Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/hpA6xRMvOIsa6OMk7V5BT_eG3WE.roa
File: hpA6xRMvOIsa6OMk7V5BT_eG3WE.roa (raw, json)
Hash identifier: 6atSMCPywkBgwtssfqp82xPgX2U2yGqmUYg+g1eNsmc=
Subject key identifier: 86:90:3A:C5:13:2F:38:8B:1A:E8:E3:24:ED:5E:41:4F:F7:86:DD:61
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018C1E99730BB61801D1DA2089C9ECCFECB1
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/hpA6xRMvOIsa6OMk7V5BT_eG3WE.roa
Signing time: Thu 30 Nov 2023 05:00:21 +0000
ROA not before: Thu 30 Nov 2023 05:00:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199077
IP address blocks: 46.21.17.0/24 maxlen: 24
46.21.21.0/24 maxlen: 24
46.21.22.0/24 maxlen: 24
46.21.18.0/24 maxlen: 24
46.21.19.0/24 maxlen: 24
193.222.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:99:73:0b:b6:18:01:d1:da:20:89:c9:ec:cf:ec:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Nov 30 05:00:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86903ac5132f388b1ae8e324ed5e414ff786dd61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e0:67:8c:89:dd:27:3f:f3:41:6d:56:12:16:
2e:86:30:df:e7:d3:86:dd:4c:b9:5f:34:d2:fd:3c:
b5:d7:a4:a0:68:99:12:8c:91:f4:1e:cc:0a:76:47:
d1:f3:8b:fe:a5:59:a7:50:1f:01:d3:ec:ca:9c:bd:
88:f1:d5:69:f5:ad:04:90:85:03:1f:a4:54:a1:4e:
30:d7:2e:89:1d:4b:3e:76:20:a6:a3:b0:cf:55:20:
09:a5:a5:fe:9d:f9:86:8b:92:c9:e3:5d:61:d7:b4:
4f:03:0c:27:b4:fb:38:6b:f1:69:7b:1f:38:b5:a8:
5b:70:f7:b9:64:9d:ea:54:1c:0c:04:28:e3:4e:1e:
b7:02:85:4d:bc:54:62:8e:c5:8a:16:da:44:6a:71:
76:c9:35:9c:40:50:56:b3:d2:6d:f3:dd:2a:e5:44:
98:60:fc:cf:18:fe:51:5a:bb:4d:0d:f9:d6:99:22:
f8:90:5b:17:0d:82:a7:b5:91:65:75:4c:eb:0c:cf:
28:04:75:83:73:78:1c:51:8a:35:69:f4:98:05:de:
76:47:e3:d6:9d:11:21:81:18:82:b4:e3:f8:1b:25:
7e:51:0d:cb:21:91:af:7c:eb:11:c2:7d:30:65:6b:
28:db:4b:0f:e4:d6:f5:0b:07:b7:bc:95:0c:b0:e9:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:90:3A:C5:13:2F:38:8B:1A:E8:E3:24:ED:5E:41:4F:F7:86:DD:61
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/hpA6xRMvOIsa6OMk7V5BT_eG3WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.17.0-46.21.19.255
46.21.21.0-46.21.22.255
193.222.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:38:f4:04:e5:45:6d:23:d7:3a:dc:d6:b0:aa:0f:59:f9:39:
9f:4c:62:a2:03:25:8f:4a:a1:3f:3e:26:1f:2c:2c:b1:9a:b8:
a3:b7:90:19:b9:48:4d:41:1d:f7:ec:15:a7:20:9f:fc:3c:99:
95:f3:8c:bb:0f:84:d2:a5:51:c6:34:ff:0e:9e:3c:94:99:e1:
25:cc:47:df:5e:e5:19:e6:57:2b:bd:58:f6:60:a8:56:9f:36:
20:d4:8a:00:f4:1a:51:ff:88:55:65:13:69:66:18:6e:97:18:
13:a3:43:95:d9:31:86:39:19:d5:e0:76:cd:5f:3c:f8:3c:28:
af:dc:94:d1:6c:9e:fc:bf:a6:93:3b:91:a7:bd:f8:bf:34:92:
67:3d:a3:de:b6:4c:1b:81:49:ef:3e:fc:56:f0:5d:44:f6:7f:
99:89:5f:c0:00:c6:2e:e8:f8:19:46:3c:9c:2e:62:fd:7d:6e:
69:ee:65:e3:de:7a:cc:dd:6c:b5:bd:b3:87:bf:c6:7c:78:db:
81:a5:a4:24:19:4a:c5:dc:18:34:b3:ac:12:bd:74:eb:ae:a1:
e0:e3:89:10:55:87:82:eb:08:a0:b6:05:1a:b9:74:db:81:70:
c8:a8:a7:a7:ce:c1:5f:54:7a:06:e1:8d:41:0b:f5:64:d4:f1:
0e:8c:92:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 5 05:31:12 2023 by rpki-client on console-ams.rpki-client.org