Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/IHmE4XvZTECAhrs4V_Ydtnb4zlI.roa
File: IHmE4XvZTECAhrs4V_Ydtnb4zlI.roa (raw, json)
Hash identifier: AsS0xvuuBp4ZqWyYHerHneJI5qOH+imXXAHqo4GsiOU=
Subject key identifier: 20:79:84:E1:7B:D9:4C:40:80:86:BB:38:57:F6:1D:B6:76:F8:CE:52
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01856F5DAF0C1CCF4F69AEEE39EF14140E71
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/IHmE4XvZTECAhrs4V_Ydtnb4zlI.roa
Signing time: Sun 01 Jan 2023 22:04:48 +0000
ROA not before: Sun 01 Jan 2023 22:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61180
IP address blocks: 185.46.173.0/27 maxlen: 29
185.46.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:af:0c:1c:cf:4f:69:ae:ee:39:ef:14:14:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 1 22:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207984e17bd94c408086bb3857f61db676f8ce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:93:88:38:8d:a8:92:0e:2e:32:17:b2:48:
e0:34:d7:a5:9b:40:9a:64:f6:09:70:45:c1:bf:32:
7d:6a:c8:06:91:2a:7d:52:eb:10:e8:cf:08:de:4d:
ac:84:98:8e:28:8e:f2:c2:cb:19:be:07:2e:e4:ce:
18:78:fc:88:e0:ea:1a:34:4a:27:66:81:3f:8d:ae:
49:64:c4:26:e0:84:42:e9:fe:45:1f:78:93:79:e1:
c8:44:43:a9:c9:09:36:46:48:15:e4:78:bf:dd:a9:
49:bf:7e:e3:a2:67:60:f8:9b:59:7a:5e:5a:11:be:
d3:14:9f:b3:d5:d8:66:b1:74:49:ee:2f:80:e0:24:
3d:e0:a0:0d:4b:0c:71:a3:49:9d:87:92:8c:ca:69:
9b:bd:23:6c:45:84:aa:10:14:2b:f3:23:e2:7f:3b:
41:a0:c2:a0:78:1d:9f:b7:da:7d:b8:55:8d:27:85:
61:3a:20:e6:ca:f5:33:23:6f:94:39:14:d2:e7:fc:
e7:6d:70:f1:8f:ec:b6:b0:fa:81:38:b8:4b:f2:10:
a3:ad:c8:b5:86:ff:7e:ab:70:16:94:7f:6a:98:e6:
89:25:aa:3a:25:83:6a:2e:e1:58:8e:15:73:e9:84:
87:a3:45:17:a7:82:66:64:8e:30:86:2e:19:58:c3:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:84:E1:7B:D9:4C:40:80:86:BB:38:57:F6:1D:B6:76:F8:CE:52
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/IHmE4XvZTECAhrs4V_Ydtnb4zlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.173.0/24
Signature Algorithm: sha256WithRSAEncryption
50:f1:78:63:57:bd:fb:eb:98:dc:f4:fa:d9:c5:b5:50:81:96:
fc:aa:35:51:14:5c:1c:e1:9f:e5:82:4b:0b:6c:d3:cc:d1:31:
6e:54:c4:f8:ea:13:d1:b5:5b:1f:ed:92:89:d6:f7:59:86:ff:
28:54:f9:6d:1f:44:e1:4e:21:0e:94:b4:ab:83:45:5d:f7:6b:
44:9c:af:08:3e:d7:b5:04:df:05:24:1e:7e:07:4f:43:6a:f2:
06:fd:55:5e:da:50:d5:08:ad:f2:e6:e2:42:2f:e9:64:aa:41:
f3:0d:5c:bc:73:d5:1d:75:be:f0:35:ab:c3:70:1b:ce:89:0a:
92:c8:bd:4f:ff:96:ee:41:bf:97:15:8f:00:a2:2c:60:58:75:
f2:4b:fd:fd:0b:30:57:f6:35:bf:e0:9f:03:40:d9:3c:bc:cd:
5b:0f:6c:04:49:4a:4a:ce:a9:86:d9:67:49:a1:b2:57:7e:f4:
7d:19:e2:a3:bb:ac:95:37:f2:c8:09:0b:74:ad:4e:10:89:59:
98:df:58:91:6f:8d:17:81:4d:ef:33:cf:2d:19:0d:5c:e6:87:
1a:aa:fa:ae:d7:3e:72:6b:17:12:08:b7:bd:aa:91:19:e1:7c:
6e:11:4c:b4:ea:24:d2:93:ce:38:1a:6b:7f:c1:ea:74:22:3b:
7a:f9:ef:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:56 2024 by rpki-client on console-fra.rpki-client.org