Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eFGrX3RV0BF7KGlgUm6cO7TQU3A.roa
File: eFGrX3RV0BF7KGlgUm6cO7TQU3A.roa (raw, json)
Hash identifier: AEliEv6cQoiBjIU7S2CKxkkiqJ0fWcinU4Z9cZ7xR4c=
Subject key identifier: 78:51:AB:5F:74:55:D0:11:7B:28:69:60:52:6E:9C:3B:B4:D0:53:70
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 018848447047544A9574EA94CBBEA3884299
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eFGrX3RV0BF7KGlgUm6cO7TQU3A.roa
Signing time: Tue 23 May 2023 11:00:24 +0000
ROA not before: Tue 23 May 2023 11:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 46.32.180.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:44:70:47:54:4a:95:74:ea:94:cb:be:a3:88:42:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: May 23 11:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7851ab5f7455d0117b286960526e9c3bb4d05370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:2c:fc:8c:74:31:be:ce:a1:a7:89:56:60:
96:c9:ed:9f:e7:e3:85:bc:34:3d:a8:9d:a9:6b:25:
e3:5c:06:b7:23:3b:79:0e:3b:e0:a4:e8:ec:7a:45:
be:44:d7:ef:0c:83:87:36:8c:1c:81:ee:6b:a3:46:
4d:52:d5:7f:f5:c8:a3:34:96:cf:3d:92:90:7a:3e:
35:66:1c:3e:48:19:bd:d8:58:80:7e:38:40:99:9a:
1f:f7:39:28:e2:fd:60:73:b5:e3:f1:ba:2e:af:96:
7a:28:a2:b6:f4:f2:fd:8f:97:ee:b8:4c:92:35:d4:
f9:4a:66:9c:ff:c0:c4:a9:5b:50:52:aa:9c:dd:43:
b4:cd:40:10:81:55:5e:5f:07:ac:3c:94:4d:58:1d:
04:6e:6e:1a:fd:eb:14:35:b3:01:b1:bf:78:7c:35:
36:94:17:26:7c:f2:e8:c6:9a:c2:b6:bb:c4:42:f3:
1c:73:7a:36:c9:94:4e:bf:a6:80:80:4f:2e:e3:d4:
c1:d8:b3:85:02:8c:a4:21:47:72:d6:35:54:af:e9:
e3:17:0e:54:58:39:c5:1b:81:d4:51:e0:73:c5:aa:
a2:01:c8:e3:42:06:08:d3:d2:2e:ac:7b:c9:11:c6:
e0:89:e4:65:2e:3f:1b:b7:59:d0:a7:47:1e:70:e5:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:AB:5F:74:55:D0:11:7B:28:69:60:52:6E:9C:3B:B4:D0:53:70
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/eFGrX3RV0BF7KGlgUm6cO7TQU3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
44:f6:78:0d:df:c1:61:1d:a9:83:66:6b:84:36:f2:3a:81:f9:
f4:f8:b1:31:67:a9:79:18:71:ed:ed:5d:4e:78:2c:7a:56:db:
47:14:3e:f4:25:66:d8:29:a1:44:17:90:3b:97:23:dd:73:4c:
7a:ca:32:e3:ef:1d:af:02:b1:0d:a1:0e:5c:03:4d:9b:33:d0:
cf:90:53:df:99:d6:12:33:99:36:58:f3:ec:13:5a:c4:c1:b3:
f7:8b:e8:8f:13:ad:67:e0:1d:c0:14:2d:ba:9d:bb:1e:d9:08:
bb:8f:c0:2d:2f:91:ea:c7:87:b8:1e:e3:90:37:f0:ce:9f:ff:
1a:b9:45:50:4e:44:f5:31:d6:21:1e:78:70:a4:ac:66:46:48:
5a:10:a7:bb:a3:fc:7e:31:db:a5:52:c3:9b:46:be:4d:e5:60:
62:3c:14:da:8c:02:da:a9:21:b5:7c:32:d8:7c:40:bb:39:1c:
4b:07:57:da:38:23:08:1e:44:7e:b1:55:0a:56:37:d4:ee:27:
56:43:5d:f8:da:8a:f3:e1:99:bd:a1:bb:1b:bd:7b:2b:7e:b6:
c5:f3:c7:dc:ba:e9:dd:3a:69:ac:4b:da:77:3d:cb:0c:73:5d:
37:11:19:42:c2:2d:71:d4:cd:14:89:37:ac:3a:fa:d4:fb:cd:
92:a6:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:48 2024 by rpki-client on console-ams.rpki-client.org