Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U0uHzDhY2ZGthJZOqB75PEy3lnk.roa
File: U0uHzDhY2ZGthJZOqB75PEy3lnk.roa (raw, json)
Hash identifier: fePVS9GJQ3wDosDzL25ky4NTQhAM7LSgWlWK17pz8y8=
Subject key identifier: 53:4B:87:CC:38:58:D9:91:AD:84:96:4E:A8:1E:F9:3C:4C:B7:96:79
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0189E599085B40E77D8F38F959BF5BAE898D
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U0uHzDhY2ZGthJZOqB75PEy3lnk.roa
Signing time: Fri 11 Aug 2023 17:15:58 +0000
ROA not before: Fri 11 Aug 2023 17:15:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140403
IP address blocks: 46.8.96.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:99:08:5b:40:e7:7d:8f:38:f9:59:bf:5b:ae:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Aug 11 17:15:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534b87cc3858d991ad84964ea81ef93c4cb79679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:b5:62:82:3c:e7:ca:1b:ae:22:80:17:61:
f5:82:8f:37:2c:c5:c9:09:cb:73:7c:6f:eb:ed:35:
ca:7d:08:ae:2c:a6:77:13:86:47:b0:18:e6:3d:50:
83:34:13:30:51:73:29:6f:14:46:40:8a:07:f2:8b:
88:02:05:79:02:ba:92:9a:31:db:4a:c8:13:fc:5e:
c9:e0:14:a1:46:34:35:c2:4a:3f:63:ec:38:a2:07:
c6:8e:e0:bf:8a:1d:57:3e:46:90:d0:61:ad:32:17:
55:55:fb:89:1f:67:ee:c4:8d:eb:8c:d5:aa:40:d0:
39:99:5a:b2:80:a1:e2:eb:d9:52:a1:1d:39:a5:e9:
7a:e1:c5:34:9c:6f:45:47:2d:83:ab:d8:a3:c8:30:
4c:73:4e:c6:00:ce:e7:d0:eb:6c:63:3d:4f:e0:8a:
e7:9b:68:d5:61:eb:9b:d4:4e:db:55:ac:e7:92:cc:
27:f8:be:82:92:34:4f:a0:e3:bd:8d:5f:b2:d6:cc:
1a:e1:d8:6f:37:f4:98:ad:b8:1c:91:c1:00:df:a5:
01:c7:29:d6:74:29:b0:2e:39:e5:73:60:d9:29:c5:
af:1b:c8:4e:cc:5d:0a:ac:c9:5f:a6:21:6a:cb:9f:
ca:8b:fc:fb:ea:be:24:ef:a8:7a:9e:3c:ab:0d:1e:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4B:87:CC:38:58:D9:91:AD:84:96:4E:A8:1E:F9:3C:4C:B7:96:79
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U0uHzDhY2ZGthJZOqB75PEy3lnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.96.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:af:4f:60:6b:c3:98:74:75:21:15:b5:2b:e6:2c:9b:93:b0:
43:9b:c6:63:2f:08:09:d1:71:76:09:82:27:37:a5:d1:8e:77:
a8:66:39:38:16:1e:47:d0:72:9d:68:5b:73:a2:ca:23:60:74:
e9:f8:d8:c5:c4:c2:47:4f:a4:9c:89:fe:de:d6:cc:92:86:85:
89:37:c6:28:76:cc:58:8d:5a:d0:f6:50:be:00:ad:ac:71:01:
4b:e0:04:93:4d:47:c0:94:0e:53:07:40:7a:b1:49:a2:19:d2:
38:e7:fd:5b:51:d5:03:47:f2:25:94:e6:e5:d5:83:5f:dd:34:
71:9a:5e:37:b2:dd:ac:8e:85:9c:9b:c1:e2:69:99:72:3e:e3:
84:1e:ff:b0:8f:82:3a:25:b9:6b:f2:63:e6:37:a5:cc:62:50:
eb:71:03:f7:9f:5f:d8:0c:e9:9e:90:14:17:43:60:fe:12:bf:
7b:d1:98:d6:4f:13:50:3e:ef:38:c7:55:93:33:e3:85:d9:e4:
54:bf:df:52:aa:c3:bf:16:6f:38:98:af:a9:c8:8b:38:dc:22:
96:28:9c:18:6d:54:ff:64:b5:36:43:b5:8c:bc:29:8b:ba:e6:
93:c8:64:cf:73:8e:6b:83:55:72:5b:b3:34:86:95:66:0a:c0:
64:e3:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:02 2024 by rpki-client on console-fra.rpki-client.org