Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/G8XIqiuFP-oAIvzu8B2N0SnbuGU.roa
File: G8XIqiuFP-oAIvzu8B2N0SnbuGU.roa (raw, json)
Hash identifier: I9fbGeHI/m5gvM74rnzNVqC81I2tG8NW18P364hjlyI=
Subject key identifier: 1B:C5:C8:AA:2B:85:3F:EA:00:22:FC:EE:F0:1D:8D:D1:29:DB:B8:65
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A044E1584DAE7B96CAECB0ADD0B147C7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/G8XIqiuFP-oAIvzu8B2N0SnbuGU.roa
Signing time: Thu 20 Apr 2023 20:04:41 +0000
ROA not before: Thu 20 Apr 2023 20:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 46.162.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 10:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:44:e1:58:4d:ae:7b:96:ca:ec:b0:ad:d0:b1:47:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 20:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc5c8aa2b853fea0022fceef01d8dd129dbb865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b6:fc:06:fb:56:4d:77:8f:26:1f:fd:90:e7:
51:52:a0:26:aa:6b:cd:a9:62:53:c8:43:08:73:93:
48:99:20:15:22:8a:81:da:be:57:3d:68:76:4b:d3:
92:91:3a:c9:35:8d:e4:f3:66:70:27:31:e6:bd:bb:
38:5c:9c:f3:d5:c5:20:fa:7d:4b:01:59:4f:18:1c:
57:9d:62:73:41:cf:47:2b:7c:1e:36:8e:7b:ef:55:
f9:63:cb:43:ef:55:e9:9c:17:90:3b:9c:7f:09:30:
d0:46:31:fb:35:05:f9:9d:5c:6f:57:71:a0:32:15:
78:31:a6:92:3a:55:d6:e8:07:98:e6:4c:86:97:56:
aa:eb:e7:5e:9a:38:af:51:11:e3:b0:aa:bd:91:6f:
19:79:c3:c4:56:3d:72:65:4e:f0:58:2f:10:84:67:
08:3e:e9:8a:2c:c7:51:b5:98:a4:b8:ab:2a:11:20:
6b:99:22:17:ce:86:c3:ef:2f:85:99:75:c2:ce:53:
be:55:49:09:75:48:c4:c2:63:55:e7:1d:bb:ec:39:
f0:9e:d4:ad:77:3b:e6:f8:42:9b:a0:bd:09:fc:d3:
4a:3a:cc:2a:55:63:ec:5c:2a:64:bb:c8:90:19:ae:
97:63:03:00:0f:20:f8:ee:d7:8d:31:db:94:46:13:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:C8:AA:2B:85:3F:EA:00:22:FC:EE:F0:1D:8D:D1:29:DB:B8:65
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/G8XIqiuFP-oAIvzu8B2N0SnbuGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.22.0/24
Signature Algorithm: sha256WithRSAEncryption
94:1e:8a:83:2e:95:28:bf:7d:d5:aa:cf:13:d7:8d:38:2e:2e:
16:e2:3d:96:06:41:a3:b9:4d:cd:83:74:04:60:2f:2a:64:9e:
75:7a:52:f4:be:5b:b1:ec:37:c2:30:df:f6:17:ad:45:21:cb:
74:ea:1e:00:44:96:04:53:ad:3a:49:5e:d2:ec:3b:e2:91:eb:
d9:4a:ab:f1:bf:22:c5:c8:72:71:83:cf:db:b5:dd:84:37:6d:
11:aa:df:f2:28:63:85:13:c2:17:1b:71:53:1a:62:6d:9b:62:
46:e4:6f:65:c1:1f:1a:cd:4a:48:1a:05:81:92:b0:83:20:9e:
ca:b1:6b:b4:50:f5:5d:37:18:82:c4:10:3e:bc:d2:31:2d:03:
d5:ce:4a:f1:39:44:9d:21:2d:91:b8:ed:3d:b5:f9:15:9f:4c:
d8:77:1d:23:86:4d:1a:82:ca:be:c1:98:92:44:3d:ed:d6:1d:
7d:49:46:a7:e4:d5:ad:aa:ed:d2:f7:81:5d:6f:44:86:9f:5c:
dc:ed:ae:66:08:5b:c8:ad:a2:61:8d:65:2b:21:25:f4:71:76:
44:86:3a:99:ce:3c:0d:2a:5a:0b:90:08:44:40:e0:47:38:fc:
1f:08:53:7d:2c:c7:7b:25:35:40:ac:9f:82:7b:d9:e7:02:91:
46:03:a5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org