Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1-RYido1nzUhmEikvEkTAteCaF4Q.roa
File: 1-RYido1nzUhmEikvEkTAteCaF4Q.roa (raw, json)
Hash identifier: iAIaulJjQ50RgcxVQtEhB+gjn4+wd0D4opVWUB5+Ouo=
Subject key identifier: F9:16:22:76:8D:67:CD:48:66:12:29:2F:12:44:C0:B5:E0:9A:17:84
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01897C664ECEC4F88A92DCA802677E305624
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1-RYido1nzUhmEikvEkTAteCaF4Q.roa
Signing time: Sat 22 Jul 2023 07:00:26 +0000
ROA not before: Sat 22 Jul 2023 07:00:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/22 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 17:13:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:66:4e:ce:c4:f8:8a:92:dc:a8:02:67:7e:30:56:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 22 07:00:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f91622768d67cd486612292f1244c0b5e09a1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:37:61:b1:42:12:63:67:26:fe:03:87:c5:
90:2e:96:6a:98:a1:ec:56:b3:47:fd:22:15:57:c6:
3b:38:da:64:46:47:2d:28:04:9d:da:34:28:72:e9:
25:f2:d0:76:57:8c:d7:53:80:ab:a5:8b:36:66:14:
5d:69:bf:37:14:e4:ca:58:1e:f2:38:f0:c1:37:8b:
8b:2b:b1:fa:35:22:d6:e5:f0:1f:b0:dd:eb:35:8d:
d6:38:0e:ea:22:6a:0f:8c:03:a1:09:69:2b:05:41:
35:ba:0f:4b:cb:e0:fe:e1:b1:7f:c7:5f:54:9f:49:
44:a6:28:ca:02:99:6d:f4:90:25:b8:fc:ea:9b:69:
67:b7:76:16:1c:ef:45:2f:9d:f4:cd:9c:30:19:a7:
be:87:07:1a:1c:74:c7:57:35:f4:18:a0:64:be:90:
3e:b1:1e:93:92:e7:6f:f6:99:85:c6:63:67:4b:c6:
f4:8d:40:5a:01:f0:00:9f:6d:b4:55:57:d4:93:80:
47:f2:47:40:b2:d4:27:f9:e7:c0:c2:e1:71:1b:f7:
59:3a:1f:f8:fe:1b:b4:ad:29:c0:7f:b0:89:e2:29:
d0:7f:ca:e5:9d:db:34:c0:1c:eb:66:f4:c1:5a:e0:
f0:d1:92:71:36:b6:cd:ef:39:88:3e:22:c5:cf:19:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:22:76:8D:67:CD:48:66:12:29:2F:12:44:C0:B5:E0:9A:17:84
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1-RYido1nzUhmEikvEkTAteCaF4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.23.0/24
46.162.26.0/24
46.162.32.0/22
46.162.48.0/24
46.162.50.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:97:29:fa:b1:a4:e3:22:41:a7:86:b5:d7:25:7a:a0:0f:9c:
40:0b:ac:ef:da:b0:b9:cb:97:88:46:cc:f1:e6:bf:56:72:88:
c4:8e:77:9e:93:74:6d:4e:61:df:9a:3c:30:5b:d3:34:d3:05:
78:11:06:ae:b3:29:ce:44:09:da:8f:de:a8:d1:69:b4:52:ae:
b3:29:08:9e:58:7b:3f:9a:f3:75:cf:a2:82:0f:43:41:15:36:
84:0e:b4:e9:75:ca:45:b9:74:75:c0:cd:42:f8:e1:da:fc:5e:
28:9e:ff:2b:ad:bf:87:b3:24:d0:65:a1:f8:e6:3e:46:99:09:
29:00:80:67:01:85:bb:6f:ac:c0:fa:26:df:37:f2:6e:db:6e:
be:3f:7f:fe:2a:f8:ab:b5:fc:90:ad:bd:b3:88:a7:bf:b7:0f:
ad:4f:ca:9f:97:b4:17:84:42:e3:1c:93:79:65:3c:4c:1d:66:
e1:ce:ea:4c:e4:c4:55:ed:a6:38:29:d3:3a:a0:dc:05:a4:f0:
7e:78:09:9f:50:80:b2:2a:73:e5:c8:66:39:30:3f:b1:b5:c9:
5c:2a:1f:b2:c9:b6:77:78:99:21:69:7b:65:19:50:59:67:41:
41:e5:f5:61:26:cb:b8:6f:65:d5:18:da:c7:9a:a6:60:7e:b8:
40:5e:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org