:ed:4a:ed:b2:cd:d8:
b3:a9:51:f1:c8:4f:ce:c2:58:55:55:db:da:09:69:
f9:72:37:fa:72:3e:fc:0f:d6:20:17:83:27:ea:86:
37:e6:33:49:cc:ca:b7:fe:46:02:80:fc:cf:1f:5c:
97:df:b2:c4:ab:2d:1a:c2:7e:90:b8:75:75:09:0d:
fb:02:fe:21:16:56:d0:6f:1c:39:20:03:c5:97:98:
76:77:42:cd:ac:d4:d9:bb:52:da:91:f6:f1:af:f6:
c5:80:69:35:fa:bc:66:43:dc:60:e1:7a:d7:47:93:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:6B:FD:8C:C4:CE:FF:04:D2:7B:B3:B6:49:31:88:D8:6B:0D:0A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HjJr_YzEzv8E0nuztkkxiNhrDQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
35:01:88:a7:86:e3:f5:02:2e:27:32:6e:30:fc:d1:f3:92:10:
70:1f:11:22:77:4d:f1:90:0f:76:62:6e:98:c4:0c:38:ad:33:
52:f0:fc:49:d7:bb:e2:29:72:07:0e:e9:05:13:ab:78:0f:b3:
cf:a2:7c:38:14:65:e6:32:d7:3f:b5:f2:81:2c:9a:9f:aa:02:
8a:5c:bd:42:f4:85:54:9f:9d:29:7e:a0:ed:56:d2:ef:a5:4f:
02:1b:52:d8:98:bf:a2:b9:e9:05:77:24:02:e1:07:e5:94:3d:
3e:cb:69:ab:1c:85:c5:9f:47:1b:02:ba:30:c3:97:c9:87:d5:
c1:ea:5b:62:76:50:32:b3:8a:ea:c7:17:8e:4f:4d:36:58:ee:
f1:d0:b3:93:ca:95:bf:7d:c0:b3:7a:6d:57:f5:da:ac:05:ac:
ae:66:d4:76:d8:b9:ff:15:57:d7:02:4b:ff:41:53:c2:8a:f6:
32:99:e2:a9:35:61:1b:cd:58:09:53:27:a0:83:76:72:12:32:
24:a6:d2:10:9a:0c:b2:13:4b:96:8a:37:48:c5:96:84:64:f7:
97:c2:10:6f:b5:32:b7:5a:c2:88:a7:3f:a7:bb:d9:24:3f:e4:
ba:30:45:40:83:3a:80:bc:18:ab:dc:f4:65:12:1e:6f:89:cf:
a7:92:a9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org