Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/FkcNyKZw0hD4TOecR3o90noPHPI.roa
File: FkcNyKZw0hD4TOecR3o90noPHPI.roa (raw, json)
Hash identifier: 4TRNqUyhpJzwzx7WGwLkM86zjbp/fZwCYE2XjxKXjYs=
Subject key identifier: 16:47:0D:C8:A6:70:D2:10:F8:4C:E7:9C:47:7A:3D:D2:7A:0F:1C:F2
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018896528C8E1B218D71840EFD8069EEE3F0
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/FkcNyKZw0hD4TOecR3o90noPHPI.roa
Signing time: Wed 07 Jun 2023 14:46:12 +0000
ROA not before: Wed 07 Jun 2023 14:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:52:8c:8e:1b:21:8d:71:84:0e:fd:80:69:ee:e3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 7 14:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16470dc8a670d210f84ce79c477a3dd27a0f1cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:39:42:3c:2a:f1:ad:60:a5:b7:60:5b:72:
bb:0e:47:cc:0d:67:b6:f1:e0:f3:48:c5:5b:50:08:
7b:07:75:19:b6:23:a0:0c:bf:9a:4c:94:df:ed:29:
74:77:6d:77:13:06:a2:0e:c1:e2:20:ad:ee:6a:59:
0d:cd:8a:23:04:22:ed:55:81:ed:b8:00:00:f9:9e:
6d:4a:1b:89:a8:73:9e:db:a5:be:33:5e:19:ba:ae:
32:be:a0:13:f4:b6:53:84:ed:ea:93:57:a8:84:3e:
31:d1:56:f8:59:fa:03:03:f6:43:a8:0b:d4:f8:6b:
19:68:a8:de:14:97:68:38:ef:a1:d6:54:e7:9a:1c:
27:78:dd:d1:e3:b5:b9:9c:58:e0:01:af:78:8f:8d:
5a:77:74:77:85:40:e9:cd:53:d9:b5:46:a1:26:66:
31:05:31:be:9d:34:1d:de:f6:69:4a:c3:fb:2e:6c:
1a:59:ab:1e:58:8e:3c:54:8f:64:7b:33:c9:58:ba:
7a:23:f6:8c:a3:26:a6:76:08:40:3a:f9:4a:83:b9:
65:09:20:c8:67:f6:96:5f:2e:68:e3:25:3d:8a:79:
0c:ca:c8:25:38:fc:67:7a:d8:45:9f:9a:1b:ce:17:
51:77:5f:6e:dd:ae:da:57:8b:12:be:de:1d:98:a6:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:0D:C8:A6:70:D2:10:F8:4C:E7:9C:47:7A:3D:D2:7A:0F:1C:F2
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/FkcNyKZw0hD4TOecR3o90noPHPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
63:05:04:d2:70:72:5e:70:a1:4e:86:d2:41:53:83:c7:7f:68:
8c:b0:21:28:2f:b9:ae:70:1c:bf:92:ce:22:61:ec:af:f4:c8:
d7:d5:09:9f:b1:08:4d:00:0a:e3:da:d6:c5:4b:57:b8:e2:5f:
de:57:40:63:9a:26:cd:ae:84:5b:7d:1d:36:cd:e3:8f:0d:d2:
65:3b:4e:e1:96:9e:b2:bd:af:51:1b:64:ae:a2:0a:b3:06:5b:
b6:0f:85:f5:27:a2:3f:8c:c0:46:58:d3:30:73:c6:8c:21:1d:
f5:cd:30:c9:e3:cc:d0:48:6d:02:67:c3:80:8a:18:e4:fa:53:
a1:76:02:9a:b1:b8:27:6e:b7:37:cc:28:79:6a:05:bc:96:84:
c0:a7:a6:bf:73:64:ed:6a:95:9f:26:47:07:d6:a0:d8:44:48:
49:63:de:f7:9f:16:2b:92:47:33:8c:4e:9c:68:b1:bd:b6:21:
ec:b8:55:6c:44:dc:53:41:de:79:96:73:27:01:8a:1e:23:ed:
a7:14:b3:ed:24:32:9b:11:fe:e4:92:1a:06:59:ed:91:34:bf:
64:b4:c1:c9:83:76:36:f5:c3:91:7f:93:42:9d:fc:23:e2:39:
d3:61:b3:1a:be:dc:54:2d:16:74:bd:c5:e9:12:20:7b:f1:d9:
91:bf:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org