Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U2v-ryGWemZa81_tsQyQLaj13Uw.roa
File: U2v-ryGWemZa81_tsQyQLaj13Uw.roa (raw, json)
Hash identifier: s3H/1a1TRc7GVyM0lBzgdOpTQgZjpA/g1O/qjcLzDMs=
Subject key identifier: 53:6B:FE:AF:21:96:7A:66:5A:F3:5F:ED:B1:0C:90:2D:A8:F5:DD:4C
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0186F01C8B1C95AB4915FE1217ED5AAB729B
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U2v-ryGWemZa81_tsQyQLaj13Uw.roa
Signing time: Fri 17 Mar 2023 15:07:27 +0000
ROA not before: Fri 17 Mar 2023 15:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 46.8.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:1c:8b:1c:95:ab:49:15:fe:12:17:ed:5a:ab:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Mar 17 15:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=536bfeaf21967a665af35fedb10c902da8f5dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:31:f3:89:4f:4d:79:0b:27:39:a9:26:d8:
2e:bb:88:30:dc:5f:c4:e1:0c:23:58:ed:08:b8:f0:
0b:6a:0d:e3:48:db:cf:65:65:4a:8c:1b:51:44:f8:
2d:14:da:7d:69:50:9d:e3:bb:db:53:02:cb:1e:05:
4f:d3:9f:67:37:18:7e:43:42:d0:ea:c9:da:c4:b0:
5c:0e:8e:d8:4a:62:da:68:b5:06:07:a7:8f:97:cc:
7a:05:f0:a2:81:54:cf:96:67:74:b2:bf:0a:bb:e4:
c5:65:d1:77:e4:cc:4e:57:e6:3c:72:4e:1a:81:d1:
6a:2f:26:23:27:ea:60:36:2e:45:a7:88:a6:72:a8:
0a:59:de:8a:64:9b:7c:18:4d:d7:2f:bc:dc:a1:08:
3f:f7:f3:f0:ca:3a:00:eb:78:34:44:2c:12:c9:1e:
cb:f2:0e:76:fc:e8:33:44:af:6c:7b:4a:85:b6:21:
ed:63:d9:66:8f:49:db:72:27:33:42:53:46:9e:96:
e6:b0:cd:4f:18:97:91:bd:f7:5b:20:82:95:a5:3e:
96:f3:d3:31:06:da:3b:89:62:a1:76:02:83:f0:57:
b5:15:e1:e4:63:b0:ab:14:a3:97:a8:06:c4:3f:7f:
c5:3c:8c:09:88:66:9c:d2:c4:11:6f:e3:ea:1f:ed:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6B:FE:AF:21:96:7A:66:5A:F3:5F:ED:B1:0C:90:2D:A8:F5:DD:4C
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/U2v-ryGWemZa81_tsQyQLaj13Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.202.0/24
Signature Algorithm: sha256WithRSAEncryption
49:60:a4:10:dd:a9:52:48:e9:e7:a6:47:dd:b9:ba:2a:b1:3c:
b9:f9:4c:cd:d4:96:0d:aa:e9:92:0f:83:54:f7:7a:d0:ae:b1:
2c:c4:5b:47:34:75:91:ec:97:a2:af:cd:2d:39:8c:1b:a1:ee:
d6:d7:05:25:3b:b7:0f:d2:9f:fc:53:34:cc:ee:65:ec:ee:0d:
4e:ef:d4:bf:d3:03:24:77:25:c2:c0:3d:a7:35:fa:4f:d5:92:
03:2e:d1:4a:14:84:cf:da:de:70:a4:d2:fc:48:63:75:2b:89:
6b:24:82:19:22:a3:09:7e:e9:03:c6:47:84:3c:5f:22:1b:da:
4e:98:5a:23:ee:3e:7f:41:eb:06:fb:4c:38:f0:bb:73:79:4b:
83:ad:ad:02:a7:d5:00:58:d1:cc:ed:2f:0f:a7:3d:2f:52:20:
df:1e:81:48:6e:28:ca:c1:cc:f6:3c:13:c2:10:c8:85:97:17:
57:87:e8:f1:97:5c:eb:36:ab:25:b5:c2:92:0c:62:a3:92:ad:
81:d1:18:a1:3f:73:f6:20:a3:9a:7e:99:b9:2b:db:66:7b:ea:
8b:b3:90:e9:23:8f:07:c4:ad:9f:b6:b2:4a:e6:c9:2b:7f:3d:
7c:0e:e4:8d:4f:a4:a3:75:87:06:09:a9:38:c0:80:26:ea:ad:
b9:44:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:38 2024 by rpki-client on console-ams.rpki-client.org