Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7BGq9Ajm3NHJuf2-uyflnWVDq04.roa
File: 7BGq9Ajm3NHJuf2-uyflnWVDq04.roa (raw, json)
Hash identifier: Gmp+ustUw4MEp4EsJhix3AoYzE6As0wx//JZjNj0DZg=
Subject key identifier: EC:11:AA:F4:08:E6:DC:D1:C9:B9:FD:BE:BB:27:E5:9D:65:43:AB:4E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189E8E8CFF08A49B3C0702DFE61CA71C1AB
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7BGq9Ajm3NHJuf2-uyflnWVDq04.roa
Signing time: Sat 12 Aug 2023 08:41:58 +0000
ROA not before: Sat 12 Aug 2023 08:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.15.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Aug 2023 06:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:e8:cf:f0:8a:49:b3:c0:70:2d:fe:61:ca:71:c1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 12 08:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec11aaf408e6dcd1c9b9fdbebb27e59d6543ab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:5d:58:bc:bb:b8:f0:47:e3:f6:2d:81:ad:
24:24:54:97:67:1c:97:5f:c6:b5:84:89:61:a2:25:
d6:8d:29:95:1e:40:d3:49:7b:8a:88:66:b0:f9:f3:
7c:55:5e:14:20:07:dc:37:42:92:a4:31:ab:58:17:
c3:ca:58:90:4b:8b:8a:50:13:6c:f5:5b:c3:16:72:
4d:f5:b5:67:89:30:1f:ea:ea:ed:63:f7:57:27:72:
2e:8f:ff:c3:b5:0e:fd:71:58:5c:5c:48:a8:22:34:
ec:56:86:69:a5:66:a4:bd:32:80:db:ec:11:93:5f:
53:6e:51:01:f9:59:1d:6a:45:22:95:dd:e3:5a:0f:
ee:86:08:24:ff:31:35:17:74:39:57:18:56:b7:f0:
38:c0:85:d3:9b:85:5f:d0:c4:ee:f8:2a:b7:15:a7:
cd:7b:15:ca:50:27:00:e1:ae:eb:44:8c:e0:b7:df:
af:7f:ee:b1:6f:65:05:51:aa:78:fd:e7:e5:e8:cd:
d9:c6:01:36:64:c3:82:17:22:92:94:38:ee:61:03:
04:38:8f:c5:fc:5d:76:6b:5e:df:22:1d:9c:fa:bf:
c6:7f:26:e5:0a:1b:eb:89:c1:9e:e1:a8:0b:e0:a9:
8b:1f:79:06:bd:71:8a:e0:5a:90:d4:34:46:c6:63:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:AA:F4:08:E6:DC:D1:C9:B9:FD:BE:BB:27:E5:9D:65:43:AB:4E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7BGq9Ajm3NHJuf2-uyflnWVDq04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.13.0-46.162.15.255
46.162.20.0/24
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
85:57:58:a2:b1:d1:3a:39:e0:22:0a:34:79:17:86:73:5b:ed:
0b:c0:02:e6:fa:e9:18:81:46:a7:c8:52:3b:75:54:4e:d5:8c:
66:18:e1:9f:90:66:54:a6:f1:b3:88:ad:25:59:bb:dd:e6:f3:
53:64:d8:e2:0f:5a:11:82:de:b2:b8:76:58:15:a6:be:03:f5:
0f:b4:b8:39:89:21:8a:48:58:29:24:75:44:9a:43:1c:54:ea:
cc:fe:18:9b:c6:9a:27:ed:3a:56:40:a9:64:4c:14:52:0b:73:
7d:6a:8f:0e:4c:01:fd:48:e2:88:c1:87:fa:77:7a:ff:e7:71:
ae:cc:54:0d:38:04:95:bf:e5:f4:94:ff:aa:55:ba:f3:07:6f:
b6:b9:0d:90:78:b7:15:e0:55:3d:94:85:dd:9d:92:7e:f2:db:
61:df:fb:15:91:c2:cc:e5:92:b0:e2:b1:6a:02:3a:69:5c:b8:
b1:1f:8f:70:c4:75:33:81:e8:95:0c:30:de:32:5d:54:e8:fe:
d8:75:d2:3f:b9:27:ea:99:7f:f5:17:6f:16:85:09:e1:27:6d:
30:15:ad:25:e1:b0:0b:bb:6a:36:80:5f:e7:d7:21:fc:58:8c:
cd:ce:b0:2f:88:d8:cc:7d:43:4b:0a:a0:a3:6b:d7:1e:0b:b8:
0c:88:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org