Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mAkucG_avKECCcgU55LAau_xCc8.roa
File: mAkucG_avKECCcgU55LAau_xCc8.roa (raw, json)
Hash identifier: FWdw0e+v+ErLTUZz8i9NEsEAhMxjjediSdBBUJjybNo=
Subject key identifier: 98:09:2E:70:6F:DA:BC:A1:02:09:C8:14:E7:92:C0:6A:EF:F1:09:CF
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 01894EC0E563AA882978EA165DA4F3FBF6D8
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mAkucG_avKECCcgU55LAau_xCc8.roa
Signing time: Thu 13 Jul 2023 10:16:51 +0000
ROA not before: Thu 13 Jul 2023 10:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209283
IP address blocks: 46.243.183.0/24 maxlen: 24
46.243.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:c0:e5:63:aa:88:29:78:ea:16:5d:a4:f3:fb:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jul 13 10:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98092e706fdabca10209c814e792c06aeff109cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:ff:ad:e5:a0:5f:01:11:e1:ec:cf:54:cc:
0d:18:f9:f7:37:46:fd:d3:9b:91:e0:42:dc:2c:93:
9f:05:d3:e9:1c:27:95:02:b0:3e:40:6e:b1:a0:42:
8a:a1:f9:28:47:a2:51:41:5a:68:6c:33:23:25:ab:
86:3c:da:15:cb:75:ff:cd:fa:5a:ab:ab:ee:57:d0:
40:50:e7:ad:4c:7e:a5:cc:56:bb:a4:a6:c2:2e:1b:
a6:bb:af:36:26:29:0c:80:f9:e4:49:dc:47:90:7a:
7c:7e:a6:0a:e0:d8:31:29:93:92:c0:0a:8e:8f:1d:
8a:17:1b:fd:78:90:3d:47:ec:43:dc:20:53:3d:36:
9a:e7:8f:2a:4e:e0:6a:4e:33:d3:93:79:dd:fe:78:
ff:15:dc:72:84:81:db:03:ba:04:8c:29:04:64:9e:
3f:b5:73:10:ed:18:d5:23:8d:18:db:19:75:1f:58:
16:18:39:5b:2c:f4:75:f3:94:10:c8:a9:31:39:75:
47:84:27:84:f9:c4:aa:bc:b4:75:59:70:d7:15:74:
63:a0:6d:a4:7a:1e:5f:3f:19:f2:b8:48:e4:7d:bb:
24:12:ce:5d:b3:82:a0:91:50:89:fd:bc:34:0e:df:
73:9f:9f:19:94:01:f8:9b:47:c3:23:a2:3b:6c:61:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:09:2E:70:6F:DA:BC:A1:02:09:C8:14:E7:92:C0:6A:EF:F1:09:CF
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/mAkucG_avKECCcgU55LAau_xCc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.183.0/24
46.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c1:78:92:3a:6f:0d:64:90:36:d4:0e:b1:bb:49:64:5f:1e:
16:f2:58:75:e8:e9:26:4b:4b:13:8f:c3:4f:c4:fc:ee:a5:88:
a9:c5:23:76:15:27:2d:56:2a:4c:b7:68:7e:45:f3:85:a4:2b:
95:b6:28:a1:ce:af:79:bc:61:aa:c7:48:86:1d:0e:03:26:71:
79:30:bc:82:2f:38:02:ed:86:60:2b:6d:6c:24:5d:64:ed:88:
43:88:cc:da:85:0e:6d:0c:8b:78:cf:b4:6b:57:b3:4c:f5:6b:
cb:00:8e:28:1a:22:80:89:7d:5a:85:15:11:39:3f:f6:f0:a4:
cb:42:d1:52:62:c9:d8:38:cc:18:84:65:77:6c:3a:8c:9c:9b:
a4:1f:29:b5:ce:55:39:e9:e3:f2:47:0d:da:9b:46:59:58:27:
29:66:69:c5:e5:e0:c4:8e:d2:d8:31:76:ac:56:63:69:43:6b:
6e:da:bd:af:53:55:d6:02:a4:fd:ed:f5:d1:3e:91:f9:9d:6d:
d7:81:69:d7:10:0f:d8:77:23:52:0c:79:cf:56:b2:4b:19:9c:
dc:1b:80:ea:c9:24:b5:66:6f:ac:32:86:70:9d:b9:de:94:75:
57:75:13:d1:15:82:02:57:20:76:7d:70:ff:3d:02:b4:bc:8f:
2d:fe:5d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:06 2024 by rpki-client on console-fra.rpki-client.org