Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa
File: Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa (raw, json)
Hash identifier: WRcbhUM6kRZudL5oUYF1i2XOADuJiuPm59y3XZsUUbU=
Subject key identifier: 39:FE:E0:50:F2:21:2D:C1:7C:BB:9B:E0:35:C6:3A:C5:7A:E7:4E:41
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 0185BE3859A0BEDD8B6E514897B4B26314C7
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa
Signing time: Tue 17 Jan 2023 05:34:02 +0000
ROA not before: Tue 17 Jan 2023 05:34:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 46.32.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 23 May 2023 10:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:38:59:a0:be:dd:8b:6e:51:48:97:b4:b2:63:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 17 05:34:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39fee050f2212dc17cbb9be035c63ac57ae74e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:ac:de:f1:35:1f:32:ab:cc:19:3c:e3:63:
50:3a:a7:c2:f0:49:41:65:f4:29:b3:55:84:2c:01:
c0:20:d2:a4:0e:9e:1d:3e:db:e5:66:7e:43:83:c0:
48:2e:cc:af:24:c9:89:6b:d1:b2:64:0e:74:05:2b:
61:bb:df:5f:94:fa:b9:d4:06:dd:2b:fe:34:8e:af:
4c:28:21:4d:5a:4f:41:d5:f3:a1:77:cc:23:4d:de:
08:b8:f0:dd:26:35:b3:95:ff:1c:9c:bb:86:8c:c4:
9f:b1:72:28:bd:82:f7:f0:eb:17:07:96:f9:a1:d3:
52:84:05:f4:40:f9:04:a3:7a:a7:60:0f:5d:8f:55:
72:5c:28:57:68:98:2a:67:c9:49:44:d3:1c:f8:97:
ab:b5:75:f6:89:33:e6:d8:57:61:fa:dd:a2:8c:f5:
89:22:22:61:33:a9:b3:c7:c8:b7:08:51:db:ee:23:
23:92:5b:2c:57:0d:8c:ea:54:5c:43:3d:d6:dc:31:
28:55:d9:ee:02:43:22:bb:a6:4e:98:26:77:df:02:
79:73:b9:e2:89:80:50:c5:e3:b5:0c:2d:ed:f6:bd:
dd:74:46:b4:73:83:59:73:9b:2c:eb:c1:03:97:32:
01:92:68:b3:d8:69:e6:8a:b0:21:eb:75:34:58:0b:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FE:E0:50:F2:21:2D:C1:7C:BB:9B:E0:35:C6:3A:C5:7A:E7:4E:41
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/Of7gUPIhLcF8u5vgNcY6xXrnTkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:94:f8:09:b5:af:77:66:16:6d:cb:4b:f6:fc:4b:5c:8d:78:
9f:2f:70:47:cf:9e:93:1b:3b:26:7c:03:6c:d3:88:a8:a4:46:
0e:e0:de:8f:5d:59:4d:3f:b9:b4:36:ad:20:05:92:6f:c9:c5:
77:33:23:d3:40:cb:8a:8f:e2:6a:1c:66:2e:c7:ea:47:a3:09:
c5:4c:03:44:e9:9c:7f:98:2d:01:e1:27:aa:d3:a2:81:8a:98:
d7:37:2b:df:e0:30:48:d3:db:4f:05:e4:11:b0:4f:a5:99:1e:
45:26:80:c9:1a:b4:8c:89:4a:78:97:5f:0d:f7:10:af:6b:4f:
75:2c:b3:43:da:73:18:9c:f9:9f:4a:1f:06:67:03:76:2d:ca:
4b:f9:72:83:96:2b:a6:65:46:13:c9:d8:1f:f5:7b:fe:fb:13:
72:8e:a4:ad:f5:8c:ea:b8:b7:f2:3f:65:46:b2:0e:11:78:0d:
6c:a9:7e:a3:89:34:6c:a6:e6:df:37:df:0d:e3:50:78:5c:05:
24:f8:1d:75:23:e7:d6:67:3b:4f:54:90:81:cc:d3:8a:25:09:
fd:02:55:a6:99:7e:b5:dc:bb:43:23:61:da:89:64:2f:cf:d0:
d8:ba:49:2c:ca:40:6a:57:03:2b:0a:98:e4:01:be:fa:f5:5f:
71:ea:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:11 2024 by rpki-client on console-fra.rpki-client.org