Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7QmnH7ipx_HQ_8My81lvC6RsEOU.roa
File: 7QmnH7ipx_HQ_8My81lvC6RsEOU.roa (raw, json)
Hash identifier: I0ofrjsGNKZnu7FqFQgItjguPDL86s/oFdicEFQeRFw=
Subject key identifier: ED:09:A7:1F:B8:A9:C7:F1:D0:FF:C3:32:F3:59:6F:0B:A4:6C:10:E5
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01889237854F63BC43E8596845F0607332ED
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7QmnH7ipx_HQ_8My81lvC6RsEOU.roa
Signing time: Tue 06 Jun 2023 19:38:12 +0000
ROA not before: Tue 06 Jun 2023 19:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.162.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 17:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:37:85:4f:63:bc:43:e8:59:68:45:f0:60:73:32:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 6 19:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed09a71fb8a9c7f1d0ffc332f3596f0ba46c10e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:bd:95:50:53:77:f0:7a:84:71:8e:2d:d1:
a4:5c:7c:f0:41:fb:38:7d:98:a9:84:9b:ea:44:a1:
6d:f4:db:da:c3:ed:5b:0c:1a:40:f1:1e:32:4f:9a:
96:2a:f8:39:86:b8:54:64:27:bb:27:06:d6:b1:54:
6c:f7:d0:90:f2:dc:47:d2:6c:5d:4f:62:81:72:12:
18:63:86:03:ca:95:e6:34:55:34:5f:0f:d7:ee:3a:
e0:5b:69:a3:fd:16:d9:9e:81:c4:77:2f:19:32:2b:
3f:2b:fe:02:f0:bb:0e:60:1d:a1:81:bc:d5:ad:fe:
cf:6c:00:ea:00:79:90:36:0c:7e:5b:41:fa:75:7e:
42:60:a4:d6:fa:24:97:bd:c4:9a:b3:ce:42:d0:c7:
b5:a0:92:e0:64:91:41:61:a0:1c:ab:86:52:50:bd:
a1:29:e9:0e:20:e7:97:a0:2d:55:87:35:44:e4:44:
75:84:ca:04:90:4a:ad:46:08:64:ac:27:83:e8:90:
f3:9b:3b:38:3a:b5:40:a6:28:7e:7b:be:70:6f:26:
37:5c:4f:c7:c6:dd:6f:0f:11:0f:7f:ad:57:b5:bb:
1c:ca:f4:6c:e2:16:e2:bc:95:8f:e6:08:26:2e:ff:
72:9f:0c:dd:fc:4b:15:43:48:e2:b5:e2:d7:18:80:
78:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:A7:1F:B8:A9:C7:F1:D0:FF:C3:32:F3:59:6F:0B:A4:6C:10:E5
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/7QmnH7ipx_HQ_8My81lvC6RsEOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f3:13:bd:00:76:e2:f5:fe:ad:47:0a:48:87:df:ed:a8:aa:
55:88:1d:92:ce:3f:b0:99:d2:34:22:54:3e:77:1d:b7:b3:38:
db:a4:1f:70:d0:e8:94:fd:be:f7:03:82:0f:d4:c9:37:1a:51:
0f:30:6c:fd:21:6d:2a:74:df:a1:18:8e:7c:60:c5:45:2f:90:
5c:5a:3b:c3:73:78:8e:19:a2:91:c4:8d:49:26:36:34:33:e9:
48:ad:ab:f7:60:f9:fb:9f:12:39:d5:25:c1:27:65:a5:55:fd:
cf:6d:d0:70:0c:ce:27:a9:40:6e:76:e3:55:9c:5d:e4:c9:b7:
ba:f7:fb:c7:f0:3b:6d:54:0f:98:b2:42:d9:58:f4:a6:b0:a5:
03:6f:e5:7c:46:33:06:58:21:60:a7:3e:fb:2b:1d:0d:69:10:
b1:8a:fa:d2:90:70:22:54:cc:c4:65:96:cc:19:1e:0d:18:e3:
61:2f:33:5a:8c:db:ad:8b:8e:b9:5f:18:e0:fb:cd:9e:b3:75:
9c:89:db:cb:1c:73:d3:8e:a6:23:8b:90:7a:78:10:84:f3:ff:
f4:55:8c:43:d2:3c:f3:c9:cb:7b:f9:48:13:73:48:56:72:95:
07:a2:16:a1:28:48:ba:14:1e:e5:10:05:cf:89:bf:2e:a2:3c:
e3:46:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org