Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F56B8i7peZyfLInLWV4tGdqbk4Q.roa
File: F56B8i7peZyfLInLWV4tGdqbk4Q.roa (raw, json)
Hash identifier: /sa3BNlYJ1KGXfACTHnond5XlUFsBBcro5cad1KgAvE=
Subject key identifier: 17:9E:81:F2:2E:E9:79:9C:9F:2C:89:CB:59:5E:2D:19:DA:9B:93:84
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188B9C8C88A8CCC620D7AF5CB9F3EFA6E4F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F56B8i7peZyfLInLWV4tGdqbk4Q.roa
Signing time: Wed 14 Jun 2023 12:02:03 +0000
ROA not before: Wed 14 Jun 2023 12:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c8:c8:8a:8c:cc:62:0d:7a:f5:cb:9f:3e:fa:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 14 12:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179e81f22ee9799c9f2c89cb595e2d19da9b9384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:15:e4:13:68:7f:a4:20:65:26:37:d5:d8:28:
ac:ab:21:c4:63:1d:b4:94:eb:8c:d4:4c:e0:9c:9f:
d9:38:95:e9:b7:35:4c:f6:e7:0d:cf:04:02:51:f0:
21:02:c6:30:cc:65:c2:bc:e1:71:d5:92:6f:50:d4:
cb:ce:13:0d:62:da:0e:e4:ba:15:f5:e9:ac:cc:f0:
64:a9:9a:30:b4:e3:9d:ab:4c:88:68:b0:c9:06:f1:
e1:96:0c:a6:2b:40:20:1d:ef:62:3a:de:e8:58:e3:
85:73:c0:b7:d0:fb:9a:4a:0a:e3:45:24:78:d4:e5:
da:14:a9:19:b8:87:b0:34:46:c4:8f:dc:67:e5:20:
b1:f5:c7:61:b3:e9:0b:03:10:78:d6:87:4f:ef:4a:
ef:d7:7b:a5:79:1f:e3:ff:1c:9f:a3:d0:0c:15:87:
96:07:d7:ab:90:65:3e:a9:f3:03:eb:91:3f:40:d0:
98:1f:f6:d7:d6:5f:0d:95:67:8f:4c:9e:0f:e2:2f:
a4:ca:8e:8b:51:5e:2e:f4:d1:f9:3a:d3:6d:fe:73:
11:d5:7e:34:49:75:ea:26:9c:44:63:cb:e5:1a:82:
ab:6c:20:a4:b1:26:92:ef:b9:68:07:f8:8c:ba:6c:
71:19:bb:13:ee:b5:25:29:27:71:25:6e:e4:3c:c0:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:81:F2:2E:E9:79:9C:9F:2C:89:CB:59:5E:2D:19:DA:9B:93:84
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/F56B8i7peZyfLInLWV4tGdqbk4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.10.0/23
46.162.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:05:cb:a5:7d:96:3b:7b:0b:40:04:2d:4c:85:8e:1a:25:29:
9c:99:cc:1c:e1:f3:fb:84:34:5c:a2:cb:33:28:b3:e6:29:97:
b4:45:10:92:9d:77:12:ab:1f:c0:58:1b:d8:f2:ed:32:c6:ba:
b7:ac:76:3a:14:99:d7:e8:39:74:ed:d6:7e:02:a2:bc:a3:6e:
88:8a:5c:56:9c:10:b4:4f:81:dd:bc:e2:8c:ea:23:f4:79:9f:
be:3d:13:50:96:c9:7b:5b:38:f9:f6:48:ad:f1:5a:7a:b5:97:
e9:97:f6:10:3d:ae:4a:33:37:81:75:ed:94:73:83:84:99:be:
5e:82:85:da:5e:19:33:c6:06:70:b0:14:2b:12:75:71:71:bd:
de:f6:68:9c:0a:3d:ee:d6:f1:ab:ab:e3:71:a6:cf:4c:6b:52:
58:a9:ee:88:d9:9b:c4:64:f2:b0:6e:f7:bb:87:12:f8:19:8d:
2d:99:d9:76:0d:26:8f:b9:af:57:a1:59:06:45:bc:07:61:40:
ca:a6:d3:5f:38:62:be:54:71:8a:04:6a:6b:c3:71:7a:11:8f:
36:8b:48:32:8a:6a:fd:73:87:77:a3:15:79:91:62:51:9d:9a:
31:98:1c:0c:dd:e4:6a:a4:84:ce:89:2f:31:85:0e:19:54:67:
ee:e3:10:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org