Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/xpsx1I9-6nasFqhhSK8SKQ-Pqe0.roa
File: xpsx1I9-6nasFqhhSK8SKQ-Pqe0.roa (raw, json)
Hash identifier: EGYDltqQdo/49zhfEcC2uzsJ+PP8zbTYeenuYpe16HQ=
Subject key identifier: C6:9B:31:D4:8F:7E:EA:76:AC:16:A8:61:48:AF:12:29:0F:8F:A9:ED
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01856F9DF9C4B8C9230AF3BA5D667AB5E685
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/xpsx1I9-6nasFqhhSK8SKQ-Pqe0.roa
Signing time: Sun 01 Jan 2023 23:15:02 +0000
ROA not before: Sun 01 Jan 2023 23:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213192
IP address blocks: 46.235.40.0/21 maxlen: 21
83.150.232.0/22 maxlen: 22
83.150.235.0/24 maxlen: 24
2a00:d640::/32 maxlen: 32
2a00:d641::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:f9:c4:b8:c9:23:0a:f3:ba:5d:66:7a:b5:e6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jan 1 23:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c69b31d48f7eea76ac16a86148af12290f8fa9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:50:01:34:23:28:2e:d7:af:15:be:6a:b5:
d0:e4:49:9a:19:e0:b0:b3:bf:3c:16:04:92:05:09:
4f:2f:84:4c:66:fb:5f:96:30:30:7d:db:a6:52:ef:
02:ab:22:15:17:08:69:ad:bb:2d:30:f0:e4:df:53:
26:d6:10:57:2d:9c:1c:32:35:66:29:87:b5:51:47:
50:85:64:c6:e5:73:c0:e7:8c:2b:4d:cb:2e:bf:77:
2c:18:c6:82:2d:e5:3f:c2:a7:3f:4c:f8:e4:10:9d:
4e:e8:cd:91:0c:b0:ad:3b:5c:e6:24:34:95:c2:55:
2c:ef:1c:cb:ad:c9:51:2c:0d:dc:cb:5b:6b:02:af:
77:75:2f:3f:0f:fb:6e:17:6f:48:a6:49:05:06:5f:
8f:4f:8c:a8:b3:03:02:9d:a5:51:52:7b:9a:5b:69:
eb:bb:1e:c2:28:eb:db:2d:bd:fe:3f:87:4d:7b:ad:
af:a4:6c:36:cd:59:17:6b:9e:53:53:3b:0b:3a:7f:
69:d5:34:6d:8a:2c:38:59:7a:16:aa:ec:11:c5:0b:
c4:c5:f6:89:cc:34:37:35:eb:78:d7:dd:74:25:21:
07:13:a4:c5:0d:e5:0c:6f:eb:25:0e:cb:86:54:9d:
5f:8a:36:4d:8d:29:a0:2a:8b:a7:a7:f5:b6:27:dc:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:31:D4:8F:7E:EA:76:AC:16:A8:61:48:AF:12:29:0F:8F:A9:ED
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/xpsx1I9-6nasFqhhSK8SKQ-Pqe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.40.0/21
83.150.232.0/22
IPv6:
2a00:d640::/31
Signature Algorithm: sha256WithRSAEncryption
47:b1:c3:2b:40:78:7d:f2:85:3d:94:11:30:4c:b5:53:df:9c:
19:39:4f:f6:5e:97:cd:43:e1:b2:fb:be:3c:5b:21:41:00:e1:
ae:b3:cd:b1:72:64:b5:4b:51:4d:ce:d9:f0:f2:62:29:e5:ad:
d3:39:c6:54:67:2d:8b:c1:f3:fe:b4:81:af:c5:6a:8a:99:65:
c0:c4:7e:b5:0d:c3:c4:3e:29:55:67:96:2a:fd:75:d7:a8:5b:
79:17:87:7a:f1:60:dd:99:ad:40:a0:53:1f:de:6c:6a:fe:0e:
dd:54:32:45:1c:df:12:55:0f:cc:9d:dd:70:a9:fa:2c:6d:58:
50:ed:79:b0:48:c3:b0:41:93:c6:b0:6a:7a:53:a6:03:ed:3b:
66:de:c3:af:cc:e9:33:a3:cb:7f:e3:b2:a6:f3:83:c1:ad:a6:
bf:0b:d5:4d:74:c0:45:9a:db:c7:4a:8d:a6:1c:01:cd:da:b0:
c5:5f:cf:25:67:77:de:7d:9a:89:ff:0d:99:2b:e2:5a:73:7d:
fe:89:01:5a:2b:5f:d1:93:30:4b:b9:fe:29:13:77:ce:52:a4:
e8:48:2e:d5:a8:e5:60:ee:56:e7:35:50:56:99:1a:88:fc:c5:
6b:e1:39:a5:c4:0b:ef:ac:27:25:a5:8b:ac:97:52:33:0c:47:
ee:a0:da:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:36 2024 by rpki-client on console-ams.rpki-client.org