Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/k_J9aoOI7OSBcjRRLJhYQe3cNDA.roa
File: k_J9aoOI7OSBcjRRLJhYQe3cNDA.roa (raw, json)
Hash identifier: mZm8VW636kczmGLwDKQPsxqVIfhrLxAtgdUVc6SWMLU=
Subject key identifier: 93:F2:7D:6A:83:88:EC:E4:81:72:34:51:2C:98:58:41:ED:DC:34:30
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018895B33E24B52AC16A8A61FD65FC210C3C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/k_J9aoOI7OSBcjRRLJhYQe3cNDA.roa
Signing time: Wed 07 Jun 2023 11:52:11 +0000
ROA not before: Wed 07 Jun 2023 11:52:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 14:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:b3:3e:24:b5:2a:c1:6a:8a:61:fd:65:fc:21:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 7 11:52:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93f27d6a8388ece4817234512c985841eddc3430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:7b:c3:5e:8e:1a:1f:0f:0e:00:b7:31:63:
e3:a1:91:62:ff:70:4b:a8:94:dd:ee:a4:06:73:54:
01:35:25:95:89:3b:7c:48:b5:ca:ce:ba:01:62:09:
be:2c:4f:01:9e:06:9c:24:b0:90:0f:3c:f4:89:81:
94:45:b2:48:bc:09:3f:36:ae:35:a3:92:fd:da:1e:
2e:40:27:be:29:a1:f1:4a:cf:07:43:49:18:f4:06:
86:98:94:21:d4:a9:70:0c:7e:fb:50:aa:76:4b:75:
eb:75:af:ba:85:19:e7:5b:e2:ee:2d:4e:fe:3b:74:
41:57:08:02:79:9a:80:e2:72:f4:17:85:96:5f:4a:
3c:82:e7:7f:82:2f:36:60:71:37:c8:8b:a0:b9:e3:
56:cf:e3:29:c6:c4:39:5d:ce:90:24:97:62:6b:4d:
6b:97:77:ba:ce:97:ff:4c:16:a1:8f:5c:e3:8e:57:
25:55:e6:29:b5:21:4d:69:14:4e:55:f9:4e:52:a5:
1c:e1:4c:71:a5:28:48:9b:7c:8e:ce:b0:30:ac:f9:
40:23:6c:08:b6:51:ea:a4:1e:c2:1d:b4:79:8e:48:
7f:a4:53:6f:a2:76:d6:d6:40:93:cd:d5:64:f1:65:
45:80:05:1e:c9:68:55:e1:ae:0c:04:7d:41:07:93:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:7D:6A:83:88:EC:E4:81:72:34:51:2C:98:58:41:ED:DC:34:30
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/k_J9aoOI7OSBcjRRLJhYQe3cNDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
89:81:3c:57:65:92:db:d7:43:0e:68:f3:f2:a4:c3:9d:b3:5d:
f6:9e:38:e2:ce:0c:06:fd:83:b2:6a:99:52:27:26:e4:d0:ff:
11:ae:13:13:e7:86:af:c0:cd:30:c4:6e:79:60:41:9f:97:7a:
b3:7c:b7:dd:9b:a6:3f:36:63:9e:43:cb:eb:6f:ac:df:d9:5f:
87:03:b3:7c:18:83:3b:c6:70:ee:ce:6a:49:19:90:3c:88:ab:
60:8e:d8:4f:2a:29:4b:b5:5e:27:5b:f5:80:5c:d2:8a:f5:9a:
1c:54:26:86:ea:fd:8b:99:c7:70:22:dc:24:00:8f:fe:73:69:
74:d4:cb:e3:4b:ef:6b:2e:40:77:9a:1f:c8:8d:ab:c6:44:14:
60:af:69:82:e5:10:01:01:d1:20:cc:62:ee:a8:ec:4a:8b:b1:
94:c0:9f:2d:62:6b:ce:60:73:20:2f:bd:06:d2:5d:52:2b:42:
3c:20:4e:35:c8:1e:c3:94:74:cc:c7:ee:a9:99:cb:b7:f0:01:
37:3f:a4:e9:bb:e7:2f:56:d8:07:3e:30:70:67:c4:5a:a1:8a:
f2:47:f3:e1:a5:4d:67:1c:b9:65:9b:45:30:4c:f9:eb:0c:05:
20:d2:52:0e:58:ec:83:a7:f1:a4:87:6d:5f:c8:ef:f4:2c:77:
31:95:d4:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org