Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1UCVsExy1QXFh-9hcuZ69YXIsRw.roa
File: 1UCVsExy1QXFh-9hcuZ69YXIsRw.roa (raw, json)
Hash identifier: Csjd1UbWCxvQqw9y85J0WqgJ/VZ/941vN2YvghesIV0=
Subject key identifier: D5:40:95:B0:4C:72:D5:05:C5:87:EF:61:72:E6:7A:F5:85:C8:B1:1C
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189C447F9E5B7D8DCEF6468186B1D178195
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1UCVsExy1QXFh-9hcuZ69YXIsRw.roa
Signing time: Sat 05 Aug 2023 05:59:58 +0000
ROA not before: Sat 05 Aug 2023 05:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.0.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.36.0/24 maxlen: 24
46.162.44.0/22 maxlen: 24
46.162.40.0/22 maxlen: 24
46.162.38.0/23 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c4:47:f9:e5:b7:d8:dc:ef:64:68:18:6b:1d:17:81:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 5 05:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d54095b04c72d505c587ef6172e67af585c8b11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:e6:1f:fc:24:82:8e:a8:2a:f8:00:0d:7e:
27:a8:3f:60:dd:7d:6d:a1:57:35:f0:ae:23:c2:56:
38:9d:a5:eb:90:9d:e8:33:8c:57:37:38:32:f3:53:
4b:bf:e6:ef:46:71:bb:56:c2:da:da:ed:6f:8e:52:
c3:e5:ac:b4:7d:ef:7d:cb:a3:be:49:bf:d5:c2:74:
f6:be:88:35:eb:cc:e2:65:f9:b7:a5:36:f1:c4:45:
34:33:03:0f:d1:45:65:29:30:ec:46:3e:7c:95:62:
5c:13:66:1f:26:92:57:11:10:c6:50:d2:22:57:e7:
da:82:3d:c7:66:ac:d5:a7:9f:98:51:4e:9c:11:c1:
b4:14:32:06:d6:d5:dc:7a:85:e8:ea:d2:5a:7b:93:
d9:95:5a:f5:d2:b9:75:40:62:d5:de:79:89:46:23:
65:70:9a:a3:8d:13:df:d6:43:3c:40:d4:0a:57:c5:
e2:91:cb:64:69:c0:e9:74:52:21:24:5a:0f:3c:cd:
82:8a:d3:65:de:f1:cf:3f:8e:14:69:62:fe:9c:c3:
b8:e4:28:48:dd:0b:b1:26:f7:51:c3:24:72:7f:32:
24:9e:fc:22:bb:41:02:97:cf:d7:be:74:a7:51:71:
00:ef:e1:b1:93:af:e2:81:2b:ce:fb:3a:de:3a:fd:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:95:B0:4C:72:D5:05:C5:87:EF:61:72:E6:7A:F5:85:C8:B1:1C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/1UCVsExy1QXFh-9hcuZ69YXIsRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.3.0/24
46.162.10.0/23
46.162.18.0/24
46.162.23.0/24
46.162.26.0/24
46.162.36.0/24
46.162.38.0-46.162.48.255
46.162.50.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
42:43:cc:b4:8e:0c:73:63:f7:5d:d0:bd:ae:c7:de:02:1e:87:
45:c4:9f:ad:3a:a0:28:2c:69:69:d3:5e:03:be:7a:12:b4:1e:
9f:11:d6:71:4d:b5:b5:0f:d4:92:f3:c7:4c:ac:bf:cd:40:72:
e1:57:32:22:ad:49:b7:44:93:91:3d:ba:1e:3d:14:c6:8b:70:
a4:db:8d:13:30:ed:a6:fb:f1:9b:bb:d7:a1:cc:eb:25:eb:24:
d2:e5:8f:26:dd:7d:36:4b:b9:69:79:b1:31:2d:a5:26:7c:2f:
9e:8f:6b:68:61:57:ca:82:39:cc:02:73:60:2f:d0:ba:25:7a:
f7:64:1b:dc:18:ba:a4:4b:6b:22:10:0a:37:27:8c:00:8c:81:
a2:3e:aa:a1:72:f9:2e:eb:32:43:7a:e0:05:3a:49:01:c8:60:
67:70:e0:45:5c:04:57:23:73:f0:02:8e:d2:7a:a7:db:ff:fd:
15:ea:83:8b:86:92:7c:92:13:81:93:e2:f9:c0:62:1f:71:d7:
ff:f5:ca:a6:1c:bc:cc:12:b3:2a:80:cf:f0:bc:f0:1d:3f:be:
15:de:67:18:0b:ab:8e:81:e6:6b:80:2d:cd:f4:ae:0f:a3:4d:
0a:28:5d:57:18:3a:02:6e:a6:3e:39:9a:56:6f:a8:82:fd:26:
ae:4f:4a:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 5 20:55:20 2023 by rpki-client on console-ams.rpki-client.org