Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/948nGBSEwzb8vtuNpnWF_3ufnzw.roa
File: 948nGBSEwzb8vtuNpnWF_3ufnzw.roa (raw, json)
Hash identifier: YD75vExt3bL3uDQYupyH8UI5rEL/dCT2DCP2qgc0X4Y=
Subject key identifier: F7:8F:27:18:14:84:C3:36:FC:BE:DB:8D:A6:75:85:FF:7B:9F:9F:3C
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A042225C33E23F4838E8AA330EE67C37
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/948nGBSEwzb8vtuNpnWF_3ufnzw.roa
Signing time: Thu 20 Apr 2023 20:01:41 +0000
ROA not before: Thu 20 Apr 2023 20:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 46.162.17.0/24 maxlen: 24
46.162.19.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 06:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:42:22:5c:33:e2:3f:48:38:e8:aa:33:0e:e6:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 20:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78f27181484c336fcbedb8da67585ff7b9f9f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:78:5c:f1:ab:1a:e1:ee:bf:12:58:a8:cf:bd:
54:a8:91:91:a3:ad:5b:79:55:aa:f4:e3:fe:01:12:
86:27:ac:f1:4f:ab:38:68:ba:87:4f:d2:68:a7:9b:
bc:16:19:f0:4e:07:62:ce:f5:bf:90:aa:60:ef:9d:
c8:e0:3b:c9:aa:ab:3a:fb:ba:0d:1e:13:d3:88:5f:
87:6b:41:11:92:fa:75:f0:e6:85:8f:16:b9:68:ba:
ff:a2:6f:54:8f:24:6f:04:33:f0:7b:4a:3b:70:d7:
92:3b:ab:1c:a1:c7:10:f8:2f:42:f2:2a:fc:c1:ea:
45:ff:91:71:77:6f:1e:9e:da:06:df:f8:45:52:e5:
03:63:32:50:d0:1b:38:00:2c:bc:19:31:0b:76:c1:
25:8d:df:69:09:65:ac:3b:55:2a:b2:d3:91:3b:50:
6c:13:dc:d9:f9:1b:19:eb:a1:03:c4:0f:2a:bc:6f:
30:09:f9:bf:cd:30:84:2c:52:9c:98:fc:26:ff:bb:
18:e4:7d:80:a9:de:11:07:6f:74:72:d2:42:6c:58:
9d:6d:16:62:dd:24:47:ef:e2:bc:bc:66:51:5a:00:
a5:3e:d5:c3:14:f8:87:50:84:73:aa:42:73:56:05:
6a:c8:d9:84:7b:a0:39:a3:5d:31:20:7f:4c:6f:03:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8F:27:18:14:84:C3:36:FC:BE:DB:8D:A6:75:85:FF:7B:9F:9F:3C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/948nGBSEwzb8vtuNpnWF_3ufnzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.17.0-46.162.19.255
Signature Algorithm: sha256WithRSAEncryption
7b:4d:ea:93:a0:d5:a6:55:2e:c4:0e:bc:1d:91:05:4e:99:ce:
93:d8:e7:30:18:bf:02:e9:0e:03:39:d0:01:74:4a:1d:6d:18:
67:67:db:94:f1:aa:5c:5c:e1:b2:84:20:e9:cc:28:84:ca:a2:
09:b8:f8:19:23:6c:34:f0:f8:1e:c7:59:b6:82:bc:53:a9:42:
68:3b:01:6f:a7:8e:6e:0e:aa:35:45:88:58:85:e5:6a:40:20:
8c:5a:1f:57:f1:13:76:01:8e:55:9a:fd:b9:10:66:67:73:d9:
20:28:d5:5f:70:e5:da:ab:68:c9:85:82:29:4d:aa:6c:ec:57:
6f:65:c5:1f:10:c1:62:38:32:72:91:37:da:1e:a6:d1:11:2b:
6c:b1:ee:33:e3:51:d6:56:01:64:ea:e4:33:3f:09:c3:b8:cd:
66:dc:b1:b0:6b:0e:f9:e7:5a:31:94:00:1c:03:65:35:2e:f9:
e1:c2:f1:84:ea:a6:2b:f9:f5:04:25:44:92:86:38:e3:ff:4b:
8c:e9:12:fd:de:49:b0:b3:a9:c4:87:a5:a2:99:da:be:92:5d:
8a:bb:6d:e2:86:64:f2:78:0b:d0:e0:87:eb:a1:c4:c9:45:37:
ab:f8:72:c6:37:42:47:b5:0e:a7:2c:40:70:6e:21:f8:43:f4:
1b:4f:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org