Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ADWsLRRrzRGM5H5m3bUy4EmksV8.roa
File: ADWsLRRrzRGM5H5m3bUy4EmksV8.roa (raw, json)
Hash identifier: vuiWTtKEjuFKByYk4Ru3rMzyPDJGmo9JJ2VQsYM5KOE=
Subject key identifier: 00:35:AC:2D:14:6B:CD:11:8C:E4:7E:66:DD:B5:32:E0:49:A4:B1:5F
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018857E80AB1E5A5FD1AEDA0A7BECCE96239
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ADWsLRRrzRGM5H5m3bUy4EmksV8.roa
Signing time: Fri 26 May 2023 11:53:24 +0000
ROA not before: Fri 26 May 2023 11:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196925
IP address blocks: 46.32.169.0/24 maxlen: 24
46.32.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:e8:0a:b1:e5:a5:fd:1a:ed:a0:a7:be:cc:e9:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: May 26 11:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0035ac2d146bcd118ce47e66ddb532e049a4b15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:16:69:f0:03:4c:9e:f0:e9:60:4c:6c:1f:20:
8e:e4:ab:cd:23:e4:88:eb:b8:1a:7f:1e:0e:59:a1:
cd:f9:56:7f:b7:cc:6c:db:ae:dc:d8:67:7b:6c:cd:
f1:bf:4d:36:02:3a:86:90:21:2d:3f:4e:6a:b3:d9:
57:10:78:ef:04:21:4e:d3:08:ed:6c:0f:f8:bf:a1:
71:c9:a5:42:15:1d:19:0e:da:72:d4:28:22:c8:1b:
11:71:69:6a:04:78:cb:b7:25:ff:e5:ab:c3:a3:e4:
74:e7:72:85:84:3e:8c:34:22:c2:0f:cf:92:f0:b6:
29:77:a6:bd:67:7f:64:08:65:d2:f2:93:bd:e2:d6:
a5:ab:df:7b:97:bc:76:4e:6c:e8:3c:2e:b3:3e:d3:
36:0e:c6:31:e7:a0:c8:c8:b0:e3:b6:5d:84:98:e6:
df:72:ec:86:33:61:c8:1f:32:c1:84:5f:d9:5c:33:
0c:6d:0f:6c:01:48:67:8a:d3:38:3e:e6:6b:ef:09:
85:5d:39:78:ff:c4:9b:6f:51:0d:3f:92:f4:b2:87:
86:3c:fb:5c:8b:b4:ba:9f:9a:6e:d0:b8:29:6e:ce:
a5:db:a0:bd:fb:c6:9e:cc:3c:e0:b2:74:56:4a:c4:
13:4f:65:95:76:f2:cf:24:26:bd:c4:c6:f0:f2:2a:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:AC:2D:14:6B:CD:11:8C:E4:7E:66:DD:B5:32:E0:49:A4:B1:5F
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ADWsLRRrzRGM5H5m3bUy4EmksV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.169.0/24
46.32.178.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:d9:a5:38:18:e1:e5:bf:7f:17:11:c4:d6:ca:0d:f2:b2:
c2:0d:7a:88:08:66:e2:7a:e5:ca:c9:ba:fd:e5:63:b2:99:e7:
d3:4a:23:58:40:a4:48:e2:5b:7b:50:a0:fb:f5:9e:25:cf:d7:
d4:ce:5e:55:d6:39:e1:af:4c:55:ba:91:01:ce:9c:0a:a2:14:
3a:eb:8f:4f:a8:9f:da:9a:74:c6:9c:77:6d:57:16:1e:6d:34:
18:0e:92:4f:61:c1:c0:6b:e0:2e:87:9c:07:9c:ea:54:2c:9d:
54:ad:42:92:aa:38:a0:8a:6c:a8:f8:f9:e9:c3:0d:31:ac:70:
50:a6:78:25:cb:77:7b:bc:58:bb:11:e9:ae:47:1a:f0:2c:a7:
52:d3:1d:6d:53:31:36:4a:cf:6a:e1:4b:f9:88:e4:dc:7f:98:
44:a8:87:f0:1f:d1:96:07:50:21:dd:bf:17:08:8e:73:4e:d9:
67:b3:f8:5b:04:5d:04:c1:96:e4:f4:9f:4d:27:99:88:a0:f4:
0b:de:a2:32:35:a5:b2:c0:9b:5e:e6:3e:d0:e9:62:45:76:4e:
bc:c1:a3:4e:56:17:c5:d6:10:c5:53:69:11:05:39:62:72:45:
4e:b7:30:ae:4c:62:7c:ff:2b:73:65:8e:fd:ab:ba:55:21:23:
6c:7c:78:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:10 2024 by rpki-client on console-fra.rpki-client.org