Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/9mX-Is7Q2IB_mit63LQUf2b-Q0w.roa
File: 9mX-Is7Q2IB_mit63LQUf2b-Q0w.roa (raw, json)
Hash identifier: HyzK5FOX2q9HtBFbXpvwNMw2GnOKCPtXHTh2ufSN7/A=
Subject key identifier: F6:65:FE:22:CE:D0:D8:80:7F:9A:2B:7A:DC:B4:14:7F:66:FE:43:4C
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 018955382C1914C8E0B72DEF8321DD0DDA3E
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/9mX-Is7Q2IB_mit63LQUf2b-Q0w.roa
Signing time: Fri 14 Jul 2023 16:24:51 +0000
ROA not before: Fri 14 Jul 2023 16:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202614
IP address blocks: 46.102.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:38:2c:19:14:c8:e0:b7:2d:ef:83:21:dd:0d:da:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Jul 14 16:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f665fe22ced0d8807f9a2b7adcb4147f66fe434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:a0:71:a7:2c:02:ba:2e:b8:70:08:64:eb:
42:41:5b:98:de:cb:e3:0d:86:13:41:d8:0e:62:aa:
27:df:a3:4b:4c:c1:e1:2a:b8:09:c9:e7:76:ab:ec:
80:7a:da:5e:37:9e:9a:0e:40:64:7b:35:53:02:db:
a5:76:dc:52:53:b8:fe:88:90:09:c2:20:3f:72:e8:
7f:51:1e:6b:10:c1:7a:7a:4e:8d:ff:82:16:ff:07:
49:09:69:f4:cb:6d:4c:56:e0:e5:7c:18:05:d6:01:
e1:18:d2:ce:49:bc:52:4a:a8:ea:c7:8e:0b:b5:b2:
ef:17:17:15:87:30:4b:b9:b6:b3:72:e2:0a:0b:08:
34:bb:84:2d:45:b9:1d:56:47:e0:3a:e0:a5:55:e9:
3f:5f:7d:26:0b:3e:a8:5a:e8:3b:43:c0:82:93:8f:
7b:90:fc:bb:d7:14:e6:b8:d9:58:f8:cb:a1:2c:d2:
b7:9b:21:83:94:1c:e4:b3:57:08:ca:60:2d:69:c0:
48:6e:40:6b:30:33:c6:2e:f9:25:87:55:5d:28:5a:
88:1f:1e:06:5b:54:d2:96:c1:32:75:a1:03:30:28:
1b:49:90:07:9a:dd:1d:d9:aa:1f:8b:a1:4b:7f:75:
44:3f:c7:12:27:4b:e2:31:b6:1e:69:1d:ed:00:51:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:FE:22:CE:D0:D8:80:7F:9A:2B:7A:DC:B4:14:7F:66:FE:43:4C
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/9mX-Is7Q2IB_mit63LQUf2b-Q0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.104.0/24
Signature Algorithm: sha256WithRSAEncryption
86:50:37:f0:e8:72:e7:e9:51:31:92:50:58:7f:6d:dd:96:1b:
9d:1d:77:20:bb:2a:0b:47:c3:8a:bc:4e:94:89:57:4c:05:1a:
fd:49:ea:44:e0:ef:ee:1a:ab:59:41:e3:2e:95:4d:bf:42:21:
5f:b9:66:4b:92:9c:c1:2d:14:38:60:e8:99:f3:7e:83:e7:a5:
64:72:2a:f3:ab:bb:81:14:2a:17:aa:57:fb:46:dc:db:61:c2:
48:cc:4f:80:7a:d9:42:6e:88:b6:d5:6c:82:6c:65:e9:d8:0e:
09:0b:91:4e:b8:4f:61:0b:23:28:92:b7:80:5e:ce:0b:62:94:
1d:fe:75:d8:0e:7c:13:f2:e5:0f:22:87:5d:a6:b2:55:47:2c:
1e:01:8a:a0:a1:3b:8f:79:90:00:ec:fd:34:8c:cb:9c:c9:05:
f8:88:fe:6f:85:da:96:a8:79:0d:43:10:16:d4:de:4c:6d:55:
5e:d9:b6:72:f3:0e:6f:b3:bc:86:8d:23:32:48:fa:56:53:7c:
1f:12:50:fa:de:12:aa:05:d4:d1:91:71:0f:03:15:82:d6:7b:
4f:78:9b:d8:22:82:d7:5a:43:85:b0:50:b8:32:fc:f8:7d:b5:
21:54:20:56:a1:51:c6:67:57:fb:76:a4:1e:05:8f:8a:21:1d:
cf:6c:9c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:51 2024 by rpki-client on console-ams.rpki-client.org