Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FZ_3j3BEeFUI3qQ1KjrC7KlQL1U.roa
File: FZ_3j3BEeFUI3qQ1KjrC7KlQL1U.roa (raw, json)
Hash identifier: zWOwBSySD4oVqyd4vyrILc2BjNNvBZiKxmV6Y41hA9U=
Subject key identifier: 15:9F:F7:8F:70:44:78:55:08:DE:A4:35:2A:3A:C2:EC:A9:50:2F:55
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189401F790CD570DCB13E641FE376CB5F91
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FZ_3j3BEeFUI3qQ1KjrC7KlQL1U.roa
Signing time: Mon 10 Jul 2023 14:05:51 +0000
ROA not before: Mon 10 Jul 2023 14:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/22 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:1f:79:0c:d5:70:dc:b1:3e:64:1f:e3:76:cb:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 10 14:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=159ff78f7044785508dea4352a3ac2eca9502f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:c3:f5:5b:f3:1b:94:59:35:16:0f:e3:9b:
5f:67:2e:c6:7b:5a:6f:e3:55:f4:f7:05:37:14:36:
1b:29:6a:88:4b:5d:23:5c:e1:28:4b:ad:18:4e:9a:
cc:f5:7a:d2:ca:90:1c:71:a0:98:41:cb:f2:6c:fe:
bb:48:0f:16:4d:50:9d:cf:ac:9c:5a:64:9a:fb:db:
a9:bc:25:28:f9:9d:e3:60:55:7c:ec:5a:fb:dd:e2:
44:5e:4f:70:71:23:18:de:99:f5:24:a9:b8:11:18:
16:dd:02:cc:fb:e8:b6:2a:d2:1c:d2:b1:77:af:2a:
92:16:a6:b3:fd:0d:3a:65:9c:30:e2:4e:bb:91:df:
60:54:78:5a:52:77:c4:b7:14:62:9a:ca:36:8b:91:
42:e6:5f:a6:4c:bd:96:7d:5a:7b:32:1f:d0:61:2f:
18:21:70:07:e7:2c:a1:3f:9b:d8:d2:5f:2a:f3:c9:
e1:b3:91:db:96:f3:80:3e:c8:d2:a3:4a:fb:27:73:
34:c4:af:7e:bc:fd:df:13:dd:b4:c6:7a:73:36:91:
0f:a7:e0:de:16:1b:20:85:12:69:c4:66:80:04:56:
e3:4d:1a:d4:4f:9b:51:6f:ef:f7:07:37:19:4e:cf:
2e:58:cd:24:19:bf:3c:05:58:ed:69:f7:a6:0f:0c:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9F:F7:8F:70:44:78:55:08:DE:A4:35:2A:3A:C2:EC:A9:50:2F:55
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FZ_3j3BEeFUI3qQ1KjrC7KlQL1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.26.0/24
46.162.32.0/22
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
34:a8:b6:d0:9d:4e:d4:0b:19:06:a0:97:d1:bc:04:b3:ba:2a:
2d:f8:f7:e6:6d:c4:89:b5:85:b0:5b:1c:ea:37:87:12:45:80:
89:18:37:03:3d:0c:5b:d1:3e:00:79:b8:79:3a:cd:c1:39:d9:
38:b6:4e:00:df:06:00:38:db:75:02:71:33:09:b8:7b:68:86:
c5:4c:4e:f5:ac:f3:88:a2:d9:53:57:f0:4c:92:8e:a6:f5:3b:
bd:86:48:f9:f6:0d:02:9a:6a:ec:fb:95:a9:fd:99:1b:65:11:
dc:83:17:f6:4d:16:7c:fa:bf:22:d5:43:cf:b1:87:5e:d7:39:
9e:50:1a:f6:62:b9:b1:78:2b:dc:cb:15:53:e3:94:a1:fa:26:
ec:1e:84:07:8e:6a:64:ef:d3:08:82:6f:82:0a:94:dc:ae:76:
b2:7a:5f:32:08:95:ca:d5:e8:73:d1:6c:bc:25:db:96:51:34:
64:d2:1f:50:c7:2a:15:be:43:55:46:df:58:20:d5:e3:59:ab:
bb:d8:6a:a6:08:20:83:83:94:c4:06:75:d5:55:74:b8:5c:7a:
3b:aa:89:b6:f6:30:f3:a4:ca:a3:a4:03:e7:9f:d5:f6:5e:95:
c6:84:5b:ff:1c:c8:0e:5f:d3:27:a6:85:8f:82:dd:b8:0a:ce:
98:cc:dc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org