Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/N7szdwH5hqGQs1fLtJoBXgfP7AU.roa
File: N7szdwH5hqGQs1fLtJoBXgfP7AU.roa (raw, json)
Hash identifier: /BGt+RlLBn+oDdS+y3QnpwaI/3lN4/OVuj+QeQcvarE=
Subject key identifier: 37:BB:33:77:01:F9:86:A1:90:B3:57:CB:B4:9A:01:5E:07:CF:EC:05
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 01856C65E4B343F483163FF5092B115DB8C1
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/N7szdwH5hqGQs1fLtJoBXgfP7AU.roa
Signing time: Sun 01 Jan 2023 08:14:55 +0000
ROA not before: Sun 01 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.19.169.0/24 maxlen: 24
46.19.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:e4:b3:43:f4:83:16:3f:f5:09:2b:11:5d:b8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jan 1 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37bb337701f986a190b357cbb49a015e07cfec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ed:bf:ef:4b:b5:57:69:bc:b5:2e:83:db:87:
13:6f:08:9b:44:4a:96:eb:5f:e7:83:34:85:25:2b:
3b:31:30:4a:43:50:ef:66:9f:c0:28:98:f5:d7:9a:
ac:6a:61:5c:cf:e9:0e:c1:d1:f1:f2:87:ca:72:1f:
39:0a:54:d1:5f:e2:ee:ed:50:1a:e8:ef:61:0a:45:
1f:a2:c5:85:88:bf:0d:6b:66:31:1b:f6:de:d2:f8:
97:90:a8:75:f8:e3:5f:8d:84:cf:39:05:44:63:86:
50:95:38:3e:65:b2:9f:12:18:82:72:b1:62:33:12:
c2:3f:a0:5c:0d:4d:a1:9d:e6:66:b3:0f:14:7c:06:
67:ff:45:34:c9:5a:1a:98:58:2e:3a:be:6d:ac:48:
08:67:5e:c1:d5:b7:ee:51:7a:88:fc:d2:33:7d:7e:
4e:e6:27:ff:1b:e4:47:f2:e9:c3:6c:9d:78:d1:e9:
0c:e9:1b:a2:94:33:0a:a4:30:c3:a5:6a:ab:0f:d6:
ab:58:88:71:b3:05:88:1f:58:19:3d:76:39:c2:1d:
7c:e2:7d:a9:b4:33:e3:b9:d6:70:39:eb:10:ba:49:
21:29:62:55:1d:03:b8:85:85:e0:c9:89:1a:a6:af:
35:1f:37:22:43:53:24:31:42:76:bf:c4:6d:0c:c3:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:33:77:01:F9:86:A1:90:B3:57:CB:B4:9A:01:5E:07:CF:EC:05
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/N7szdwH5hqGQs1fLtJoBXgfP7AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.168.0/23
Signature Algorithm: sha256WithRSAEncryption
93:64:89:64:20:85:89:1f:d7:02:80:16:73:68:37:6d:bf:6d:
94:5d:9a:62:71:ea:31:cf:43:67:70:df:05:61:ab:5e:44:63:
96:d4:7b:c3:a0:a3:1c:04:53:fe:27:c9:b1:9a:63:4b:25:28:
d1:3b:15:72:37:56:78:04:f0:da:d1:bc:b0:84:0c:78:e9:9e:
ee:ef:9f:0b:e2:4c:7d:89:f3:46:09:50:18:b2:c7:ad:f8:db:
ee:a6:e2:31:b9:3d:d1:05:96:dd:e8:64:a3:60:92:6e:97:0c:
f8:a4:9f:61:dc:b7:85:8d:a3:92:83:98:7f:9e:0e:04:53:7c:
35:f5:a8:29:67:9d:97:32:15:8f:93:76:9b:c8:8d:1e:c8:86:
79:15:a6:aa:04:f4:94:0b:10:ed:8c:09:f1:fa:9a:49:64:a2:
d7:da:a9:91:18:2b:98:3d:3d:b8:42:53:f1:9f:0e:e1:00:e0:
2c:f9:06:a6:50:4b:a2:89:83:0d:60:b9:04:4f:24:b0:37:6a:
a4:ef:a4:d4:70:25:0a:9c:ef:0a:cf:40:a6:37:87:5d:70:f3:
ac:50:90:8b:fc:f2:62:0c:76:37:6a:54:56:41:f6:f4:78:c8:
96:75:f2:83:c0:84:ec:a8:85:6e:b5:c2:e3:84:b3:76:34:39:
3d:6c:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:51 2024 by rpki-client on console-ams.rpki-client.org