Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1i7AasqnDy86df35EmrvIdUgKVY.roa
File: 1i7AasqnDy86df35EmrvIdUgKVY.roa (raw, json)
Hash identifier: n1VmouCP1PstO47Cawb1/U45Du5CP17neetWj7BiSjs=
Subject key identifier: D6:2E:C0:6A:CA:A7:0F:2F:3A:75:FD:F9:12:6A:EF:21:D5:20:29:56
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 018A4B5C7347136DD54A8BF997863EB6C8F9
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1i7AasqnDy86df35EmrvIdUgKVY.roa
Signing time: Thu 31 Aug 2023 11:31:04 +0000
ROA not before: Thu 31 Aug 2023 11:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51812
IP address blocks: 46.148.48.0/20 maxlen: 20
46.148.48.0/23 maxlen: 23
46.148.58.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:5c:73:47:13:6d:d5:4a:8b:f9:97:86:3e:b6:c8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Aug 31 11:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d62ec06acaa70f2f3a75fdf9126aef21d5202956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:f4:5d:b8:17:f3:8d:fb:09:3b:a8:94:55:
8c:52:63:23:43:1d:db:ed:36:5c:09:0f:7b:fd:e3:
fe:1e:d6:b0:5f:a0:f2:51:36:49:3f:4f:b1:91:e2:
2a:96:d4:0f:96:a2:5b:04:3b:e7:81:7f:09:a9:d0:
a5:c4:59:3d:bf:08:05:23:4c:b8:6e:7b:08:0d:10:
d8:d4:65:84:2c:39:f2:ad:22:53:26:22:66:d6:8b:
cc:6d:0a:5c:13:6b:e4:a6:9b:55:60:a5:68:37:35:
1f:f0:92:4e:41:5a:20:b3:92:0d:68:29:35:8b:66:
63:77:e5:2f:f2:a1:df:95:1b:63:e7:f1:04:7d:d8:
c2:17:2c:47:06:21:6c:df:9a:64:45:64:d1:50:69:
19:8b:87:c8:cc:68:9d:62:e5:bb:42:93:b4:f5:fc:
48:61:b6:f8:78:f7:2c:79:3b:d1:2e:39:51:de:89:
38:87:98:67:21:79:84:7b:4a:b0:4d:9e:f0:7e:91:
f9:f8:78:e7:b6:e2:eb:67:85:63:40:40:72:2f:6c:
86:68:52:57:11:d3:6a:76:aa:65:28:ef:44:44:85:
b5:9e:11:e6:4f:59:52:5c:ae:0b:9e:60:9b:41:6d:
ab:98:10:91:bf:63:ec:72:0e:ef:d4:2c:fb:b6:5b:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2E:C0:6A:CA:A7:0F:2F:3A:75:FD:F9:12:6A:EF:21:D5:20:29:56
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1i7AasqnDy86df35EmrvIdUgKVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:52:fc:71:cd:a2:43:fd:51:39:be:30:6b:93:b8:cc:0e:18:
da:34:1c:28:27:fd:ff:9a:a1:a3:af:f0:ed:b2:05:8f:2e:94:
1b:28:6b:27:6e:91:35:b4:b8:09:00:3a:46:45:f9:12:bf:63:
aa:44:87:0a:5d:1e:b5:07:c0:b9:f1:9f:e1:03:4f:67:9e:4b:
fb:79:27:c4:80:0f:87:28:fc:87:07:8d:eb:55:54:2c:f0:37:
39:e2:ba:14:93:fd:b0:94:c2:69:3b:2d:d1:e6:8c:2a:4e:80:
87:8b:16:cb:cd:d7:b7:d6:fc:8c:0b:db:12:c7:d8:83:3a:08:
cf:20:63:9b:ce:cc:e4:fb:ac:17:fa:c3:f3:f5:c2:f3:76:25:
c8:01:f0:58:20:b8:38:0d:dd:2b:5e:23:11:8c:97:d2:34:74:
9b:a0:06:97:25:33:1f:de:1e:68:29:e0:09:b6:20:9a:d7:1a:
2c:d1:af:cf:e3:32:b8:36:a1:53:67:9c:e1:b7:5f:35:96:af:
a3:1b:7d:53:8b:66:cd:66:ef:ce:f6:4e:02:cd:fc:54:90:58:
ee:d8:a6:b2:68:68:fe:77:a0:15:e7:94:29:1f:97:3c:cf:66:
f5:35:1b:f0:37:67:e7:45:b6:d4:80:70:59:43:c6:40:e9:86:
ad:ad:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:42 2024 by rpki-client on console-ams.rpki-client.org