Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xNQ3f9QCs97vH27Y6aO86feeKnA.roa
File: xNQ3f9QCs97vH27Y6aO86feeKnA.roa (raw, json)
Hash identifier: 70EsGIXx2xMDBuD0j++an2IEMVncDLP1pwyWx7UnGUE=
Subject key identifier: C4:D4:37:7F:D4:02:B3:DE:EF:1F:6E:D8:E9:A3:BC:E9:F7:9E:2A:70
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0188E3981D4C2A53CF3512C4B398E62C2E2E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xNQ3f9QCs97vH27Y6aO86feeKnA.roa
Signing time: Thu 22 Jun 2023 14:52:56 +0000
ROA not before: Thu 22 Jun 2023 14:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198044
IP address blocks: 46.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:98:1d:4c:2a:53:cf:35:12:c4:b3:98:e6:2c:2e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 22 14:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4d4377fd402b3deef1f6ed8e9a3bce9f79e2a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:01:47:87:da:e9:cd:6f:33:2d:cf:45:ef:
8c:18:30:9b:cf:b1:f5:45:65:28:1a:e7:32:cd:59:
52:83:f4:98:80:42:bc:c9:aa:d9:0b:d3:87:1d:a4:
74:c8:ee:23:da:7b:cd:a0:e5:d0:18:96:19:c9:e2:
1f:ee:a9:1b:49:93:8b:85:cb:46:a8:fa:e7:d6:60:
81:e3:e3:cc:d6:cd:6f:85:c2:43:88:17:43:5f:c8:
cf:6e:db:9c:e8:66:2c:af:1d:18:d5:e4:39:14:0d:
f4:84:7a:5f:93:56:51:a5:4e:76:3b:6a:18:aa:84:
aa:e0:c6:3c:b7:06:0a:48:b1:bd:bc:e5:d3:bc:12:
cd:ac:02:59:0f:f2:f0:d2:c7:39:4d:c2:3f:6b:b0:
60:f4:82:18:4f:50:76:69:44:34:21:7d:62:af:e6:
aa:b6:92:1e:9b:1c:0b:a7:d7:cf:8f:64:f2:bb:10:
b4:cf:84:a3:29:df:47:34:b4:46:72:b5:54:0e:14:
de:52:ff:89:d3:1e:28:95:57:21:6d:ed:35:cf:79:
6d:f3:c3:ab:10:7b:dd:84:12:22:61:6f:6c:52:97:
7b:66:a4:d7:5d:ad:b7:b5:f2:f6:52:64:27:78:d2:
20:02:a2:d2:a3:5d:a7:f8:66:78:e9:d6:3b:69:31:
7e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:37:7F:D4:02:B3:DE:EF:1F:6E:D8:E9:A3:BC:E9:F7:9E:2A:70
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xNQ3f9QCs97vH27Y6aO86feeKnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.253.0/24
Signature Algorithm: sha256WithRSAEncryption
24:31:9f:05:81:7b:96:cb:78:9c:cf:62:7f:31:4f:85:b6:3d:
be:2a:c5:9c:17:3a:41:aa:28:8e:23:7f:39:af:84:e3:73:a0:
69:65:59:5c:5b:14:7b:97:1a:ce:2e:1d:61:8d:19:9a:8f:15:
0a:fa:f9:9f:17:c2:b8:9e:ac:e7:5f:b1:82:b4:11:fe:cd:37:
ad:7e:d7:39:a1:8f:da:38:ac:c7:4b:cd:3b:4a:07:08:20:37:
1f:c2:bb:f3:a5:ab:9d:e2:62:17:f9:b0:87:84:79:d7:14:da:
88:51:84:a5:a7:25:01:cf:63:ac:8d:17:49:0c:5e:7c:81:81:
45:50:62:10:06:a5:54:9f:c5:58:d6:2a:b2:fb:9a:32:36:ec:
d3:94:0e:43:62:13:a6:60:46:84:54:c2:b8:1d:08:e0:7a:48:
b4:21:0b:fe:4f:94:51:8d:ab:89:95:0a:70:f1:fb:bd:95:24:
a5:c9:2c:f2:69:b2:bc:1a:f7:55:d1:ac:32:cc:d9:4e:bc:81:
14:21:bb:48:f2:18:08:49:30:6b:91:a5:79:7e:85:c9:b0:f7:
0f:70:a0:47:10:db:2e:98:25:d3:32:b9:eb:04:7f:61:c0:5d:
b9:7d:8a:e4:36:24:44:84:32:3c:14:a6:a8:fd:9b:18:e2:58:
64:8f:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org