Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/440FEVt05ivUvar3leHiFwqf5EU.roa
File: 440FEVt05ivUvar3leHiFwqf5EU.roa (raw, json)
Hash identifier: UUD51kV1P00tmcn3bA5Lx/KRQVG2DgCDdyjJ6wc7K2Y=
Subject key identifier: E3:8D:05:11:5B:74:E6:2B:D4:BD:AA:F7:95:E1:E2:17:0A:9F:E4:45
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188DE2FD78E3B3B2386B5CC28E7DD977D23
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/440FEVt05ivUvar3leHiFwqf5EU.roa
Signing time: Wed 21 Jun 2023 13:40:57 +0000
ROA not before: Wed 21 Jun 2023 13:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.162.22.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:2f:d7:8e:3b:3b:23:86:b5:cc:28:e7:dd:97:7d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 21 13:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e38d05115b74e62bd4bdaaf795e1e2170a9fe445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:b1:86:b7:05:f0:15:4d:ed:9a:d8:a0:1e:
62:29:5d:eb:9e:bd:89:5e:58:2e:d5:d5:02:15:6b:
4d:41:b4:9e:0d:55:9c:ce:c4:84:8a:85:72:f5:17:
d9:c2:a8:07:0b:75:b5:73:02:c0:5b:dc:4d:2a:ce:
0c:3f:42:a4:ab:89:dd:41:7d:b8:53:2f:80:78:b7:
35:28:01:77:84:6f:73:06:ef:66:80:5f:d9:e9:41:
b8:2a:f2:6e:1f:9e:af:fc:8c:26:0c:9a:b5:b6:4f:
b1:4b:47:b7:f5:2e:37:1b:c4:d6:4a:d0:f4:07:d8:
d9:18:5f:d9:ff:c8:40:90:a3:72:61:6c:0a:ad:02:
91:c3:d9:6a:5c:9d:e0:80:e6:d1:8e:ab:d2:47:48:
11:d8:f6:b3:35:82:b9:d9:4c:f7:20:e7:7e:39:20:
c5:a8:37:01:29:84:f4:7c:2d:bd:49:5e:24:af:70:
c5:85:18:1b:c4:00:63:1c:f5:07:30:20:c9:e3:c2:
0e:c3:95:51:89:a0:5e:da:85:97:5b:f4:ce:58:6b:
4c:d8:e9:aa:4f:a8:a3:40:80:9c:ba:74:f1:27:47:
f3:52:5e:52:1a:cd:75:2b:3f:7f:67:11:83:f6:f4:
2c:a0:81:c9:57:ef:7a:81:87:d1:eb:18:a1:be:6c:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:05:11:5B:74:E6:2B:D4:BD:AA:F7:95:E1:E2:17:0A:9F:E4:45
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/440FEVt05ivUvar3leHiFwqf5EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.22.0/24
46.162.48.0/24
46.162.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:e6:ea:1b:22:83:43:26:cb:73:a8:5b:88:9a:cc:45:0f:c5:
28:eb:1a:bd:c4:3b:34:c7:1b:d8:2a:8a:0c:d6:82:5a:3b:25:
bd:76:a3:bc:3e:57:9a:63:b2:64:f8:23:33:45:a1:5d:84:f9:
fa:02:7b:4d:81:1a:95:77:42:ad:f1:7c:de:a9:98:28:be:76:
07:e2:71:4b:49:08:ef:d4:cf:06:39:d2:16:0b:81:32:39:a7:
79:84:c2:f7:a3:3d:b2:55:37:6e:e2:88:0e:de:e4:00:58:e0:
0f:96:d3:7a:ec:50:0f:6c:54:6f:2a:9b:df:b5:d9:84:b3:a4:
d4:01:eb:24:55:06:a6:b2:76:17:e0:b3:2b:86:ee:a2:3e:e9:
21:6f:f6:45:5c:9f:5e:1a:c3:92:8b:56:72:04:ca:da:5e:9d:
f9:b0:7d:4d:5e:62:ab:89:2b:8e:d4:93:ce:9b:a6:06:a3:8a:
42:ea:f4:88:d2:52:3a:21:46:a0:f6:f2:c9:68:c5:e4:74:e9:
f2:da:1a:ac:9e:85:c0:fa:e2:b5:d2:9d:a9:3a:e7:0a:d6:4b:
92:52:ce:e8:98:3b:24:72:61:b9:40:c5:a9:fc:13:80:76:a3:
5e:5f:d2:2f:b7:7c:51:42:10:e2:a6:63:1e:b7:f7:a3:d2:e4:
2e:23:09:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org