Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4Z5u9AJRz9cAmSo18dBx_sSbgo.roa
File: U4Z5u9AJRz9cAmSo18dBx_sSbgo.roa (raw, json)
Hash identifier: OildkJ+dgOWeXfurxRIrWl4dlF80KjCk9jaHxL3hRF0=
Subject key identifier: 53:86:79:BB:D0:09:47:3F:5C:02:64:A8:D7:C7:41:C7:FB:12:6E:0A
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188B9D942F1C59E60F96071253065D434BD
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4Z5u9AJRz9cAmSo18dBx_sSbgo.roa
Signing time: Wed 14 Jun 2023 12:20:03 +0000
ROA not before: Wed 14 Jun 2023 12:20:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 13:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:d9:42:f1:c5:9e:60:f9:60:71:25:30:65:d4:34:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 12:20:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=538679bbd009473f5c0264a8d7c741c7fb126e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:84:dc:7f:60:2e:86:13:64:9f:67:d5:17:
99:1e:da:dc:56:73:18:f0:85:39:63:74:bb:7c:69:
c5:a5:13:aa:61:73:c8:4d:19:de:ad:10:d6:26:e0:
b8:0f:df:26:ad:1f:b4:bf:09:14:f9:42:40:a8:c7:
4f:7e:cd:b6:8b:02:4a:f3:9b:fb:60:18:7d:c5:36:
ad:41:5d:a1:f5:96:a3:75:60:b5:61:11:e6:50:91:
ac:5e:b9:4e:a5:9a:de:94:4e:e1:c1:5a:ac:e0:68:
e4:6e:3f:6c:d3:29:a4:f3:0d:a3:fb:b2:07:0a:93:
ac:eb:1e:26:49:d1:ec:db:5f:9b:37:12:d5:26:e4:
34:95:61:4e:07:2d:92:2f:d7:59:6d:1e:6e:39:8a:
88:12:91:0e:7a:39:53:94:e4:7b:83:79:b3:2c:e9:
94:82:b4:92:c1:2c:0b:a5:63:fc:17:50:93:50:1f:
2a:50:ca:62:6f:f9:de:0d:1a:8c:8d:26:f3:91:34:
9c:95:d9:cb:98:ab:1d:44:5c:75:d3:e7:00:44:f1:
8c:14:59:f3:25:ee:95:c4:03:ef:a6:52:07:65:8c:
22:c5:d6:34:ca:9c:92:0f:67:9e:4a:41:47:cc:49:
cf:af:64:94:1e:3b:4f:70:f1:52:a8:d4:70:77:18:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:86:79:BB:D0:09:47:3F:5C:02:64:A8:D7:C7:41:C7:FB:12:6E:0A
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4Z5u9AJRz9cAmSo18dBx_sSbgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.136.0/23
Signature Algorithm: sha256WithRSAEncryption
49:1c:79:68:65:bb:2a:3b:13:25:15:08:43:6b:29:56:01:ca:
d4:81:11:d0:39:53:59:3b:72:48:57:c4:de:db:32:0d:1a:39:
a8:6d:f1:47:e0:f7:c7:c7:56:79:be:ce:e1:1c:8f:ad:ab:a1:
23:52:7e:c6:a5:c4:8d:36:82:5c:27:95:5a:b7:a2:10:a0:88:
22:3a:24:5f:73:66:ce:4b:ff:9b:09:3e:99:46:91:51:4a:87:
40:35:1f:8e:42:6c:10:a8:39:37:ec:21:22:37:df:d7:1c:98:
92:b7:fe:ad:b4:9b:16:cd:23:5c:e9:43:95:61:38:62:3b:e4:
78:1e:e2:6d:36:af:91:9d:e3:6c:32:ca:42:5c:c9:f2:21:82:
66:1b:3e:36:35:31:0d:86:28:01:5d:6b:e9:4e:2e:b3:a9:25:
fb:1a:9a:12:25:5e:09:96:98:14:f2:e9:86:ac:d2:07:f0:c4:
28:9c:66:93:79:26:00:09:41:c0:ce:60:e8:53:c9:d1:bb:ef:
4c:d9:bd:09:e7:5b:59:71:18:90:83:33:5a:e9:48:19:06:56:
72:33:1b:55:33:52:a5:0c:16:08:e6:36:99:ac:d2:12:e2:37:
a4:bb:e9:48:c6:0e:6a:42:fc:10:72:77:5e:e8:66:cd:ce:47:
4e:05:38:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org