Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AjPlKysBbY0mJstMNY2Yjd54Z1g.roa
File: AjPlKysBbY0mJstMNY2Yjd54Z1g.roa (raw, json)
Hash identifier: NHC3CihZrnxw0XngarNx+MpWYuYiSejPAq9DR0Szn5A=
Subject key identifier: 02:33:E5:2B:2B:01:6D:8D:26:26:CB:4C:35:8D:98:8D:DE:78:67:58
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018A8DEDDB4AC41ED192B49CA3BB0792268D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AjPlKysBbY0mJstMNY2Yjd54Z1g.roa
Signing time: Wed 13 Sep 2023 09:44:50 +0000
ROA not before: Wed 13 Sep 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2834
IP address blocks: 46.162.13.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:ed:db:4a:c4:1e:d1:92:b4:9c:a3:bb:07:92:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Sep 13 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0233e52b2b016d8d2626cb4c358d988dde786758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:24:9c:c1:35:7a:cf:8f:cc:8b:29:d1:ab:38:
9a:35:0a:8a:15:16:f7:85:6e:6f:40:73:74:4a:b8:
c6:00:39:39:cc:98:78:b4:74:b3:df:98:27:11:cd:
0f:9b:bd:bb:80:f6:9b:b7:58:f5:20:c7:7c:e2:dc:
06:4d:0a:05:d6:b3:23:28:a1:6e:4f:f3:af:dc:f1:
44:8d:79:57:69:6b:2c:f9:60:42:69:b1:c0:8d:7e:
a9:12:87:c1:4d:5a:bc:d1:b0:49:d8:f1:b8:d4:3c:
e4:7a:7a:67:0b:d1:0a:d6:c9:44:3f:b4:92:84:0b:
33:0e:f1:20:bb:15:ea:80:fb:fa:da:20:39:90:af:
39:82:39:5b:12:a1:8d:37:80:44:82:c3:7f:d8:7a:
5c:4f:bd:92:55:b4:49:a1:b9:17:4c:2c:86:a6:a5:
09:b1:79:81:05:f6:cd:ef:37:54:bf:0b:b1:c3:c4:
ba:0e:b4:4f:d2:3a:a9:c6:3e:7b:67:f2:98:9f:d1:
ad:a6:a4:8d:28:a9:b8:56:df:fe:7c:b1:2f:e5:2f:
01:5a:99:2a:6b:7c:68:3a:a2:84:4a:3c:7d:8b:67:
74:87:6e:ba:62:ad:20:ea:c9:51:f9:c3:18:ff:5c:
6e:24:64:f2:36:5a:b4:dd:f3:37:d0:4c:f0:77:5a:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:E5:2B:2B:01:6D:8D:26:26:CB:4C:35:8D:98:8D:DE:78:67:58
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/AjPlKysBbY0mJstMNY2Yjd54Z1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.13.0-46.162.14.255
Signature Algorithm: sha256WithRSAEncryption
4e:86:02:cf:ae:26:7d:c5:d2:c5:92:c3:b0:4d:00:0e:4e:50:
4b:37:cc:85:93:2d:51:e1:29:c4:3e:60:15:f6:0b:93:c5:87:
06:59:ba:3c:77:c4:6b:4a:fa:80:cd:55:58:44:a5:52:b7:55:
64:6b:13:30:1e:0e:ab:73:4d:89:d3:ca:1b:55:d7:bb:32:c1:
13:47:cc:19:53:83:c6:ed:44:3e:99:2b:4e:72:4b:f1:ef:53:
ab:19:39:71:19:ea:dd:d4:b3:a6:ca:3a:c3:61:93:68:9d:b4:
a7:1e:2b:83:83:c7:c2:a0:39:02:3f:d1:d3:bb:4f:d7:f9:1b:
93:9b:06:76:1c:bf:89:28:78:06:f0:79:4d:77:20:ed:1b:5a:
72:74:e3:54:91:f2:eb:6d:fa:51:c8:55:3d:1c:6c:58:34:20:
42:4b:5a:e1:c0:40:5f:78:4a:1c:61:51:35:9b:ba:3b:4b:a8:
d7:b2:ad:7f:07:ac:4e:3f:f8:c4:a1:5b:52:f0:0c:b4:59:59:
ce:07:65:6b:f9:f0:8e:e9:76:a9:cf:dc:30:6d:71:03:33:19:
69:ee:d0:fe:8e:03:ef:fd:91:d7:62:7e:d9:f8:1f:39:9c:f4:
e8:2f:b0:20:e0:29:56:3a:27:43:7a:58:9d:a8:95:fd:a1:2d:
0b:c3:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 16:05:55 2023 by rpki-client on console-ams.rpki-client.org