Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/V0bne5a233dqB39TnPlPj3SWSBA.roa
File: V0bne5a233dqB39TnPlPj3SWSBA.roa (raw, json)
Hash identifier: jVskN69nRH0b1F5gaT6wdCSYyLNok7j/bxTVBbOrmds=
Subject key identifier: 57:46:E7:7B:96:B6:DF:77:6A:07:7F:53:9C:F9:4F:8F:74:96:48:10
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018828C8069B4A66BC775CE5428C58F85F9E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/V0bne5a233dqB39TnPlPj3SWSBA.roa
Signing time: Wed 17 May 2023 08:16:17 +0000
ROA not before: Wed 17 May 2023 08:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212807
IP address blocks: 46.107.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:c8:06:9b:4a:66:bc:77:5c:e5:42:8c:58:f8:5f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: May 17 08:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5746e77b96b6df776a077f539cf94f8f74964810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:63:8f:27:e6:78:e1:0f:24:4e:09:7c:28:
08:6b:de:cd:40:0b:d3:b7:ed:dd:84:6c:d6:e2:95:
d5:88:41:4b:5e:6c:56:07:d1:c2:51:80:04:06:26:
6e:30:a6:fe:fd:9e:59:54:5b:8c:cd:d2:c5:5f:aa:
65:6f:80:af:6b:d1:32:c9:a6:13:4d:ef:04:e4:e4:
59:3a:60:80:1b:61:d7:40:e1:8a:80:e8:4f:0e:a3:
58:44:4c:17:c1:0e:a0:ec:63:37:c5:52:52:cd:18:
38:e2:34:af:79:80:03:48:da:8c:d1:e0:69:9e:65:
5d:88:99:f5:9e:d7:7a:d2:e4:19:a6:e8:b3:5b:dc:
19:fa:a4:93:7f:4f:db:e0:f6:24:e0:a9:a1:b8:63:
5e:27:e8:a0:19:29:41:ba:04:12:0e:73:20:04:e9:
28:e0:64:eb:c6:79:15:fa:70:ca:3c:46:2f:da:9b:
69:2d:d7:7f:9d:bf:f1:ef:c1:f6:c5:7b:63:20:e5:
f0:f9:5a:8b:53:93:a6:69:d3:1a:7a:a5:1d:2f:86:
33:7f:5b:6d:7e:8f:32:d0:1f:91:fd:4d:ca:66:0a:
8b:2f:12:d2:19:e6:05:d0:cc:d7:89:a8:b7:6d:6c:
d1:c8:2e:7e:72:e1:53:f5:c1:10:9c:e3:1c:df:a7:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:E7:7B:96:B6:DF:77:6A:07:7F:53:9C:F9:4F:8F:74:96:48:10
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/V0bne5a233dqB39TnPlPj3SWSBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b2:c7:95:be:92:7b:1e:71:62:9b:d4:74:22:17:fd:e8:46:
a2:b8:2f:c7:78:1f:07:3e:20:39:40:77:9a:d8:b5:be:7d:dc:
fc:a9:2f:86:38:a7:91:a1:67:0e:cb:4b:26:0e:02:6a:b5:0c:
ac:43:10:b5:77:6c:a6:6a:46:ab:df:63:cb:3c:89:fe:19:67:
90:4f:be:40:a3:1e:09:34:9a:7f:be:c3:54:94:19:1c:ab:28:
0d:7f:8f:33:80:e1:24:7d:53:e0:3a:70:a6:1c:37:e4:32:e4:
20:3a:f8:dc:ee:47:3d:ec:06:47:02:0c:29:f6:09:26:4a:85:
bb:5f:99:78:de:82:7d:ee:29:52:04:59:84:49:f4:04:c3:64:
75:32:70:c5:55:50:8b:24:b1:f1:cc:75:f7:9f:23:7b:47:c0:
21:a7:a8:78:47:f2:dd:8b:61:44:85:02:08:70:85:cb:c3:73:
26:dd:71:50:e8:0a:c5:b2:a0:d2:cc:c6:a7:df:2c:06:3b:b1:
12:48:24:e1:c1:41:7e:bc:d0:14:4b:43:ab:c9:29:ce:8c:f8:
72:62:51:db:7f:d7:bf:e8:ae:bf:d9:b8:7d:91:0e:20:d8:3b:
a9:14:29:92:fb:2f:93:ae:f5:c0:14:aa:be:d1:7f:9e:41:d0:
b4:b4:b5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:47 2024 by rpki-client on console-fra.rpki-client.org