Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xw2qMXjgjiwt83l6i_C-ABslDhY.roa
File: xw2qMXjgjiwt83l6i_C-ABslDhY.roa (raw, json)
Hash identifier: bdbgur9vjyjYoUJ1nJ9sDrd7LyZJQfLhgX0Cqz+pgIc=
Subject key identifier: C7:0D:AA:31:78:E0:8E:2C:2D:F3:79:7A:8B:F0:BE:00:1B:25:0E:16
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01891A78497C1B9B13C2DBDA931B66A805B2
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xw2qMXjgjiwt83l6i_C-ABslDhY.roa
Signing time: Mon 03 Jul 2023 06:37:17 +0000
ROA not before: Mon 03 Jul 2023 06:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200154
IP address blocks: 46.32.163.0/24 maxlen: 24
46.32.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:78:49:7c:1b:9b:13:c2:db:da:93:1b:66:a8:05:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jul 3 06:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c70daa3178e08e2c2df3797a8bf0be001b250e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:6a:82:6e:1a:65:fe:b2:bc:71:95:37:dc:
ea:78:1e:d8:51:0b:1b:c3:13:35:a1:89:94:a4:10:
97:2b:f3:85:e9:a7:fe:c2:6a:6d:36:7a:f6:b1:c0:
1e:01:20:79:25:29:82:fc:02:98:84:80:c8:f0:23:
66:15:49:0b:bb:b8:af:d3:b3:4c:d0:f9:6b:22:a6:
19:9f:b4:87:8a:6b:f8:db:5c:2a:c9:14:58:e9:20:
39:29:17:4a:5f:ed:86:5b:50:56:28:9c:f8:e0:08:
22:08:bc:3b:8e:c4:db:83:00:ff:7b:f9:3d:4f:30:
4f:bb:65:50:e9:12:74:55:f3:d3:38:50:6d:e1:6f:
9f:73:8f:69:69:7e:f9:b1:de:cb:90:18:15:b9:f4:
85:44:e5:c7:d2:6f:e1:59:12:b7:3d:61:e6:21:2a:
fd:54:b9:96:e7:b7:bc:5a:cd:a7:52:af:52:c1:c5:
ad:3e:3c:60:94:db:46:7a:2e:e2:d9:bc:c1:a3:d6:
9d:e2:3e:b1:2f:01:ae:60:95:ab:65:e4:ef:9b:60:
c3:33:04:e6:94:a1:ce:a6:e5:93:b7:e1:63:6b:7a:
74:93:f9:1b:dd:fe:ab:19:10:ab:35:c4:b3:53:12:
92:4a:d8:55:5a:3e:ea:5e:29:35:84:11:9b:f5:11:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0D:AA:31:78:E0:8E:2C:2D:F3:79:7A:8B:F0:BE:00:1B:25:0E:16
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xw2qMXjgjiwt83l6i_C-ABslDhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.163.0/24
46.32.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:05:cb:f5:ee:fb:45:bd:f9:4e:8d:64:cd:e1:d8:27:41:6a:
e3:b1:0a:56:e8:2a:e5:16:57:d9:a2:0b:69:cc:70:80:a1:19:
0c:21:d2:97:20:43:c7:12:5e:97:bb:ca:66:1c:d6:7d:6c:ce:
83:32:46:60:ae:74:a7:b2:d2:14:3c:ff:2e:9a:34:a2:b7:99:
97:ed:0f:03:59:b7:e9:e5:59:6f:78:ad:fb:d1:93:9d:f2:60:
fc:00:f0:6d:21:9d:75:0a:22:c8:db:98:d5:47:bb:ab:90:68:
3b:f5:bb:e9:ab:c6:8b:83:8c:2f:a4:01:47:f5:7c:71:d3:3e:
15:f0:04:c6:5b:25:e4:67:4a:a6:90:be:73:f3:1a:b4:c6:b4:
6d:20:30:db:8c:49:c4:56:04:4f:1a:3b:eb:f5:97:fa:b2:e6:
1e:21:67:63:25:15:1b:2b:c7:c2:10:f8:5e:d4:ad:6f:4e:d9:
ca:84:3a:0e:c2:d7:27:01:76:d7:26:51:fd:63:12:3a:e3:39:
f0:51:46:bc:80:fa:17:21:e8:f2:34:74:23:dc:ac:16:b5:25:
f7:c7:33:64:21:2f:8c:89:c5:73:1b:d0:c1:50:d6:d5:9d:40:
ae:90:e3:2c:a2:fd:a9:70:ac:8b:dc:38:6c:4c:b8:ba:d1:3d:
f6:04:64:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:10 2024 by rpki-client on console-fra.rpki-client.org