Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0L6F9fCO6nufVWABET5NxCc2hmk.roa
File: 0L6F9fCO6nufVWABET5NxCc2hmk.roa (raw, json)
Hash identifier: wrPjvYoZVVT+Sy/Lsmur278uhw4OZmlP/C7Y16gpRXE=
Subject key identifier: D0:BE:85:F5:F0:8E:EA:7B:9F:55:60:01:11:3E:4D:C4:27:36:86:69
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185727A2A14122B6FA70D05AB3017D8FD0D
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0L6F9fCO6nufVWABET5NxCc2hmk.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 46.102.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:2a:14:12:2b:6f:a7:0d:05:ab:30:17:d8:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0be85f5f08eea7b9f556001113e4dc427368669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:f1:fb:23:7b:64:a6:c9:a5:68:b8:ee:bb:
a3:6e:05:97:90:77:2b:b6:c9:41:61:86:19:8f:37:
46:9f:60:85:b4:af:08:2c:8d:73:fb:88:6b:eb:ef:
dd:11:59:24:20:3c:75:8c:59:0a:c3:06:a7:84:1b:
6e:2a:8d:dc:3c:84:92:e3:c0:7a:83:6c:d5:a3:75:
75:fc:53:12:ef:0f:39:47:a3:58:d1:cb:23:16:d8:
4d:2e:07:92:e5:94:b6:ee:9c:0a:65:7c:9d:ed:82:
af:da:25:0c:ef:fb:d3:9a:7b:aa:b0:27:4b:33:74:
4e:4d:1a:be:65:f4:1e:2a:5f:4a:14:43:eb:0b:51:
85:45:41:27:b5:54:e5:63:2c:3b:9c:6e:d6:41:42:
59:de:d3:1a:34:f2:46:d3:a5:8c:73:2f:b5:fb:93:
21:c7:89:51:6e:2b:94:3f:c0:f8:9e:ea:89:a7:5f:
81:19:72:18:4b:98:a4:fa:52:3d:9b:63:41:b5:8b:
28:83:1d:f1:a6:77:03:e1:b8:9c:1f:90:35:3e:aa:
ba:94:b5:6c:11:a7:85:8b:b1:8b:30:05:d3:0d:c7:
cc:26:47:fc:1d:46:f5:78:6a:3e:77:4a:e8:b6:aa:
94:05:a2:40:7a:78:a2:14:8c:bb:ca:4f:e3:1f:c4:
a3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:85:F5:F0:8E:EA:7B:9F:55:60:01:11:3E:4D:C4:27:36:86:69
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/0L6F9fCO6nufVWABET5NxCc2hmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:70:68:10:fd:8b:05:eb:2b:cd:d7:bc:c1:12:51:90:8b:5b:
90:d4:d1:a6:92:b6:d8:8b:f5:41:67:5d:b4:18:c5:bd:ff:40:
7e:59:a0:a5:4c:b9:2c:20:fa:f5:ef:41:0a:c0:fd:f7:b2:7a:
5d:d7:c1:8b:18:05:0a:1c:e2:66:5d:01:5a:62:0b:0f:0b:58:
c5:ac:27:31:2d:2f:e5:be:6b:32:74:ae:27:a4:d8:77:39:8c:
99:08:3b:32:6d:44:4a:21:f2:bb:52:c8:4f:82:dd:58:96:5d:
7c:08:1f:06:ee:a0:d4:ff:a0:93:f5:23:9e:da:e2:17:6c:e3:
d7:8a:b8:fb:f1:54:93:7d:21:fe:be:c8:7e:59:37:35:5d:81:
b0:ea:f1:6d:a4:c2:0a:84:c9:44:c4:2f:95:b4:08:16:f3:d9:
14:7b:10:97:53:0b:66:14:01:a2:c5:cd:2a:24:db:19:a6:18:
4f:61:d7:cd:e4:4c:64:bb:af:b5:d6:6a:d1:ad:f9:75:92:86:
d7:bb:fa:57:df:ca:04:14:cb:cd:ce:68:5b:42:fb:a7:56:a0:
d9:80:cc:81:d0:6b:20:37:3b:8f:55:6f:89:03:64:82:c2:f0:
a3:1a:5a:13:0c:88:4d:fb:f7:f5:97:e4:b8:34:54:a5:e8:e2:
59:14:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org