Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8hwDC15DwBC6Mj1VqWNaOHTftiA.roa
File: 8hwDC15DwBC6Mj1VqWNaOHTftiA.roa (raw, json)
Hash identifier: fgju/7axm679NZ6Eim/CYc8w8sZVjOrjtzouuiaTNyU=
Subject key identifier: F2:1C:03:0B:5E:43:C0:10:BA:32:3D:55:A9:63:5A:38:74:DF:B6:20
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189C7522CF8F1894C1F0319A08D36F27C38
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8hwDC15DwBC6Mj1VqWNaOHTftiA.roa
Signing time: Sat 05 Aug 2023 20:09:58 +0000
ROA not before: Sat 05 Aug 2023 20:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.0.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 06:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:52:2c:f8:f1:89:4c:1f:03:19:a0:8d:36:f2:7c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 5 20:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f21c030b5e43c010ba323d55a9635a3874dfb620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:ef:aa:c9:c6:99:da:27:34:9d:d7:a9:d9:
3d:a6:1f:85:09:97:4f:1e:80:33:40:d8:43:39:fb:
31:f2:f4:0f:78:08:bc:6e:94:43:99:59:85:9f:d0:
13:cc:60:ea:51:d2:2b:01:31:43:9d:58:fa:5c:a8:
c9:66:c0:34:2d:c7:dc:36:ca:b8:26:20:18:a6:d8:
2a:ed:d9:f2:ba:83:2c:5a:69:db:ed:cf:fd:84:81:
4b:35:d3:36:19:4c:90:b1:71:a4:97:f9:1b:58:ab:
50:34:56:17:4a:1d:fa:dd:fa:54:ed:d6:8b:c6:c3:
cd:ba:31:eb:6f:8f:8e:80:e5:2e:73:0f:47:7d:c1:
3d:26:c3:69:41:c1:eb:4e:c5:53:63:ea:24:81:65:
fb:e2:2f:ec:26:ee:12:b7:52:38:0c:96:21:9b:7e:
a0:32:8b:12:e5:5d:c1:ae:4b:80:8d:56:f1:d2:61:
c7:4a:b0:67:e9:27:89:d6:12:15:50:53:5f:bc:b7:
13:e5:86:83:a9:4b:32:00:67:dc:68:84:d3:83:ad:
8a:d4:eb:43:d8:4a:da:b0:c7:13:e0:a8:25:df:85:
ce:93:2c:67:9f:cf:0f:c2:10:04:86:b2:e1:22:a8:
64:f3:fc:af:3f:5a:54:bf:7a:5d:5c:bc:51:1b:e7:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:03:0B:5E:43:C0:10:BA:32:3D:55:A9:63:5A:38:74:DF:B6:20
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8hwDC15DwBC6Mj1VqWNaOHTftiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.3.0/24
46.162.10.0/23
46.162.18.0/24
46.162.23.0/24
46.162.26.0/24
46.162.48.0/24
46.162.50.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
38:5a:c4:0a:56:4a:86:09:c3:45:1a:0b:fe:fa:64:2c:69:f4:
65:78:2c:5e:46:3c:27:5e:7b:0b:55:67:b1:c1:0f:32:8d:1c:
46:2d:70:28:b5:08:31:02:9e:de:5d:c5:6e:0b:62:bb:d5:53:
ba:23:91:0a:eb:70:8b:79:ee:39:26:be:2c:88:79:cf:f1:96:
84:10:51:2f:76:91:2b:a9:42:ed:aa:2d:df:7f:c6:ed:cc:ca:
23:7d:b0:fd:f3:81:0c:ef:f2:8e:c2:d6:ce:47:93:3b:45:a1:
95:dc:1f:c1:58:c7:9d:2d:0c:69:f5:30:66:bf:56:03:e6:f1:
8e:bd:87:0c:a0:41:db:be:47:06:f1:ec:40:2e:23:e5:ec:8d:
40:21:39:27:68:50:5e:01:21:a3:a7:ba:b6:80:ec:d7:48:9f:
c9:74:35:e1:12:36:a8:da:6b:82:a1:0f:c1:25:fb:cb:eb:d9:
5e:f2:8e:4e:c3:19:16:f3:36:d7:e0:0b:c1:d4:4b:9f:6f:56:
f1:4f:66:12:24:14:c2:a4:f4:b6:eb:94:a9:ea:d4:fc:2f:66:
c0:2d:5b:f8:6f:53:8b:c2:ec:fb:0b:b1:21:95:ae:a7:3f:02:
97:5f:86:57:cc:6a:e5:a1:ca:8d:38:35:c9:af:69:6f:2a:d3:
cc:cb:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org