Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/sH5dPKNO9kip5VC5sekjmdeJ-w8.roa
File: sH5dPKNO9kip5VC5sekjmdeJ-w8.roa (raw, json)
Hash identifier: 9wWUNx46MiG8Fpj0X2UFSJVHKcI5czTwIuGTd1YY8y0=
Subject key identifier: B0:7E:5D:3C:A3:4E:F6:48:A9:E5:50:B9:B1:E9:23:99:D7:89:FB:0F
Certificate issuer: /CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Certificate serial: 0185704BBD4AC4FE9918BD1F2FE3F2BC2D69
Authority key identifier: BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/sH5dPKNO9kip5VC5sekjmdeJ-w8.roa
Signing time: Mon 02 Jan 2023 02:24:49 +0000
ROA not before: Mon 02 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49283
IP address blocks: 46.182.160.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 07 Feb 2023 13:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:bd:4a:c4:fe:99:18:bd:1f:2f:e3:f2:bc:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef2158a0f2a42617a821a0b4fcc9c9a93f4246d
Validity
Not Before: Jan 2 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b07e5d3ca34ef648a9e550b9b1e92399d789fb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:7e:94:5f:fa:f7:9e:cf:94:04:41:3d:f3:
58:4e:36:39:6c:cd:42:15:55:bb:07:d7:82:17:00:
9e:61:ef:e0:0c:9c:f1:4a:74:d6:c8:b1:bb:db:9b:
27:98:b7:8f:47:24:a0:e8:8c:d5:ec:04:5c:d7:d5:
ac:d8:39:4b:38:07:cd:dd:38:58:3c:e0:c5:f8:98:
40:50:a2:6b:fb:29:31:5f:a2:71:14:63:d7:41:c3:
ef:31:8d:a8:e8:7f:30:d8:3d:4a:e1:d4:54:da:d0:
31:18:e4:e0:3f:3a:84:dc:3b:8b:c1:11:22:51:61:
2a:a7:a9:8a:fe:d6:28:2e:6f:f3:10:04:98:68:41:
1f:5a:36:ed:10:5f:a3:45:fb:24:ce:f1:2e:39:65:
12:bb:a7:79:88:d4:3f:47:f1:b5:d7:ec:74:08:2c:
f0:5b:c9:80:ff:bc:3a:db:54:f3:42:09:09:30:f9:
5d:71:84:53:ce:93:8b:31:0c:3c:74:cc:c5:8b:eb:
ef:d2:e6:eb:9b:24:d8:91:86:86:38:a7:df:d2:5d:
8f:18:0f:c1:57:fc:21:3d:c3:79:2a:e8:3c:c2:23:
c1:c5:2d:14:a9:78:17:29:05:d4:38:0a:36:41:0d:
58:5c:b6:84:f2:20:69:9a:52:a7:1f:ca:f8:2c:9c:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7E:5D:3C:A3:4E:F6:48:A9:E5:50:B9:B1:E9:23:99:D7:89:FB:0F
X509v3 Authority Key Identifier:
keyid:BE:F2:15:8A:0F:2A:42:61:7A:82:1A:0B:4F:CC:9C:9A:93:F4:24:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvIVig8qQmF6ghoLT8ycmpP0JG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/sH5dPKNO9kip5VC5sekjmdeJ-w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/42d821-74af-4ced-94ea-027b58e6fdc5/1/vvIVig8qQmF6ghoLT8ycmpP0JG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.160.0/21
Signature Algorithm: sha256WithRSAEncryption
86:a1:f7:07:da:f3:3e:d8:66:dd:15:90:23:39:a8:53:e4:d9:
48:25:63:9a:51:99:d2:af:42:52:7e:9c:c7:34:0a:3e:70:50:
b2:4c:e2:f6:18:ae:35:ff:06:9e:c3:a3:08:8d:40:01:cf:67:
02:0b:4d:a8:05:4c:9a:7c:14:83:a6:87:1f:ca:ba:ea:65:e8:
1b:de:ee:77:7b:9f:6e:c7:cb:98:f7:34:42:65:7c:89:89:4f:
8b:fb:6a:77:9d:ec:61:22:38:c0:ab:fb:f0:a6:bc:6a:3b:20:
15:63:fc:9a:5f:52:f9:1b:7f:3b:ff:08:c2:f9:23:6c:20:d1:
96:73:41:d7:48:c1:8e:7f:35:fb:b2:42:70:82:67:79:34:b7:
43:8d:ba:05:fd:a3:22:46:fe:7a:c6:92:44:4e:cb:8e:a5:b6:
41:1c:9b:22:5d:20:1f:7e:fb:ea:ff:3d:e1:7f:18:cb:b9:b6:
be:e1:24:41:87:af:93:53:aa:6a:2e:fb:2c:9a:71:56:86:94:
06:9a:79:71:4c:d5:fc:c9:e8:b6:17:3c:fe:40:9a:d2:31:77:
62:36:d9:3c:45:a0:05:50:f8:6e:e1:80:cf:27:8e:e7:2e:cf:
59:8d:dc:71:46:93:18:91:5f:d8:f2:50:c4:67:5b:f3:ab:9d:
1a:0b:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-fra.rpki-client.org