Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/mAFuLzKuwDDk50QssV4VYK3SwoQ.roa
File: mAFuLzKuwDDk50QssV4VYK3SwoQ.roa (raw, json)
Hash identifier: lZt1UCstldfMmQs3gp/gP0ykN8+fX1B7cInFwfvFlso=
Subject key identifier: 98:01:6E:2F:32:AE:C0:30:E4:E7:44:2C:B1:5E:15:60:AD:D2:C2:84
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 018570E7582D1E23CEB274B212CE217D0699
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/mAFuLzKuwDDk50QssV4VYK3SwoQ.roa
Signing time: Mon 02 Jan 2023 05:14:47 +0000
ROA not before: Mon 02 Jan 2023 05:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:58:2d:1e:23:ce:b2:74:b2:12:ce:21:7d:06:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 2 05:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98016e2f32aec030e4e7442cb15e1560add2c284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:dd:3f:2b:dd:00:a1:1c:da:a0:7c:7a:52:
85:ba:0c:9e:43:1c:80:5f:84:cc:a0:55:bd:cf:3c:
9e:0f:a4:9e:d8:61:81:82:20:1a:50:47:81:99:64:
a2:92:1e:62:96:80:a8:df:c4:4c:3f:ed:11:68:72:
9a:55:60:99:89:c1:5e:a8:e7:f6:c2:06:9e:97:b9:
53:64:43:07:40:bd:1b:b2:07:75:3a:ab:0c:69:5c:
d7:fe:45:ce:5e:f0:30:d7:e4:dc:96:f7:be:0f:d6:
92:6e:fd:2a:11:a0:43:4a:f9:42:bc:61:6b:b2:ee:
ee:43:b7:b3:95:2a:7e:07:c2:4a:28:eb:c5:8c:d3:
4e:00:dc:84:c2:f4:c6:7c:ed:17:25:ba:2c:c4:48:
de:8c:b7:2f:ac:01:b8:f6:1b:73:30:99:24:21:b8:
20:10:37:2a:3b:1c:65:5f:81:8d:5c:02:e7:42:8e:
f0:3a:73:bc:c1:b1:8c:e1:d8:72:ed:d5:92:74:66:
95:32:06:9d:57:4e:9a:e6:05:73:fd:81:e2:2c:cf:
de:fc:0f:96:c7:42:78:c1:ef:8b:91:0e:6b:45:2a:
1d:d7:46:2f:43:f7:cd:8d:bf:12:69:14:41:f1:b0:
ef:07:7a:f8:7a:62:16:26:6d:33:a1:32:43:74:41:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:6E:2F:32:AE:C0:30:E4:E7:44:2C:B1:5E:15:60:AD:D2:C2:84
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/mAFuLzKuwDDk50QssV4VYK3SwoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c9:33:1a:b4:98:8c:f8:0d:2e:bc:b9:63:e7:60:76:b0:28:
04:19:ab:25:23:65:ac:5f:eb:7a:62:7c:6d:28:f2:d5:f2:db:
8f:d4:a4:08:c5:ef:57:3f:e1:e6:2f:77:de:e2:24:44:9c:8d:
f1:ad:29:10:39:7c:c1:ea:5d:5c:00:cb:5b:d8:8c:43:38:a8:
28:d1:f8:e6:9d:2a:07:4c:6f:f7:77:15:9b:8f:59:34:4e:66:
c5:c0:18:e4:04:ec:17:82:09:be:f5:ef:d9:c8:e4:ea:75:e5:
07:99:f6:0a:93:83:44:cf:40:f1:53:90:38:8b:f8:ec:cb:83:
dc:5e:ab:43:1b:45:88:6c:7b:79:5a:a0:4e:d6:4e:27:ed:70:
4e:dd:93:1e:03:81:45:59:49:0e:22:83:ea:62:e1:ea:18:91:
79:cf:68:e6:4c:4a:bb:19:19:91:01:4f:35:02:1f:56:b9:24:
2e:8a:4f:39:2b:e7:40:e8:8c:15:5b:e1:49:97:8a:30:c6:de:
8e:96:b0:74:94:a8:bf:ae:ab:f6:32:5e:0c:fb:bc:3b:73:03:
78:d8:44:07:5f:94:01:d0:a7:d5:3f:ca:1a:32:06:0e:b6:c5:
a6:4a:8e:4c:da:ba:bc:cc:a1:37:d7:1e:d4:5a:44:69:e2:fe:
24:75:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org