Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/TpO5qqS7cJDQ7pniZzmC21-SHpc.roa
File: TpO5qqS7cJDQ7pniZzmC21-SHpc.roa (raw, json)
Hash identifier: OG7+i5zHrjJglm+QWP3Lt/LxGEEelppLNk/83q6458M=
Subject key identifier: 4E:93:B9:AA:A4:BB:70:90:D0:EE:99:E2:67:39:82:DB:5F:92:1E:97
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018895B33EC6B3D658CD13A9B3A78019E58D
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/TpO5qqS7cJDQ7pniZzmC21-SHpc.roa
Signing time: Wed 07 Jun 2023 11:52:12 +0000
ROA not before: Wed 07 Jun 2023 11:52:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:b3:3e:c6:b3:d6:58:cd:13:a9:b3:a7:80:19:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 7 11:52:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e93b9aaa4bb7090d0ee99e2673982db5f921e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:3d:b3:f1:11:5c:c4:75:19:3f:f9:7e:8c:
59:46:fa:50:67:d0:b4:5c:d0:49:28:a3:6d:ef:46:
92:42:bd:b1:05:dd:d6:4c:50:6d:97:db:62:59:ca:
26:72:20:c2:0e:a8:bc:72:da:5d:a5:e2:1d:d1:2f:
5e:dd:56:bd:f9:a3:d7:be:80:10:c7:e9:dd:81:46:
c9:6b:0f:11:62:0f:9f:3d:da:54:1c:a9:20:8f:64:
16:99:03:7b:a0:7c:22:f9:2c:23:1d:71:4c:cf:40:
fb:fa:df:be:6e:b0:b1:fe:39:f6:de:f7:e1:49:b2:
a0:18:92:53:eb:a9:2f:49:94:e2:fa:0d:38:48:37:
61:55:b6:10:53:78:f8:f7:05:d3:fd:5c:05:84:dc:
4d:fa:a2:db:f2:97:43:68:71:8c:ce:4e:d0:4e:fe:
85:ea:8f:aa:f9:72:8f:09:87:8e:64:76:15:93:f8:
94:14:c4:0c:00:86:6f:90:ed:a1:6c:7b:e2:2e:8f:
9d:3a:2f:8b:c4:e2:05:04:2f:35:77:fa:7d:ea:a3:
92:da:34:0a:6c:57:ae:e0:16:49:71:c4:b0:e0:c8:
fd:66:77:b5:30:78:f4:1f:cc:70:6d:c0:b8:b7:b2:
f2:d1:14:4f:b2:7e:8f:b0:70:59:f7:b8:d2:b2:f7:
c0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:B9:AA:A4:BB:70:90:D0:EE:99:E2:67:39:82:DB:5F:92:1E:97
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/TpO5qqS7cJDQ7pniZzmC21-SHpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
7b:78:8c:42:cf:91:29:8c:af:ab:f1:74:30:63:9b:d2:48:ff:
65:5d:bf:23:04:e6:0d:08:f4:04:8b:2c:78:f8:5b:02:b5:87:
7b:21:4f:85:d6:31:26:2f:c1:5c:4f:7d:78:73:5d:fa:b7:ea:
0c:78:b4:ee:0b:be:74:7c:eb:22:7f:0a:f5:dc:5a:c8:db:ac:
2c:d5:05:09:df:69:13:63:ee:f9:f6:cb:0d:96:1e:bf:53:f6:
9e:fd:42:0e:0c:5f:0e:94:5c:2d:29:ea:08:91:c7:64:a0:5f:
59:5d:b7:2c:0f:c5:ff:c1:5f:93:15:f3:88:28:32:dd:b5:96:
a0:9e:4a:5c:b2:73:41:79:95:28:46:ad:c9:fa:c0:d6:2c:9b:
5a:3b:3c:73:01:2c:fc:7e:a2:66:1e:15:5a:4c:31:dd:9b:e5:
14:53:ed:ec:cc:1d:9c:e1:ab:1c:62:4a:b1:99:0b:a7:ab:b4:
80:85:7d:79:e4:08:7f:dc:10:f4:c2:4e:75:3f:ec:19:2f:3a:
17:46:01:6c:a2:e3:08:7c:a6:88:3e:1e:63:76:28:8c:f7:39:
b3:7d:57:ed:35:98:08:bd:c1:c3:55:a7:44:81:a1:42:fd:78:
b8:34:9e:25:75:d1:15:ec:65:61:b8:d4:01:a6:e2:9c:f7:72:
ac:f9:af:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org