Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AS46ju2_Xme96Z9q9RO1Mw3smHU.roa
File: AS46ju2_Xme96Z9q9RO1Mw3smHU.roa (raw, json)
Hash identifier: 3pGE63lsCHUAJCggQVVIroAiF3TvHjmsW/L1aB1myPo=
Subject key identifier: 01:2E:3A:8E:ED:BF:5E:67:BD:E9:9F:6A:F5:13:B5:33:0D:EC:98:75
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189413EF3BE31FF14E6B244D773085AF1C5
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AS46ju2_Xme96Z9q9RO1Mw3smHU.roa
Signing time: Mon 10 Jul 2023 19:19:51 +0000
ROA not before: Mon 10 Jul 2023 19:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/22 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:41:3e:f3:be:31:ff:14:e6:b2:44:d7:73:08:5a:f1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 10 19:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=012e3a8eedbf5e67bde99f6af513b5330dec9875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ca:3d:26:59:52:fb:5b:8b:76:d3:e9:ea:cc:
b2:93:dc:8e:5b:09:f3:df:4d:fd:47:30:1d:55:1d:
17:4d:db:8b:25:6f:c2:6b:7d:2e:4b:bc:b0:9a:b8:
32:c1:8c:18:39:35:fb:6e:0b:b8:91:30:49:2c:5d:
5f:75:2c:ba:7e:a5:35:59:1f:b5:0f:e4:9c:8e:35:
18:34:e9:7e:1e:ce:f0:cf:a1:77:02:c4:49:f6:a6:
cf:5c:b1:45:99:38:5d:76:7f:df:c2:ad:15:38:f3:
3c:2f:80:bf:2d:37:67:cb:95:d4:0f:43:9f:d9:20:
28:d5:62:9a:0a:bf:58:54:80:1b:d3:41:d8:e9:07:
9c:80:11:14:4c:af:88:fb:92:36:ad:fb:03:fc:5a:
ba:81:a9:b2:45:94:0f:35:eb:47:c8:c1:9e:9d:2e:
70:4b:92:8a:ff:d4:45:6e:f3:dc:17:b9:6b:69:37:
5a:df:42:e0:f6:a1:a4:32:65:bd:0f:5d:2c:6a:b8:
89:80:c2:55:9c:5f:59:31:1d:d4:81:c3:c6:d4:3c:
23:7f:15:ff:b3:8f:08:ba:9c:5c:ae:66:9f:de:88:
84:3c:a7:52:86:f9:86:49:ce:d1:5f:3f:93:af:ff:
4b:38:22:dc:52:93:c2:f6:87:91:cf:73:08:d2:6c:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:3A:8E:ED:BF:5E:67:BD:E9:9F:6A:F5:13:B5:33:0D:EC:98:75
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AS46ju2_Xme96Z9q9RO1Mw3smHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.23.0/24
46.162.26.0/24
46.162.32.0/22
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
88:20:00:76:2d:61:4a:13:3a:2c:2b:23:9f:69:02:3d:72:0c:
a5:65:c9:f8:ed:64:3b:39:fb:15:c6:89:d4:26:56:aa:78:12:
96:b2:c7:9a:f4:1c:60:b6:30:b3:e5:bb:4e:9c:51:79:d2:0b:
f0:92:7e:ff:f0:74:bf:8f:7e:e7:b0:c3:b1:10:26:97:a1:1c:
1d:95:3f:6e:d7:7a:c8:64:43:b9:0c:a2:14:7d:3c:e6:67:8a:
6e:ff:46:75:d1:f7:50:78:18:94:3e:c4:7f:be:0d:37:e0:f8:
0c:44:70:a9:33:ef:64:77:12:6f:48:33:f1:37:c3:9f:0a:a7:
59:4a:3c:06:84:7c:eb:00:1d:7e:53:79:ca:4e:40:b4:8b:67:
0a:e7:ad:cf:78:89:93:0a:fc:73:0a:76:4f:3d:bd:3f:23:44:
94:c4:87:03:f6:07:30:55:5e:a7:67:8e:e1:73:91:c5:60:55:
fe:9e:aa:9f:a3:04:46:82:ca:46:ed:b9:85:62:8d:90:fa:2c:
d9:18:c7:a4:6b:db:e1:b3:c5:22:5e:22:31:da:4f:47:6c:57:
f2:2f:00:9e:01:14:7f:8d:ce:b5:f6:04:b7:8a:28:07:1e:60:
8e:43:f2:0b:c7:97:f7:f9:96:4f:13:52:7b:61:d1:52:ee:3c:
4f:1e:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org