Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/GzFuMRl4jqUKIpjPDYr5RrjMdZo.roa
File: GzFuMRl4jqUKIpjPDYr5RrjMdZo.roa (raw, json)
Hash identifier: PP7ghZP629ATF3LgnMKbzG0+eVdYdaHKnFCXI3+qhAc=
Subject key identifier: 1B:31:6E:31:19:78:8E:A5:0A:22:98:CF:0D:8A:F9:46:B8:CC:75:9A
Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540
Certificate serial: 01856EB9196D3F7190392755158110E2FFF6
Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/GzFuMRl4jqUKIpjPDYr5RrjMdZo.roa
Signing time: Sun 01 Jan 2023 19:05:02 +0000
ROA not before: Sun 01 Jan 2023 19:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.28.58.0/24 maxlen: 24
46.28.59.0/24 maxlen: 24
46.28.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:19:6d:3f:71:90:39:27:55:15:81:10:e2:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540
Validity
Not Before: Jan 1 19:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b316e3119788ea50a2298cf0d8af946b8cc759a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:15:83:59:a4:0c:b5:2f:df:4d:6a:0d:bb:9e:
09:c4:b1:58:6c:63:83:51:6f:0b:7e:e0:43:67:ed:
34:ab:c6:e5:31:3d:f3:b5:26:f7:62:e4:88:2b:2b:
61:00:e0:fb:52:56:34:51:a5:e3:49:bc:c5:d9:0f:
5b:7d:0f:1b:d3:2d:d9:bb:3f:0a:60:e6:d4:ab:4a:
19:5e:7a:ba:d8:fe:c4:75:23:89:c6:ee:a4:9d:fc:
08:2d:50:93:d1:14:6e:88:97:a3:9c:32:a8:2a:1c:
82:ce:3d:c4:3d:5f:d8:84:bf:00:8a:86:36:1f:16:
7d:0e:a8:5e:34:16:6f:69:ba:cd:a3:8f:f4:73:ea:
1e:bb:2c:fc:15:70:39:8e:3b:cf:57:1c:24:72:61:
1f:2c:e5:14:24:3f:1b:bf:af:96:76:18:ee:aa:3a:
a9:13:ce:90:2d:df:c1:c0:1c:fd:69:92:22:62:a7:
21:3b:24:4c:46:ca:20:6e:eb:75:35:55:1f:bf:a7:
4d:90:cf:40:61:fe:83:24:41:06:f1:d3:15:69:eb:
72:e3:aa:13:bd:95:a3:2a:a1:9f:c7:6a:e9:08:4a:
45:b1:95:71:ad:88:c0:52:e1:cd:0c:19:be:88:cd:
9b:91:a4:11:24:b6:ba:14:02:37:b9:e6:c3:67:45:
51:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:31:6E:31:19:78:8E:A5:0A:22:98:CF:0D:8A:F9:46:B8:CC:75:9A
X509v3 Authority Key Identifier:
keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/GzFuMRl4jqUKIpjPDYr5RrjMdZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.58.0/23
46.28.63.0/24
Signature Algorithm: sha256WithRSAEncryption
98:85:33:d8:0c:f0:85:c8:b8:4e:cd:b8:45:22:5f:94:68:29:
a0:15:bb:e2:33:1c:7c:79:a9:1b:ef:88:d6:d0:e3:62:1b:46:
dc:4a:23:91:b9:bd:7a:dd:df:47:f5:f5:7b:f7:a6:fd:14:ad:
29:1e:61:1b:41:9b:a3:03:4f:e0:29:52:b9:2b:42:51:68:2b:
47:d8:a0:fa:6e:1f:92:fa:7a:a3:a0:ee:dc:da:d4:42:08:8e:
b5:9e:44:19:cc:fe:0c:bd:ed:05:8c:2c:26:07:04:11:2b:0f:
34:70:36:94:c7:da:f3:62:65:2f:a2:6a:40:8e:33:3f:b3:15:
d4:92:68:05:3f:a7:3b:32:1a:73:a1:6d:89:17:01:5a:19:4e:
8a:94:09:68:32:bc:2e:f0:03:f0:63:24:dc:8e:1f:63:1c:03:
79:59:b4:57:05:66:8c:4a:98:8b:fd:68:c8:a8:1a:97:7a:f1:
d2:b5:51:ca:f3:17:aa:30:ae:b3:18:e3:cb:3c:bf:f9:65:4c:
89:3c:23:5f:be:ac:0f:1a:b2:d5:26:9b:1d:e4:05:7c:e9:99:
0a:c4:39:37:5f:76:c8:35:e8:17:ee:8b:de:32:85:e1:fb:7a:
3d:0b:96:7b:b6:24:54:46:9b:60:41:6f:e0:ac:38:a2:83:cb:
25:50:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:10 2024 by rpki-client on console-fra.rpki-client.org