Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/PlXOttQ2s9R_3foxygIvTgYrqxs.roa
File: PlXOttQ2s9R_3foxygIvTgYrqxs.roa (raw, json)
Hash identifier: ZoWWjnSMBFHr4PPGGalziUZS1p3NFxgCeQKUIkSwLV4=
Subject key identifier: 3E:55:CE:B6:D4:36:B3:D4:7F:DD:FA:31:CA:02:2F:4E:06:2B:AB:1B
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 018CC2DAB8C18F97B225ECBA8F61B4C859B2
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/PlXOttQ2s9R_3foxygIvTgYrqxs.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 46.102.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 14:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b8:c1:8f:97:b2:25:ec:ba:8f:61:b4:c8:59:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e55ceb6d436b3d47fddfa31ca022f4e062bab1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:39:55:4b:f3:39:74:0e:6a:91:bd:46:f8:
d0:63:58:4d:f7:5b:bf:f0:64:f6:3c:04:fc:c9:6f:
d6:9e:8a:4b:8f:05:3a:9f:c4:37:97:4d:f2:e3:24:
02:dd:fa:1a:0e:b2:b0:0d:51:41:e1:77:2a:47:ea:
cc:a2:80:86:58:58:31:cf:8f:b4:47:f4:7c:f7:75:
3f:fd:0a:57:55:79:7d:6b:ab:1f:b9:f8:d9:b8:b1:
50:38:bc:4e:c2:bd:af:d2:5d:50:df:e0:21:cb:dd:
33:9e:7d:e8:e5:c2:e0:eb:6a:ae:93:79:74:eb:09:
59:a1:2c:1b:dc:68:f0:d0:68:c7:d3:81:25:02:7d:
05:b7:d9:78:6d:66:81:d1:b6:1a:a8:5d:de:2f:f6:
43:17:63:f7:06:5c:3f:f5:0e:ed:28:84:fa:1a:62:
45:3e:45:78:55:a1:f2:7f:94:5d:4c:d8:78:10:dc:
e7:87:7e:92:06:aa:8d:30:ec:96:6d:10:99:da:db:
c6:1b:7d:14:ee:a2:96:ff:da:80:ab:4d:37:7f:52:
f6:1c:bf:e7:23:d4:3d:b5:f0:9a:2b:cd:2f:1c:74:
95:43:3a:40:3e:72:ef:3c:03:ed:cb:d4:bd:52:17:
69:33:ee:74:a4:85:fd:0b:43:02:8e:c6:13:ca:7a:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:CE:B6:D4:36:B3:D4:7F:DD:FA:31:CA:02:2F:4E:06:2B:AB:1B
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/PlXOttQ2s9R_3foxygIvTgYrqxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.180.0/24
Signature Algorithm: sha256WithRSAEncryption
44:bf:dc:ee:d5:5a:74:bf:36:5b:cb:b7:58:6f:ea:6d:1d:50:
b6:10:11:b2:08:0f:e3:3e:b4:c3:f4:39:95:7d:86:16:d1:33:
24:f9:25:03:92:95:0c:44:48:62:62:05:22:4d:f5:bb:b4:05:
64:90:ce:33:73:a8:cf:2a:c7:91:5c:d2:fa:6d:aa:e8:5f:1e:
7e:b9:f1:ed:e1:15:d0:f0:77:78:5d:ac:f9:ba:03:a7:56:a5:
fe:ea:08:17:44:1f:87:72:78:a7:c4:29:75:51:73:cc:7a:3a:
1c:5e:8a:cb:b0:84:d3:c9:dd:a0:68:87:8c:5a:53:db:2b:31:
b0:8f:93:36:00:01:62:39:d8:50:b2:87:e0:e9:67:3f:27:51:
9c:0a:19:11:c2:0b:e4:47:d4:8a:45:63:29:e1:ae:62:50:07:
39:8e:5b:f6:fb:e5:4c:67:97:33:3d:ad:f9:dd:29:56:b5:a6:
c9:5d:9b:0b:74:c6:fb:49:c4:06:a3:f3:63:20:ed:57:93:da:
12:92:dc:74:22:e4:fa:31:5b:48:7b:d3:d5:27:b4:ff:c7:e7:
49:9a:45:8f:bd:b8:18:c3:cd:7d:5a:c0:19:d1:37:64:d6:4c:
55:e7:ab:00:a9:90:72:b2:64:77:68:b6:73:cb:ac:52:e8:2b:
10:20:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:21 2024 by rpki-client on console-fra.rpki-client.org