Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/FAc3TLkiF7eRR6lsiI4HZct7CjM.roa
File: FAc3TLkiF7eRR6lsiI4HZct7CjM.roa (raw, json)
Hash identifier: KZlrE3/BApd6ou6EG+toJvQWNHN6ewTEaKzH6ZsNXLM=
Subject key identifier: 14:07:37:4C:B9:22:17:B7:91:47:A9:6C:88:8E:07:65:CB:7B:0A:33
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01856FCB845DBA9CD913E55E78CA68A88B3D
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/FAc3TLkiF7eRR6lsiI4HZct7CjM.roa
Signing time: Mon 02 Jan 2023 00:04:46 +0000
ROA not before: Mon 02 Jan 2023 00:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21230
IP address blocks: 46.35.160.0/21 maxlen: 24
46.35.168.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:84:5d:ba:9c:d9:13:e5:5e:78:ca:68:a8:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Jan 2 00:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1407374cb92217b79147a96c888e0765cb7b0a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:84:55:b6:68:99:b9:95:e2:6d:78:82:bb:
58:3c:b0:3f:ea:25:9b:c1:58:19:aa:68:ef:09:8e:
96:fa:e2:7e:20:5f:c1:2e:74:37:21:a4:4e:3d:d2:
1f:1c:7a:b2:7a:0e:e0:8e:4e:aa:d6:66:06:00:13:
a6:a3:5b:5a:61:7d:d4:67:0a:02:ef:96:99:13:b0:
65:ee:0f:16:af:e8:f6:21:60:5c:df:75:03:ec:a3:
35:76:80:2b:5e:f3:03:5c:c9:a1:a5:07:70:3f:02:
04:ca:2d:8b:c6:4a:57:52:b4:3d:39:14:24:6b:97:
cf:f8:fb:07:9a:d3:6a:ea:45:13:36:1f:4e:0d:a3:
35:d5:0c:b6:65:f2:fb:98:82:b9:1c:e8:cf:00:9e:
52:c5:20:e7:09:cf:fc:ca:9b:87:17:50:a4:85:04:
71:b5:e4:31:96:36:8d:d2:f5:4f:61:cb:f8:a2:70:
27:53:46:a9:46:89:b1:83:54:07:55:bd:48:98:e3:
d4:23:a7:45:11:8a:08:88:3e:1b:93:60:ec:e0:d0:
ed:8d:9f:11:b4:a4:32:93:7a:0c:d3:12:fa:8c:6e:
28:42:f9:12:04:58:b7:58:fe:83:e0:dc:c1:5f:de:
ee:03:c9:97:43:13:0c:c2:26:49:d6:f0:9c:0a:67:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:07:37:4C:B9:22:17:B7:91:47:A9:6C:88:8E:07:65:CB:7B:0A:33
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/FAc3TLkiF7eRR6lsiI4HZct7CjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0-46.35.169.255
Signature Algorithm: sha256WithRSAEncryption
58:41:38:9d:56:bf:87:3b:25:e7:d9:64:77:07:44:3e:15:ab:
c7:bf:c4:20:62:5d:f7:fb:b0:7e:55:aa:4e:e8:61:d2:91:27:
15:65:96:7e:55:36:d9:a5:c8:55:a0:cb:75:ac:39:ae:dc:9b:
d7:40:83:b8:68:c2:e1:cb:5f:f2:23:8c:4f:36:92:32:ae:cc:
fd:0d:ef:e7:36:d2:07:c9:d1:9f:09:05:8f:ac:38:e2:bf:bb:
9f:bd:b2:ae:66:e3:57:e3:80:30:f5:03:33:15:f0:f1:fd:46:
d7:79:81:3b:f9:a0:ab:ee:f2:f1:12:6e:b8:4e:0c:09:bd:37:
86:b7:58:c9:99:63:6d:93:8c:10:3d:cb:c1:15:e4:5d:2a:f3:
01:e7:32:65:90:95:83:be:fd:77:99:13:23:7b:9f:e1:d3:eb:
ac:4b:47:32:83:ac:5e:13:b3:d5:a6:a1:d3:8e:05:34:42:7f:
d0:7d:10:14:9f:cf:d4:dd:ef:64:e9:00:1f:5b:f7:bc:02:40:
76:2d:73:59:c6:81:a2:fd:47:d1:4c:2d:30:7e:c7:90:83:84:
f8:1e:83:7d:fc:f5:9b:08:80:98:a3:62:92:e1:60:f2:36:fc:
16:a5:a3:ae:55:51:c9:33:cd:f2:ef:4c:95:1a:16:44:41:b6:
e2:77:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:29 2024 by rpki-client on console-fra.rpki-client.org