Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/taGGskRqw277eIBZ8DQm6cEE_6U.roa
File: taGGskRqw277eIBZ8DQm6cEE_6U.roa (raw, json)
Hash identifier: n905tXNlKBqY/TLs+64qZ1PBJc4LrmXeENOzfkWUMIo=
Subject key identifier: B5:A1:86:B2:44:6A:C3:6E:FB:78:80:59:F0:34:26:E9:C1:04:FF:A5
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94B70F2D647765422B9A599CC3F712
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/taGGskRqw277eIBZ8DQm6cEE_6U.roa
Signing time: Sun 01 Jan 2023 23:04:55 +0000
ROA not before: Sun 01 Jan 2023 23:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50959
IP address blocks: 46.32.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b7:0f:2d:64:77:65:42:2b:9a:59:9c:c3:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a186b2446ac36efb788059f03426e9c104ffa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:89:7c:02:b9:44:72:b6:a2:4d:75:3d:10:
c7:4f:2e:3e:36:2e:4c:c7:9d:28:1e:ff:6e:41:11:
23:c2:c5:c2:2a:f1:2c:bb:d5:0b:48:68:e7:89:c8:
9b:e7:ff:e6:5b:cc:7a:bd:2d:c7:53:d7:ef:4e:61:
20:16:e1:76:39:6f:b0:ec:d7:6d:9f:2a:c3:3a:c0:
97:3a:e3:bd:a5:69:f0:9e:2d:6d:4b:be:6c:31:46:
94:91:ff:f2:1d:94:03:21:26:9f:d3:0c:49:b4:00:
a2:bd:af:10:93:f5:9b:c8:ba:f3:b0:2e:c3:e9:56:
d3:df:b6:4e:5a:b4:f2:58:bb:a5:e0:bd:3e:48:c3:
37:50:9f:3e:98:81:eb:a7:8e:95:09:20:fc:9b:c1:
5f:e5:e7:7f:01:b7:58:66:42:3d:5f:99:06:64:be:
c2:97:dc:51:73:1f:de:a1:95:ff:90:1e:79:46:dd:
d6:5c:33:b2:f1:c4:25:bf:bf:0b:c5:6b:85:07:5b:
b5:ce:ab:fb:ec:ae:f7:19:0b:da:ef:a9:b8:46:ad:
c0:28:5a:8d:ad:eb:a0:ce:da:28:2e:ba:ec:c6:1a:
97:c8:e3:b5:90:1e:66:e3:97:97:05:66:12:cc:7e:
1e:0b:22:a7:eb:b7:e8:08:ff:ba:9a:27:b7:02:94:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A1:86:B2:44:6A:C3:6E:FB:78:80:59:F0:34:26:E9:C1:04:FF:A5
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/taGGskRqw277eIBZ8DQm6cEE_6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.173.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f7:34:71:f6:c5:27:4b:23:0a:ed:a7:9e:8e:99:74:7f:a5:
ff:13:ec:65:54:57:33:ed:92:bb:6a:d0:fb:8c:f8:16:72:d1:
30:b3:71:02:3f:44:f6:9f:7e:be:8b:ed:93:0e:c1:59:bf:ce:
91:6d:39:c1:58:94:ff:ff:50:32:a2:94:70:6f:28:d1:01:76:
6b:af:8c:e3:93:cd:7b:62:e6:3c:56:21:33:f4:81:37:57:13:
15:56:f3:91:62:ea:b9:89:8d:d4:8e:ba:fd:65:2e:e4:15:92:
8c:2a:d8:d7:d4:70:fc:b4:35:e3:28:c6:38:bb:7f:a8:fe:85:
4d:3d:f8:91:5d:8d:50:5b:57:15:2d:ac:bd:64:da:14:14:52:
1c:bf:f0:a6:9a:ae:23:8f:56:f2:4c:58:3f:12:34:27:5f:23:
43:52:d7:cd:9c:94:04:2d:2b:0b:82:c3:55:15:82:6a:2b:90:
6e:73:b0:f9:5d:dd:a3:a9:68:02:eb:e6:90:04:d6:55:dc:84:
f7:10:94:fc:46:23:f3:6c:1a:81:65:ad:3e:e8:77:6e:f2:52:
50:b6:b0:e1:2d:f1:2e:ca:a6:ce:49:4a:1d:9f:55:7a:3e:a7:
8a:14:6e:d2:bc:a8:07:ed:52:f0:c3:c7:8c:eb:46:8c:15:ed:
9b:95:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:10 2024 by rpki-client on console-fra.rpki-client.org