Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/9xb3D_x5Ht7sLZM-3xqWXMoYIWw.roa
File: 9xb3D_x5Ht7sLZM-3xqWXMoYIWw.roa (raw, json)
Hash identifier: kyQe42/yb7Z7vzxW7m09LLXc1PBSULIhu5ScEifUJJA=
Subject key identifier: F7:16:F7:0F:FC:79:1E:DE:EC:2D:93:3E:DF:1A:96:5C:CA:18:21:6C
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01877139D5575D0C6101E8F53F7B1A979075
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/9xb3D_x5Ht7sLZM-3xqWXMoYIWw.roa
Signing time: Tue 11 Apr 2023 16:50:28 +0000
ROA not before: Tue 11 Apr 2023 16:50:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 46.162.24.0/24 maxlen: 24
46.162.29.0/24 maxlen: 24
46.162.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 06:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:39:d5:57:5d:0c:61:01:e8:f5:3f:7b:1a:97:90:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 11 16:50:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f716f70ffc791edeec2d933edf1a965cca18216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:ff:d1:aa:d8:2c:6b:d3:3f:bc:8d:40:1b:
9a:12:90:d1:53:c7:f6:3c:41:55:ba:64:47:d7:da:
a8:b6:8d:ba:22:b6:fb:fb:4a:44:d7:bf:45:1e:ef:
a6:71:f2:0f:a1:2c:64:a7:11:67:75:43:17:d3:05:
57:39:39:fc:8a:75:21:15:26:45:69:57:e8:50:3f:
f7:2f:fb:ba:39:d9:39:3b:5d:fb:11:eb:6b:04:3b:
f7:6f:1d:85:66:5e:21:72:cf:88:f6:1c:01:87:1e:
18:04:b0:3c:97:41:29:88:58:27:df:0d:24:03:d8:
b0:17:16:02:47:86:e4:d5:81:e6:63:f9:79:b5:4b:
76:dd:5c:23:7c:88:55:08:8e:66:78:db:ea:f1:d6:
42:01:0b:2c:66:f6:a4:25:d3:83:44:c7:74:1b:bf:
40:08:50:1d:8a:06:48:49:f5:02:38:ef:2b:56:58:
ae:3a:2b:c7:24:50:7e:55:46:cf:f5:0e:ed:7c:45:
b0:ad:58:8b:1b:8c:6d:23:66:38:3e:95:63:2b:2e:
fa:77:eb:68:75:66:0d:31:bf:6c:3f:2a:b9:20:da:
ee:0d:69:f8:5d:b5:9d:d8:93:7a:8a:25:7c:ce:92:
71:48:42:31:da:ba:22:6d:3c:4d:24:ff:29:be:67:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:F7:0F:FC:79:1E:DE:EC:2D:93:3E:DF:1A:96:5C:CA:18:21:6C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/9xb3D_x5Ht7sLZM-3xqWXMoYIWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.24.0/24
46.162.29.0/24
46.162.31.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e6:7d:0b:18:c2:6c:96:f6:d3:4b:4c:c7:a0:d3:6d:15:a7:
97:19:17:43:da:52:37:73:5b:d2:82:c6:44:20:54:33:03:b4:
d0:02:7d:9e:9a:1a:93:99:5f:c3:fa:1c:6b:0c:f5:fa:7a:91:
5f:fa:84:89:52:51:ce:f6:ca:38:3e:39:06:64:f7:21:1b:b2:
a9:c1:0c:4b:75:fb:9b:61:6f:5c:0d:10:46:cc:4d:6c:74:6c:
68:d6:92:db:12:ea:96:b2:d9:56:2f:b2:02:e5:75:ca:93:40:
ad:69:5c:3f:b8:85:7e:64:09:8a:c5:ed:e8:3f:f1:e8:dc:2e:
cf:a5:d3:3d:a2:95:65:5f:7a:e4:9b:48:02:c5:c8:ec:92:08:
11:6a:de:8b:90:9d:df:dd:e0:5a:6d:38:78:b8:03:c3:34:03:
46:4c:cf:89:0a:3b:73:db:c3:28:cd:fb:7b:91:4f:2b:3d:f6:
64:41:60:48:b8:87:9c:6d:9f:c3:85:ba:19:7a:71:fc:79:3d:
b6:1a:0c:a3:28:f0:2d:8a:42:08:ae:66:b4:6a:f9:87:1f:fc:
ac:36:1c:de:16:31:d6:4f:c4:15:d1:e7:bf:e5:d1:c9:ae:9c:
05:43:c9:79:14:a6:7d:20:62:09:ec:f3:9a:c7:e9:42:d0:cb:
dc:89:e3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org