Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/G23hiCsU46v-SOBE0Jel0j6kj04.roa
File: G23hiCsU46v-SOBE0Jel0j6kj04.roa (raw, json)
Hash identifier: K08A4wBQ1ZtKPdHfZfIEIEFH9eK6gl8j82pbp5GfEAo=
Subject key identifier: 1B:6D:E1:88:2B:14:E3:AB:FE:48:E0:44:D0:97:A5:D2:3E:A4:8F:4E
Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial: 01856F3006066DAF2BC235E68F0C748F0A1A
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/G23hiCsU46v-SOBE0Jel0j6kj04.roa
Signing time: Sun 01 Jan 2023 21:14:56 +0000
ROA not before: Sun 01 Jan 2023 21:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60345
IP address blocks: 46.18.110.0/24 maxlen: 24
2a11:8f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:06:06:6d:af:2b:c2:35:e6:8f:0c:74:8f:0a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Validity
Not Before: Jan 1 21:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b6de1882b14e3abfe48e044d097a5d23ea48f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:79:19:4b:69:43:15:64:06:72:c7:aa:98:
96:67:4b:f9:aa:27:ec:40:76:17:ab:d1:73:a7:b4:
85:5f:f0:0b:5a:4e:a9:c4:65:eb:2f:2b:01:d1:71:
a6:fc:08:dc:fd:f5:e7:99:7f:18:94:ba:0a:b6:85:
25:dd:1d:71:bc:16:fe:48:2c:59:f0:df:21:4d:a6:
7e:7b:00:2c:d3:8c:93:a9:20:a1:95:57:8c:78:4e:
10:d1:98:54:a3:28:09:bf:ec:f5:e7:df:61:a6:37:
1c:47:be:4e:96:20:da:24:29:15:3d:a1:e2:c3:5b:
c9:f4:88:a1:1e:23:03:75:ce:d3:39:b0:5b:15:2f:
ec:63:0e:86:51:b2:c6:c4:fc:38:fd:dd:5f:2b:d6:
5a:fd:f4:be:0d:b9:f0:79:3b:1c:2b:9b:27:89:ee:
80:24:1e:cb:72:d6:95:13:a2:41:d7:95:77:75:cb:
a5:10:0a:e1:4a:49:d0:bd:16:34:29:8c:a2:f5:e5:
2f:b2:78:2d:b9:7d:eb:7e:51:fd:d9:b5:21:2a:70:
b9:7d:e3:af:30:f4:77:e5:72:a2:92:31:3c:c3:7d:
a9:18:69:a8:d1:b6:49:3f:4f:6b:4c:1c:5e:43:75:
1f:bb:05:07:07:d8:6f:7e:59:de:75:bb:ad:2f:fa:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:E1:88:2B:14:E3:AB:FE:48:E0:44:D0:97:A5:D2:3E:A4:8F:4E
X509v3 Authority Key Identifier:
keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/G23hiCsU46v-SOBE0Jel0j6kj04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.110.0/24
IPv6:
2a11:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
38:d5:84:fd:15:40:eb:76:93:fa:e3:b4:75:61:1b:e6:f7:07:
d0:80:2d:38:82:a1:3f:34:d0:34:3a:ec:f2:bc:d4:32:68:0a:
f0:d7:c9:27:a2:1a:6c:5b:92:8a:fc:52:7e:f1:9b:c3:6e:01:
1d:2e:8d:82:9a:f1:db:43:ca:ec:c6:08:93:f9:cb:29:5b:9f:
95:f0:ed:de:f6:1f:2a:4d:5e:8c:7f:81:20:5a:da:c6:ff:ad:
8b:af:8a:07:72:78:b9:48:76:1b:5f:cb:20:c4:7f:2c:ef:66:
e3:91:3d:26:29:ba:05:d0:b5:65:17:cd:80:87:15:a5:f9:5a:
c6:7d:61:76:46:ae:70:50:83:9a:46:d4:4e:6b:f4:5e:46:b5:
3c:9f:c7:2e:d8:c8:94:75:bd:99:87:7f:3a:f3:e9:3f:73:22:
99:18:17:ac:84:3d:c9:95:ad:9c:27:24:e3:7a:4c:1c:26:2f:
e3:a4:ad:5f:57:8e:9c:54:97:97:73:f1:e6:43:6b:c1:05:e4:
17:74:b5:ee:7b:01:bb:47:0e:6d:b3:92:dd:d7:8c:29:c6:a5:
7a:bd:7b:31:c2:51:d1:25:55:db:39:29:3a:39:02:f6:10:71:
1d:14:b8:33:b6:16:ae:09:d5:a3:bc:ff:a6:86:d1:95:cf:64:
b5:32:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org