Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0HvakTFmZLd1r78Oj4CXhIx3jBU.roa
File: 0HvakTFmZLd1r78Oj4CXhIx3jBU.roa (raw, json)
Hash identifier: Ez5apada0FGTaMj/0iQLDYBCTIRQJrwkWYIQgJJMxto=
Subject key identifier: D0:7B:DA:91:31:66:64:B7:75:AF:BF:0E:8F:80:97:84:8C:77:8C:15
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189D3C34E4B6A831E18308D895B915683CF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0HvakTFmZLd1r78Oj4CXhIx3jBU.roa
Signing time: Tue 08 Aug 2023 06:08:59 +0000
ROA not before: Tue 08 Aug 2023 06:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.0.0/24 maxlen: 24
46.162.8.0/24 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 08:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:c3:4e:4b:6a:83:1e:18:30:8d:89:5b:91:56:83:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 8 06:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d07bda91316664b775afbf0e8f8097848c778c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:7a:b1:42:b2:cc:fe:64:90:d2:b9:95:e8:
ad:98:53:5f:69:0d:5b:6e:88:16:aa:b5:3b:dd:4a:
bb:9c:b9:15:d5:59:28:28:ab:d4:20:73:c5:ab:60:
57:28:4a:0c:92:66:9b:9d:15:81:f5:89:5a:bb:d1:
a3:9e:ac:b0:eb:d5:74:02:14:9d:16:8e:21:55:62:
6c:5e:53:e7:9b:7f:e5:51:d4:6b:d9:af:23:62:f4:
9f:24:6a:80:69:8a:28:5b:67:f2:85:23:97:f1:f2:
5a:4e:41:91:f0:61:b9:4e:13:81:ed:4a:9b:37:5b:
cd:50:b4:be:87:68:af:2a:7c:54:d9:70:22:6b:5e:
2f:d4:17:97:d4:a7:e8:ea:ae:09:b1:f5:99:9c:a2:
ea:07:71:4d:d9:86:39:21:1f:f7:30:9b:dc:da:27:
7b:e8:03:f6:27:b4:19:e8:65:4d:f5:c2:d6:5e:6f:
1f:e0:ba:8d:f0:d1:f2:0d:aa:6c:21:1d:3d:9b:7a:
bb:d8:c2:4e:8d:51:af:17:f3:ab:6d:8b:71:83:5b:
67:13:71:0c:c0:46:f1:dd:9b:3a:bc:d5:f6:3a:c7:
bf:92:a1:3c:f6:67:0b:64:61:3b:46:cb:1b:8c:43:
86:8a:c2:bf:57:01:77:60:7d:e4:6d:61:10:35:e0:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:DA:91:31:66:64:B7:75:AF:BF:0E:8F:80:97:84:8C:77:8C:15
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0HvakTFmZLd1r78Oj4CXhIx3jBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.3.0/24
46.162.8.0/24
46.162.10.0/23
46.162.18.0/24
46.162.23.0/24
46.162.26.0/24
46.162.32.0/24
46.162.48.0-46.162.50.255
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e3:35:e3:cd:8d:10:33:01:e0:6b:c3:ae:6f:da:d7:f1:92:
90:a1:f9:97:ca:6e:3d:93:2d:07:de:28:4c:9c:6b:54:25:8e:
66:e6:54:1f:11:11:31:73:a7:e6:af:50:4b:90:71:22:e8:a7:
58:d3:41:81:90:ad:40:69:48:87:e0:9c:1b:e4:7c:b5:b7:03:
e0:e8:4d:34:7d:ef:8d:d6:ce:4b:91:57:9d:c6:13:f5:69:76:
8d:17:72:69:e2:46:f0:8d:17:ed:69:02:f8:c8:37:ae:b9:8e:
3d:fb:69:e1:3b:d6:9d:c2:63:8f:24:3a:2f:f7:b5:e2:6a:41:
8d:5a:8e:fa:4f:ab:cd:3d:39:40:89:fe:51:b4:00:5d:38:f5:
41:45:55:dc:5e:fb:55:92:db:6c:be:00:13:79:e0:06:00:3c:
6e:e7:17:66:96:95:36:9f:33:cb:c3:15:48:5e:a3:e8:83:63:
1c:e3:6d:b2:2f:66:d4:6c:67:da:88:3e:27:02:cb:cf:ad:30:
ed:a1:30:3c:94:e8:c3:db:43:43:67:24:0b:e0:55:9b:86:a7:
ab:23:81:61:d2:97:be:13:55:87:7a:fd:e6:28:e9:ef:58:9d:
b0:9c:dd:3e:8b:39:b4:eb:6e:29:0b:a1:b4:fe:50:5e:e7:3c:
58:83:df:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org