Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Cki7cSWvQfKgcG0bvt2A8RHtfFE.roa
File: Cki7cSWvQfKgcG0bvt2A8RHtfFE.roa (raw, json)
Hash identifier: 2mYUIzGm43pVbnf7r+/VlJ3v058ABMVKlTAlaPpQxfo=
Subject key identifier: 0A:48:BB:71:25:AF:41:F2:A0:70:6D:1B:BE:DD:80:F1:11:ED:7C:51
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01860777BB2E94B38198FA387CCD760A625E
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Cki7cSWvQfKgcG0bvt2A8RHtfFE.roa
Signing time: Tue 31 Jan 2023 10:55:32 +0000
ROA not before: Tue 31 Jan 2023 10:55:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43444
IP address blocks: 46.19.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 16:17:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:77:bb:2e:94:b3:81:98:fa:38:7c:cd:76:0a:62:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 31 10:55:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a48bb7125af41f2a0706d1bbedd80f111ed7c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:97:35:a5:2a:7c:11:3c:4c:20:1f:9f:70:
67:95:dc:68:64:9e:51:34:48:71:fd:2f:c7:72:dd:
fc:f6:9a:4e:d4:10:49:5c:cd:dd:bb:a6:40:2b:12:
1b:95:7d:47:f7:29:08:0c:9a:a9:07:92:46:8b:ce:
c7:ca:45:41:48:75:95:d7:a6:2b:5b:90:bb:39:bd:
a5:11:3d:be:1b:b9:17:b7:ee:64:77:dc:60:77:71:
05:8c:f0:be:02:98:d0:bc:80:57:f6:ae:f4:b3:c8:
9e:02:f1:db:73:b5:6f:be:97:dc:70:f0:f4:dc:b5:
4f:a0:79:dc:24:4e:81:ff:47:d9:7b:2c:0c:cf:08:
ca:d2:8a:e9:37:f3:cd:1f:bf:71:12:80:11:f6:4a:
bb:eb:44:47:d0:ad:70:42:e5:45:11:06:11:6d:21:
e1:96:8a:df:16:ea:2d:c6:32:af:62:f2:35:5e:27:
b0:73:d9:9e:fd:3f:9d:9d:97:06:b8:12:3d:42:72:
3c:1d:67:f5:f3:d9:ee:a5:33:a5:4e:4f:01:85:47:
39:f6:b5:28:69:a9:33:6e:08:e5:75:b6:22:57:fa:
71:6f:15:9a:65:9a:d8:d4:fb:a1:6d:9c:75:de:91:
e5:3e:98:95:61:5e:f1:38:d6:5e:ed:1b:ba:57:89:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:48:BB:71:25:AF:41:F2:A0:70:6D:1B:BE:DD:80:F1:11:ED:7C:51
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Cki7cSWvQfKgcG0bvt2A8RHtfFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8c:df:d7:a7:3c:6c:0a:1f:2c:a6:19:52:83:ea:4a:42:f3:
30:a1:96:01:a6:eb:ba:7c:83:c1:f7:d0:5d:96:77:47:f0:2d:
61:47:ff:10:39:6d:25:95:07:b8:6a:6c:de:87:e9:a8:e0:ef:
0d:57:3a:43:1d:6f:45:39:67:4e:57:f4:e9:f7:4f:46:62:6f:
fc:50:e5:25:c3:2c:9b:f1:a0:a4:72:53:8b:7d:02:8d:f8:82:
b8:26:4a:2b:fd:71:48:c6:d8:d4:c6:bb:5a:e8:30:dd:95:13:
a9:4f:52:9c:b9:be:30:f3:18:16:cc:91:b7:cc:31:eb:85:58:
66:23:8b:f6:3b:74:cb:64:6b:1c:4f:fe:3e:0c:37:e1:de:0a:
e8:84:2e:cc:88:5b:72:2e:96:6d:b6:6b:05:01:b6:af:0f:92:
d6:08:db:9c:f3:c9:3e:24:48:4a:09:31:eb:9b:87:1a:42:b1:
a8:b0:9f:bc:0f:11:d3:f5:f7:a7:e7:88:88:00:2e:a4:7c:54:
3b:d4:34:59:d9:6d:bb:2a:f0:ac:c0:cb:f5:a7:ae:2d:49:2a:
f5:78:d7:c9:3c:0d:db:70:71:63:d9:33:eb:21:c7:7c:14:22:
e9:e9:13:a0:f0:c2:b0:ea:e7:21:d1:cf:d3:db:58:54:5e:b5:
1f:75:eb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:15 2024 by rpki-client on console-ams.rpki-client.org