Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FksxRM5XmokmkM17KBRBrHnyD1w.roa
File: FksxRM5XmokmkM17KBRBrHnyD1w.roa (raw, json)
Hash identifier: rVS2RBK8jrZLyZ4XcFZ3FviYYbgp3s/JXe+oFu0+WRI=
Subject key identifier: 16:4B:31:44:CE:57:9A:89:26:90:CD:7B:28:14:41:AC:79:F2:0F:5C
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187B8CE50C236B54E0ABCF9CCA468F0982F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FksxRM5XmokmkM17KBRBrHnyD1w.roa
Signing time: Tue 25 Apr 2023 14:25:41 +0000
ROA not before: Tue 25 Apr 2023 14:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.162.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b8:ce:50:c2:36:b5:4e:0a:bc:f9:cc:a4:68:f0:98:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 25 14:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164b3144ce579a892690cd7b281441ac79f20f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:cf:1f:f3:c5:5d:88:cc:0d:1e:c4:30:62:
41:00:03:97:f4:79:b0:72:bf:2c:c6:70:3e:45:7e:
1d:dc:43:5d:3e:b3:5a:3c:16:4c:11:5d:54:3d:72:
36:d7:41:3b:78:11:f5:99:8b:68:ba:b9:7e:bf:b5:
ab:17:96:77:86:0f:d4:7a:1d:17:ae:4f:52:fd:64:
0c:94:c3:7e:81:0e:51:6a:f2:31:12:83:c2:2c:b7:
bc:22:e4:95:bc:f6:ad:6a:ec:69:e0:32:a3:72:04:
7e:cc:9b:53:71:0d:97:c1:1e:49:63:27:89:f3:36:
f8:0b:70:a5:e8:6d:ab:42:3d:39:e6:d5:96:ec:85:
66:ab:41:22:87:89:00:14:27:32:79:b3:b9:8b:46:
11:b9:f5:3a:6d:06:c3:b8:73:68:5b:07:30:f1:2c:
a8:6e:43:5b:b0:ed:51:36:7b:9b:60:2b:4b:2f:d0:
19:45:ef:9b:d7:a5:83:87:f1:3e:af:e6:b2:c4:10:
9e:75:6d:b2:6d:14:e1:6c:88:52:59:62:72:8a:f1:
fc:30:1a:72:15:c0:bc:b8:e0:e6:65:df:eb:ba:c5:
0c:78:6b:15:12:8c:1a:64:26:fb:7d:54:28:63:4f:
3c:41:3f:6f:9f:0d:07:6f:08:ba:4f:2e:c1:ac:1e:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4B:31:44:CE:57:9A:89:26:90:CD:7B:28:14:41:AC:79:F2:0F:5C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/FksxRM5XmokmkM17KBRBrHnyD1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.54.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fe:fe:60:1f:1b:60:4d:d6:26:6a:e1:e9:e9:6d:0c:32:00:
e5:8c:4f:63:2e:71:20:cb:5e:88:ae:b3:8d:40:6d:cd:87:61:
e0:4a:56:e3:11:a1:87:b0:53:cf:e2:0f:36:f2:60:69:07:2a:
0c:91:ca:4e:49:58:30:86:37:88:65:af:42:b0:f8:bd:a0:3b:
97:c9:e2:25:f3:b7:c7:94:6f:c0:90:00:2c:ee:39:3f:d4:6a:
a9:30:5b:dc:97:56:96:03:c0:d1:13:03:7a:32:77:1d:02:5f:
ac:71:91:35:8d:88:aa:b6:5f:16:f2:7f:48:e4:cb:e5:c0:d8:
de:9f:7e:83:82:cf:cf:ad:98:67:7a:e6:89:43:5c:b7:f5:cf:
18:56:77:12:d8:af:df:2b:77:41:2f:4a:ce:03:f9:71:b0:9a:
43:5d:c4:19:51:14:f4:51:4b:4b:c0:30:a3:0b:be:33:0d:52:
de:a7:a0:e0:6a:c1:6a:4d:cf:20:53:65:86:2d:05:e3:a9:46:
1e:6f:80:ca:1c:21:03:27:73:48:b9:f1:5d:34:11:a6:a6:c9:
fb:2b:13:30:a7:55:6d:e7:66:f5:d4:ae:e0:36:f7:a7:99:73:
1e:bf:59:c1:0d:f5:50:83:a6:86:ba:ae:57:6e:3d:93:63:3e:
98:b4:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org