Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/MBew9TwGsx6Tv-TZXXhirdl-dXk.roa
File: MBew9TwGsx6Tv-TZXXhirdl-dXk.roa (raw, json)
Hash identifier: AMq3A5q24IY8vs1cZeMgSOQdb3FdqTQKwjD9Qdc6x8I=
Subject key identifier: 30:17:B0:F5:3C:06:B3:1E:93:BF:E4:D9:5D:78:62:AD:D9:7E:75:79
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 01856D9D27138F15E5EAA8A5593BB9DCB8F3
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/MBew9TwGsx6Tv-TZXXhirdl-dXk.roa
Signing time: Sun 01 Jan 2023 13:54:53 +0000
ROA not before: Sun 01 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45014
IP address blocks: 46.175.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:27:13:8f:15:e5:ea:a8:a5:59:3b:b9:dc:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jan 1 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3017b0f53c06b31e93bfe4d95d7862add97e7579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:c1:15:8a:65:fc:4d:7e:f0:39:7c:a2:61:
2e:a3:a5:d0:2c:b1:04:9b:92:f4:15:89:ba:3e:8d:
2b:50:48:74:94:26:ea:c2:0d:7a:91:f3:42:dd:d5:
e2:87:9a:d2:32:ab:45:3f:72:bd:f8:b1:96:27:35:
a0:26:90:6c:59:e7:d4:cd:d5:3d:a6:c0:34:20:03:
dc:cf:65:23:e9:2d:e9:c3:90:25:e9:d5:5c:b6:80:
4a:d0:11:e3:b2:8b:bf:31:cb:8d:78:55:a2:d6:8f:
fa:93:db:95:c1:0c:57:99:59:0a:0a:63:da:60:57:
ec:7c:81:06:b7:49:05:93:ec:0e:1e:e1:48:4b:f1:
95:58:db:24:91:b7:72:3f:c7:5e:b0:31:52:d6:08:
3e:f7:fe:e4:39:8e:61:f9:c5:d4:67:0a:e8:eb:f3:
ae:35:d0:3c:43:45:90:e9:9e:42:42:b6:a9:71:ff:
70:d8:8a:a9:85:04:19:9b:9e:04:d5:d4:4e:84:ed:
7d:fd:55:0f:f0:84:35:1a:84:28:17:b4:cc:95:c3:
84:e3:3e:ec:3f:e5:46:33:d4:58:1c:ed:3e:2d:5f:
64:44:75:f1:c1:d5:23:72:78:8c:eb:8e:aa:1a:35:
90:01:91:0e:db:c8:c3:a1:76:9a:08:6a:9a:32:36:
95:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:B0:F5:3C:06:B3:1E:93:BF:E4:D9:5D:78:62:AD:D9:7E:75:79
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/MBew9TwGsx6Tv-TZXXhirdl-dXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:68:6f:78:e4:2b:a5:67:ff:a8:2a:75:54:26:f1:52:09:40:
dc:cc:e5:6e:bf:b7:6f:dd:88:ac:3c:10:8d:2e:65:af:6b:23:
c8:1b:ec:92:02:87:97:b5:7a:d0:07:2b:0a:f5:1a:0a:2b:07:
32:7a:7d:dc:30:7a:6b:76:ef:0b:ce:35:12:8c:d0:81:2c:ff:
65:22:40:fa:2e:4a:6b:8c:3f:09:60:9d:2f:a5:b4:4e:1c:9a:
bd:44:ed:e8:e2:54:1f:24:3a:ea:8c:15:8f:b7:97:29:2c:c4:
70:00:88:c4:61:83:ee:a8:cd:d1:a9:37:5d:8c:91:d7:b4:ea:
33:a5:06:cf:11:59:4f:ad:18:45:49:32:f3:1c:7d:54:e9:31:
06:51:74:e0:d2:b6:66:6b:05:b7:ce:cf:f4:2b:a1:93:62:81:
d3:fb:af:27:fd:9a:cd:09:b1:b6:c2:f3:69:f8:b3:17:2b:6e:
75:1a:ff:35:57:18:d9:fa:1d:20:71:11:93:d1:f4:46:bc:35:
cf:3a:be:f8:a1:d7:95:e3:67:8a:d2:71:07:99:93:1e:4f:4a:
57:e6:35:99:12:97:0b:2f:d0:2d:46:c4:1b:b4:70:d3:ea:36:
60:15:c1:75:86:c5:01:1e:12:0d:95:a0:18:1b:e3:13:63:fe:
77:68:4e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org