Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/CM8-JXCVXhIDBKaVduI2IYGpwbM.roa
File: CM8-JXCVXhIDBKaVduI2IYGpwbM.roa (raw, json)
Hash identifier: DjvNDMVamzlY+ZtuIfg1KC5mPy3NuYI/L7GKe3PSCV8=
Subject key identifier: 08:CF:3E:25:70:95:5E:12:03:04:A6:95:76:E2:36:21:81:A9:C1:B3
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187E35A0F507198D44A00A7D8CDFAD64194
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/CM8-JXCVXhIDBKaVduI2IYGpwbM.roa
Signing time: Wed 03 May 2023 20:42:22 +0000
ROA not before: Wed 03 May 2023 20:42:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.2.0/23 maxlen: 24
46.162.4.0/22 maxlen: 24
46.162.27.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 May 2023 07:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:5a:0f:50:71:98:d4:4a:00:a7:d8:cd:fa:d6:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 3 20:42:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08cf3e2570955e120304a69576e2362181a9c1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:32:13:f1:d8:2f:e1:f5:23:a8:3d:52:1a:f0:
dc:dd:ae:ce:d3:d1:8a:86:06:5f:11:50:17:f9:2e:
4a:d4:cb:cb:4b:56:52:20:1d:f9:a5:46:a6:d7:61:
ac:1f:47:b1:74:67:62:2f:b9:85:df:da:eb:9d:7d:
f3:ba:34:76:ab:c9:54:4f:7d:11:3e:a0:8b:cd:6c:
ff:ec:e2:10:21:e0:c0:ea:5f:b9:76:58:02:fc:03:
69:73:66:c5:b7:3c:6a:83:c1:65:4b:80:53:f2:b5:
91:ac:83:3b:4e:a0:81:9b:cd:bb:19:3b:63:ef:90:
46:91:78:27:96:65:c2:b1:4f:18:7e:77:cf:53:58:
3d:dc:c6:33:68:f1:05:38:4a:49:8b:34:a4:5b:4e:
07:fb:d7:39:c3:27:96:7a:9b:b9:f1:5b:b5:f3:17:
c7:4a:ef:79:4f:38:8e:b7:fd:27:5a:b6:b2:81:d0:
7c:13:44:52:71:58:17:33:2e:19:ff:b5:69:82:4e:
c2:dd:20:c2:79:97:e1:c7:4b:25:32:1b:cb:ae:6b:
97:a6:0f:7e:22:ab:6f:45:31:7e:77:57:17:15:bd:
15:22:ed:37:fe:ae:4c:e4:c1:f8:d3:99:8c:c5:b8:
2b:7e:bc:81:36:73:9e:53:c3:0e:ff:2a:19:06:f6:
8d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CF:3E:25:70:95:5E:12:03:04:A6:95:76:E2:36:21:81:A9:C1:B3
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/CM8-JXCVXhIDBKaVduI2IYGpwbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.2.0-46.162.7.255
46.162.27.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
59:94:71:e2:9b:ab:d1:a6:05:81:98:ce:45:70:9d:c7:a1:d5:
52:56:50:0f:b3:7c:39:11:6c:30:fb:2e:53:22:4d:11:3a:3d:
c1:e6:a2:69:66:ac:32:e7:ab:df:50:96:b6:bc:4e:b4:db:9b:
f6:6d:57:32:58:2f:25:19:51:90:6c:38:f9:b9:79:53:d6:e1:
43:ed:37:40:af:d9:1c:2c:f8:62:62:9f:82:0d:b5:b4:30:1e:
68:77:0c:27:9a:96:a4:93:fe:b4:c7:65:6f:3e:b4:03:b7:b6:
f3:d0:0a:d5:61:0c:0d:03:c8:ce:a5:cd:5c:79:fb:b0:42:9d:
b0:ff:0b:03:e3:b3:24:99:e6:39:9d:ac:fa:7a:96:18:08:d7:
2a:47:22:37:d1:8c:4b:a4:ed:6b:47:3a:95:a4:e7:41:e0:54:
07:f6:03:3e:82:b9:1a:40:e8:05:49:d8:70:01:29:37:f8:9c:
46:05:c5:9c:ed:b2:a3:42:2e:23:69:f0:2b:ad:b5:02:d1:0b:
c2:eb:18:b0:fd:6d:80:a1:a4:e1:7a:81:5b:1c:33:76:e3:94:
a4:c2:bc:d0:5f:58:5c:e5:3b:d7:29:94:89:51:0c:b8:9d:2a:
1a:54:a9:3a:a2:da:c7:a6:a1:07:8c:33:a6:9a:38:f5:b9:b8:
9c:29:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org