Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XoZ8_JYvhLl_PsnDuXs_l12yj7I.roa
File: XoZ8_JYvhLl_PsnDuXs_l12yj7I.roa (raw, json)
Hash identifier: /KVkvGZC5dzPvPbJTO4cm596SL2Nka3ZYzu+0uezr9U=
Subject key identifier: 5E:86:7C:FC:96:2F:84:B9:7F:3E:C9:C3:B9:7B:3F:97:5D:B2:8F:B2
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94B9D32ADD82CF7B4E763FC2644E26
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XoZ8_JYvhLl_PsnDuXs_l12yj7I.roa
Signing time: Sun 01 Jan 2023 23:04:55 +0000
ROA not before: Sun 01 Jan 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205547
IP address blocks: 46.32.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b9:d3:2a:dd:82:cf:7b:4e:76:3f:c2:64:4e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e867cfc962f84b97f3ec9c3b97b3f975db28fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:5a:fc:13:dc:3f:45:58:6f:7d:31:54:88:
81:65:d2:dd:bf:48:49:be:10:e7:71:78:a9:e2:13:
e1:9b:71:de:69:06:79:64:09:72:2f:d2:a1:1b:da:
c8:4c:19:fd:ac:51:d8:df:3c:dc:98:94:ed:ab:2a:
d9:a9:39:a4:11:b1:32:66:41:50:1e:41:88:0e:1d:
4b:0f:9b:83:9a:d8:cb:e7:ec:f7:fa:bf:5c:44:b2:
9a:3d:90:a7:f8:e2:b6:40:13:30:61:2c:9d:73:8d:
2d:42:02:e8:63:8e:b8:6a:24:f7:54:2e:90:ad:ce:
15:42:eb:00:6e:42:62:56:22:f9:9e:46:96:2d:45:
92:4e:e9:51:f5:b1:a1:0e:43:dd:cd:43:26:1f:77:
57:1f:22:bf:03:1d:67:4a:e0:97:08:10:b7:61:46:
2b:ec:90:8c:94:06:1d:6c:58:6a:8e:57:ed:a0:dc:
6d:ed:20:71:f5:c9:08:c8:cc:78:c9:dc:72:c7:02:
d0:c4:72:95:9c:4f:06:5f:25:9b:5c:01:ae:23:6f:
14:ff:9a:f8:39:c2:25:40:e3:f5:1c:15:72:21:0f:
ef:50:d1:51:ca:22:6b:2a:78:7f:77:05:a9:90:eb:
b5:9a:22:5f:89:32:33:f7:c9:89:63:c8:2a:1f:2f:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:86:7C:FC:96:2F:84:B9:7F:3E:C9:C3:B9:7B:3F:97:5D:B2:8F:B2
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/XoZ8_JYvhLl_PsnDuXs_l12yj7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:20:77:41:6c:9f:b6:75:f7:4d:c9:c2:01:64:d0:26:d8:3b:
7d:23:10:11:59:7a:14:02:f3:09:de:51:1c:48:f9:9c:63:c1:
c6:b9:d7:d8:c9:03:00:8b:48:68:f2:ab:99:d1:31:17:3e:c3:
7b:0f:41:97:49:64:22:f2:f2:70:dd:2b:bc:ec:0d:71:de:c6:
8d:f9:41:0e:d1:09:0f:df:05:a8:6c:91:24:e8:1e:e3:88:0c:
ff:bb:49:61:88:b1:a7:f1:05:66:6a:b4:2d:0a:2f:1e:1d:20:
e3:3e:52:4c:15:00:e1:78:5a:31:26:9b:05:d2:77:8c:03:57:
a6:33:c1:61:07:2e:b7:a5:5a:ae:a2:21:b3:e0:2a:bf:af:a6:
f4:d2:fc:64:db:fb:10:47:bf:07:c2:e1:08:bc:9a:af:5e:0e:
71:0d:a5:5c:71:68:ac:8f:8e:d2:72:25:a7:09:dd:08:1a:4b:
cc:d5:bc:40:eb:38:1c:22:ad:d1:86:f6:5f:16:ed:00:ed:48:
5b:ed:bc:cb:9b:e9:95:8e:ab:1a:8d:68:15:cc:0c:2b:7d:c3:
69:bd:62:30:23:b2:fb:67:e3:03:66:07:b7:26:a0:84:07:ad:
2b:74:b3:e7:9c:e4:a7:0f:df:f5:58:af:a8:69:ab:ff:f2:0d:
56:0b:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:48 2024 by rpki-client on console-ams.rpki-client.org