Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/ZXbym6UALqZ6ZSx3sxwADudxQg0.roa
File: ZXbym6UALqZ6ZSx3sxwADudxQg0.roa (raw, json)
Hash identifier: 0CGsWVYB3jVMwbOnhF6yUpjuAK8uyMf9mwZRm+nZlOE=
Subject key identifier: 65:76:F2:9B:A5:00:2E:A6:7A:65:2C:77:B3:1C:00:0E:E7:71:42:0D
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 018571F9EBBE7BA7E25D09D3EB3872AD1799
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/ZXbym6UALqZ6ZSx3sxwADudxQg0.roa
Signing time: Mon 02 Jan 2023 10:14:42 +0000
ROA not before: Mon 02 Jan 2023 10:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51812
IP address blocks: 46.148.48.0/20 maxlen: 20
46.148.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f9:eb:be:7b:a7:e2:5d:09:d3:eb:38:72:ad:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Jan 2 10:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6576f29ba5002ea67a652c77b31c000ee771420d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:23:c0:4e:79:ef:95:ce:6c:8a:5b:42:df:
d1:33:6a:2c:cc:99:4f:d3:f8:e5:de:ad:00:cf:38:
9c:1a:7d:31:7a:be:c0:e0:36:93:8f:8a:1d:07:d0:
31:56:50:de:58:4c:48:eb:3f:7a:80:03:cd:04:4b:
b7:e3:84:02:5e:25:9d:a6:26:2a:46:3a:58:c3:dd:
d4:4b:80:bf:7b:81:fd:83:80:7b:85:7a:39:46:29:
dd:d0:69:31:51:a2:bf:2e:28:c6:78:67:86:4c:d0:
c6:17:76:34:dc:da:62:13:27:ad:17:58:86:87:ee:
07:65:cc:a8:7e:c7:98:c6:6d:94:be:29:18:57:7a:
40:ce:27:62:32:0c:e7:63:0a:35:70:ea:c4:35:e0:
03:e2:f0:ea:76:cc:cc:f9:e4:c6:0b:af:ac:53:98:
e6:f4:bf:89:1a:68:14:49:7f:98:13:dd:7b:9c:0c:
a3:ff:97:a5:df:94:e8:dd:80:b8:51:d6:39:18:3c:
cd:07:5f:39:ed:c7:e0:cf:42:fb:ae:d3:ec:74:a9:
18:d7:19:9e:3a:61:a6:36:c4:23:a0:8e:32:14:1a:
b9:e1:02:6e:17:1d:1d:34:50:b8:ed:9e:01:2f:e2:
95:04:8c:57:2f:ec:b9:97:12:58:3c:4a:49:c9:59:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:F2:9B:A5:00:2E:A6:7A:65:2C:77:B3:1C:00:0E:E7:71:42:0D
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/ZXbym6UALqZ6ZSx3sxwADudxQg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:b6:c8:7e:0a:1f:4f:d6:ae:12:12:d1:40:6c:5f:1a:f6:a8:
3f:74:7c:18:f0:c9:33:ff:ec:af:0a:37:ae:0f:0e:e5:0c:7c:
b8:ec:01:67:ec:1e:d4:4b:09:90:07:b5:01:1f:64:7b:2b:2e:
15:c7:e3:c9:15:50:ae:55:78:1e:52:ee:95:b6:86:62:bd:10:
75:1d:8f:94:1f:f2:bc:d1:76:bf:09:9a:af:8f:7b:ff:88:34:
3f:04:33:5b:f3:1c:64:b6:ce:5e:0d:9a:14:96:6e:b6:cf:e9:
00:0a:91:d5:47:20:14:7d:3c:1b:5a:9f:42:f2:de:f0:76:56:
05:54:19:70:16:36:80:bc:7e:b1:99:98:09:0d:39:88:25:e7:
5a:27:03:2f:36:5d:d8:cb:80:cd:92:57:eb:60:82:9f:5b:17:
09:39:40:bd:73:ab:aa:93:a3:99:f9:c5:3b:d0:5a:fa:8b:c4:
6c:ac:e9:ff:82:d7:c4:fb:65:e9:b7:64:77:a9:76:7e:33:ee:
17:9e:68:6c:ca:93:49:27:fe:7b:44:49:c3:e5:93:fc:bc:38:
b1:35:55:e4:48:b5:17:94:ef:30:86:06:73:46:53:fc:cd:99:
e4:d4:b7:47:46:96:92:42:a7:be:aa:a3:e6:02:49:e7:dc:6d:
64:65:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 12:11:22 2023 by rpki-client on console-ams.rpki-client.org