Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/ZlsaniGsewIJ5vDZlmIUagL_p9w.roa
File: ZlsaniGsewIJ5vDZlmIUagL_p9w.roa (raw, json)
Hash identifier: gDXmE3kPMS7UKjMakTTv3aRp36gMX5tozlKDnkGyhLs=
Subject key identifier: 66:5B:1A:9E:21:AC:7B:02:09:E6:F0:D9:96:62:14:6A:02:FF:A7:DC
Certificate issuer: /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial: 018570FBABA23A1544B38748F678CA1F8462
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/ZlsaniGsewIJ5vDZlmIUagL_p9w.roa
Signing time: Mon 02 Jan 2023 05:36:59 +0000
ROA not before: Mon 02 Jan 2023 05:36:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48346
IP address blocks: 46.149.100.0/24 maxlen: 24
2a10:1c00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ab:a2:3a:15:44:b3:87:48:f6:78:ca:1f:84:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Validity
Not Before: Jan 2 05:36:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=665b1a9e21ac7b0209e6f0d99662146a02ffa7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:8e:fd:1a:b1:d0:13:d3:24:30:e5:57:d1:
ce:7d:11:66:1d:a8:a7:bb:f4:36:06:ef:fb:e4:25:
b4:3b:01:26:5b:b7:d7:83:ed:b0:bd:aa:f1:05:4e:
55:ee:d6:f7:d7:12:0b:52:eb:c6:58:48:3c:c6:2a:
df:f1:57:dc:07:61:37:87:17:04:86:03:32:b7:0c:
df:13:49:d5:b4:92:90:02:a5:6f:76:74:03:52:ee:
4c:f2:88:43:15:89:2f:fb:7f:83:6a:f8:d2:60:85:
d6:e7:81:2a:55:b6:24:eb:eb:75:dd:0f:af:02:f0:
be:20:f2:c2:53:41:5e:90:91:05:f4:f1:78:32:e3:
f0:df:47:7d:af:fc:38:39:67:86:41:87:00:4a:9e:
78:b6:67:9d:19:99:dc:86:44:f4:77:1b:19:79:64:
87:6c:0b:32:f5:65:94:b4:2b:41:4d:45:04:ec:cb:
f7:03:9b:f3:16:38:4f:9a:85:cc:3d:90:a0:8d:9f:
6b:3a:aa:5c:e0:30:42:05:3e:41:70:a2:1a:1c:df:
e1:c1:fd:f2:c5:cd:38:c7:b6:9b:d0:c7:2f:72:24:
34:b8:1e:97:02:f1:63:74:45:91:61:96:45:c9:53:
a9:7e:de:c1:90:eb:92:73:c5:ff:02:8b:7c:5f:ca:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:1A:9E:21:AC:7B:02:09:E6:F0:D9:96:62:14:6A:02:FF:A7:DC
X509v3 Authority Key Identifier:
keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/ZlsaniGsewIJ5vDZlmIUagL_p9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.100.0/24
IPv6:
2a10:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
94:2d:10:5a:55:8a:c0:c8:aa:b4:66:fb:4e:f3:a5:02:ad:16:
4b:c8:6c:40:a1:90:82:ee:26:bb:dd:b3:44:8c:46:d6:a4:e3:
8f:77:77:00:dc:5a:96:c6:b1:8b:9e:c7:58:f8:8d:91:1a:1e:
22:3d:46:7d:d7:66:97:b3:56:b0:e4:dc:27:35:1b:53:44:7b:
68:ff:c6:00:bb:88:43:15:1c:e8:8e:60:ef:0a:a3:4d:1d:86:
27:ed:dd:73:13:8b:80:3b:70:84:f1:0e:95:c9:f4:38:7a:aa:
18:68:ba:b0:45:28:d0:aa:49:f8:78:17:8c:0c:61:5f:34:ce:
ac:a3:c4:02:04:96:f4:77:b6:bb:ca:d2:35:7a:66:0b:f0:13:
13:a7:c6:fa:d7:69:50:35:61:c3:2d:1f:b7:ae:35:af:6b:de:
34:b7:a0:ea:4f:5b:28:49:32:e9:28:1a:e8:b3:dc:b1:11:41:
c6:ec:15:25:e2:df:2a:d1:39:39:bd:75:e7:af:21:5a:67:87:
b8:f3:d5:bc:b5:bd:c9:19:d9:02:a8:0b:e6:5a:82:79:1a:44:
19:40:3e:17:c9:e0:97:e3:1c:71:c9:ad:7b:43:54:b1:36:91:
c7:87:1b:23:6b:32:49:59:56:b4:a1:15:61:c1:cd:c2:ba:4d:
8b:e2:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:27 2024 by rpki-client on console-fra.rpki-client.org