Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2bAgCl1eVaUXFJRjF4TqbgSj1oM.roa
File: 2bAgCl1eVaUXFJRjF4TqbgSj1oM.roa (raw, json)
Hash identifier: rVl+4FnHJwgPbmAT+64oNFNmg+m+EM2o/i+HvgANczM=
Subject key identifier: D9:B0:20:0A:5D:5E:55:A5:17:14:94:63:17:84:EA:6E:04:A3:D6:83
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018804713ADCBE995277395500643E295317
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2bAgCl1eVaUXFJRjF4TqbgSj1oM.roa
Signing time: Wed 10 May 2023 06:55:09 +0000
ROA not before: Wed 10 May 2023 06:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.162.0.0/24 maxlen: 24
46.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 20:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:71:3a:dc:be:99:52:77:39:55:00:64:3e:29:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 10 06:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9b0200a5d5e55a5171494631784ea6e04a3d683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:db:31:23:cf:46:f7:9f:73:28:46:d5:2e:
36:0b:4c:bb:34:3c:c9:d7:6a:e6:28:b0:e6:0c:35:
3a:d8:a7:16:fb:a1:2b:7c:70:35:40:86:da:51:b2:
77:4a:bd:fa:b0:83:8f:74:4c:64:4f:cd:78:36:d7:
f2:c1:30:fe:75:ed:ff:e8:77:c1:bd:f6:ef:96:50:
ee:c4:1a:3f:fe:1c:4a:67:28:33:58:53:2c:7f:12:
d4:9f:9c:13:d8:89:0f:fc:c2:cc:a0:d0:17:d8:aa:
80:1e:d7:90:20:ca:21:d9:42:c8:5a:31:4d:00:5b:
14:07:bb:b8:b9:38:74:6b:b3:53:60:74:8a:8f:a3:
6e:62:bb:11:7a:73:76:e4:20:a0:20:3a:69:d8:17:
ac:c8:9c:f9:3a:74:54:13:6a:7c:7a:3e:07:45:3d:
d9:c1:ef:b4:23:2c:f4:60:76:7f:5c:45:e3:fa:bf:
a0:82:dd:1d:be:16:da:13:88:78:c2:8a:18:62:47:
e6:33:e9:0b:31:1e:e6:ec:0f:02:d6:0b:44:9f:2e:
83:2d:f5:79:03:08:27:fb:cd:b5:76:6f:05:57:f7:
89:9a:c0:57:08:96:91:76:e6:72:e7:92:ca:81:9c:
9e:45:1e:df:60:42:7e:b0:81:0a:71:f2:bb:6e:c3:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:20:0A:5D:5E:55:A5:17:14:94:63:17:84:EA:6E:04:A3:D6:83
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/2bAgCl1eVaUXFJRjF4TqbgSj1oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:40:79:bd:2d:89:4d:30:50:93:99:ad:6a:b8:f4:db:f3:5e:
07:88:31:72:d9:c2:6b:81:36:5f:66:0d:26:76:c7:e2:dd:52:
b2:6d:9e:2b:8d:63:c3:0a:1c:c8:29:81:d8:9c:78:31:db:9d:
1f:65:c1:b9:4e:38:db:32:31:b6:8a:e2:f3:35:ac:a0:33:93:
96:6a:15:5f:23:a7:b6:39:1c:4b:3f:2b:da:a5:c5:eb:41:83:
9e:0b:4b:89:c2:cd:59:26:11:0e:34:5e:4a:c7:29:e5:5e:0b:
01:76:9c:bc:b8:02:f4:f1:cd:f8:af:d0:b8:92:d3:9c:7d:5c:
8d:e5:82:92:39:c5:78:e6:39:cd:38:3a:7f:9a:73:3a:4e:5c:
be:01:af:85:7c:58:b6:a9:7d:84:94:41:e4:30:d7:73:56:f5:
0f:71:3a:9c:89:ef:87:49:cd:e4:f2:8e:69:40:d5:73:3d:26:
a3:fc:73:bc:59:cd:1e:45:50:4f:ba:04:54:24:fb:ef:b1:af:
8b:77:54:5a:2b:40:0d:cf:e2:66:64:45:6d:e2:bc:cf:25:69:
10:0c:1c:b7:c8:5e:92:5c:33:9d:25:52:8b:f9:90:0d:6f:41:
fc:34:c3:9b:e1:ad:5f:84:7a:6b:6c:95:17:18:dd:22:2d:57:
90:17:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org