Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa
File: A4sekV3tFiwfwU4lT7qlNNh6oCE.roa (raw, json)
Hash identifier: VCFsmbWmq0tUx64zdlI8j9zlNhcRMwCa0n5Wy5S799k=
Subject key identifier: 03:8B:1E:91:5D:ED:16:2C:1F:C1:4E:25:4F:BA:A5:34:D8:7A:A0:21
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0186117E849D539C1C3AC85BA5983B00B23F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa
Signing time: Thu 02 Feb 2023 09:39:09 +0000
ROA not before: Thu 02 Feb 2023 09:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/19 maxlen: 19
193.111.156.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 03 Feb 2023 18:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:7e:84:9d:53:9c:1c:3a:c8:5b:a5:98:3b:00:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 2 09:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038b1e915ded162c1fc14e254fbaa534d87aa021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:0a:ce:d8:9e:95:3a:40:b9:8a:5c:8d:cd:
56:f5:e9:9b:a6:21:ea:b0:8d:ce:5e:3e:78:43:3e:
f0:f4:0e:54:ad:6a:56:fb:72:07:10:4a:3c:e0:a6:
2b:6c:38:0c:94:16:51:f0:34:86:3a:e0:69:39:45:
ee:af:39:bd:52:34:5d:a4:fa:40:96:58:19:2a:54:
59:b8:27:35:d5:64:3d:14:42:de:a1:71:81:6e:f5:
04:40:11:d6:25:cf:2f:86:14:17:74:bf:24:aa:84:
cc:72:4b:48:5a:f5:3e:a4:a9:ea:35:3b:3d:5c:1b:
ae:4a:ce:83:73:26:e2:49:e3:3f:5d:6c:26:c7:b1:
61:61:98:99:80:a3:30:f4:08:9d:6d:89:dc:ef:90:
79:ce:36:de:d4:d3:1a:fd:47:a3:73:82:cf:bd:c4:
5a:6f:47:bf:4b:df:45:4a:7d:0d:5a:d7:70:94:be:
4c:d7:1d:da:8f:5d:dc:ba:45:42:a2:67:6b:db:75:
e0:be:96:c6:e8:22:47:2a:8c:a9:8f:b0:3f:2a:3e:
87:d3:9b:a1:42:82:3e:1f:6d:32:03:ca:dc:ff:18:
82:69:e2:d4:02:be:6c:a9:f1:80:0d:38:3b:40:1b:
e4:8b:93:5b:40:2a:10:8f:54:5d:cb:3b:ed:77:78:
f8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:1E:91:5D:ED:16:2C:1F:C1:4E:25:4F:BA:A5:34:D8:7A:A0:21
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/A4sekV3tFiwfwU4lT7qlNNh6oCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/19
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
47:f1:35:cc:21:c2:b9:1d:20:38:a8:be:53:84:b3:63:1a:ca:
82:bf:a0:1e:ac:af:0b:4b:db:88:5b:47:39:0c:b0:8e:7d:36:
9d:0e:19:8f:ff:30:b3:03:11:71:be:69:5b:55:ff:66:78:7e:
68:ab:cc:1e:13:04:83:c9:a8:8a:06:29:cd:ca:1d:46:04:e6:
9d:36:78:57:2c:b6:5d:4a:9c:0e:8f:8d:72:5e:05:b4:cf:74:
2a:48:af:c2:db:f7:f0:6f:b7:ed:29:38:d8:21:ee:ce:8f:4e:
62:60:09:b0:ff:5f:53:76:f1:4f:77:00:7a:14:cf:eb:89:34:
9a:f1:7a:8f:5d:4c:7a:fb:b5:76:cd:e6:70:02:1a:9e:90:e8:
72:a7:e3:1f:46:7f:89:be:d4:75:da:74:19:fb:2b:11:83:bb:
f2:ec:af:90:2f:e7:76:33:4a:ce:16:00:50:91:39:ea:a5:88:
92:c9:95:04:4c:7d:14:7c:5c:4f:aa:40:e3:4d:7c:f3:a7:95:
c3:fa:64:64:ee:67:fa:50:e2:dc:4c:fc:de:98:7d:93:20:94:
0a:c1:6d:81:ae:8a:c3:4f:b5:50:99:c1:9b:a4:8a:c4:66:f0:
3a:30:e8:41:9e:6b:97:83:48:68:d8:27:29:28:75:cb:99:1e:
94:e1:e3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org