Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/N-FFdhwoHcrsJLfpQTBtk6QxpYM.roa
File: N-FFdhwoHcrsJLfpQTBtk6QxpYM.roa (raw, json)
Hash identifier: dHTGQNIgaN339KeWP/CGkRecWJx+Me4eYA5/i7FZbWs=
Subject key identifier: 37:E1:45:76:1C:28:1D:CA:EC:24:B7:E9:41:30:6D:93:A4:31:A5:83
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01856F94B1AFCFFF424BDBEE7526A65E0067
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/N-FFdhwoHcrsJLfpQTBtk6QxpYM.roa
Signing time: Sun 01 Jan 2023 23:04:53 +0000
ROA not before: Sun 01 Jan 2023 23:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141167
IP address blocks: 46.8.112.0/23 maxlen: 24
46.8.114.0/23 maxlen: 24
46.8.116.0/23 maxlen: 24
46.8.118.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b1:af:cf:ff:42:4b:db:ee:75:26:a6:5e:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 23:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e145761c281dcaec24b7e941306d93a431a583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:7f:4e:3b:c7:d6:a1:57:30:5f:4f:aa:45:
24:84:38:6e:7b:80:b7:de:bc:fd:87:a6:54:ad:11:
55:8f:7a:c0:6c:30:b0:c9:d3:d3:f1:cb:c0:a7:cb:
b0:67:1b:c1:dd:05:03:11:a9:14:26:29:a9:9f:2b:
9a:5f:9a:12:4b:33:0c:7e:7e:50:18:1b:5e:7f:5d:
c5:a6:10:59:05:c1:dc:3a:ca:d5:80:26:ff:ce:73:
b0:13:b8:97:f6:b2:99:c1:d3:c0:4f:f8:50:f3:e3:
16:64:2e:6a:fe:25:72:7f:65:20:d9:f1:80:c4:c3:
35:68:32:50:0d:c0:c7:32:4e:d5:1a:00:0b:15:98:
76:6b:19:3f:f8:60:65:7c:39:0f:8f:91:9b:0a:db:
05:73:ec:67:5a:1c:a8:88:99:d2:fc:59:7d:20:7e:
26:b3:a3:08:b9:1d:01:68:3f:a7:a7:c5:91:e4:70:
83:ab:20:52:f0:ff:47:d4:19:e5:93:6c:97:57:d2:
f6:8c:0f:00:f8:ad:89:4e:f0:9a:77:1e:e7:b4:2d:
35:39:ff:fc:56:c5:5e:48:96:9e:56:66:a3:09:7c:
ab:e7:2c:31:c0:18:a1:65:6b:a9:07:25:8c:03:69:
84:2a:8c:01:7a:b6:e7:43:06:0c:9c:9d:44:59:75:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:45:76:1C:28:1D:CA:EC:24:B7:E9:41:30:6D:93:A4:31:A5:83
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/N-FFdhwoHcrsJLfpQTBtk6QxpYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.112.0/21
Signature Algorithm: sha256WithRSAEncryption
71:c3:ba:f5:e8:74:9b:2f:54:7b:0a:64:ff:99:67:a2:e7:65:
da:2a:7e:b8:a3:f2:0f:47:19:5d:60:8b:86:d0:09:ee:de:1b:
26:d5:01:a9:c3:03:96:c1:96:cd:dd:e5:b5:03:f1:52:5f:a5:
39:fa:43:49:aa:31:49:8e:87:e6:de:3e:c8:6e:04:11:b7:60:
62:39:8c:ca:94:39:8b:53:89:03:9f:4d:c2:58:02:53:e4:24:
a7:68:88:57:5f:70:4c:f0:1c:22:b4:68:2b:4c:42:36:46:d3:
2a:2a:19:43:8e:c2:7e:2a:f9:41:96:a7:af:16:27:59:cd:15:
ca:07:12:a7:41:ff:1e:d9:03:85:9d:c2:cd:0e:1d:c9:8b:b3:
f9:cc:b4:cc:d0:b2:1e:41:0a:5b:7a:c9:a0:48:9b:ea:59:85:
c2:04:ff:7a:e5:ba:e3:47:79:94:49:fc:d2:c8:46:63:19:75:
aa:0c:f7:05:f7:c9:89:29:8a:bf:b1:91:7a:d6:a4:0b:f5:0e:
90:39:2f:28:0d:ce:46:54:f5:48:57:74:5d:fb:9a:e0:fe:59:
55:f9:97:99:c9:e6:2d:07:ae:37:ef:9e:1c:ee:80:64:ad:f5:
cd:43:40:77:b7:d6:ff:01:93:1c:cd:fb:fa:d9:12:ed:ab:7d:
0d:8b:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:38 2024 by rpki-client on console-ams.rpki-client.org