Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HOYOiUW6WwdPDDG4yHQRjx6Zs7I.roa
File: HOYOiUW6WwdPDDG4yHQRjx6Zs7I.roa (raw, json)
Hash identifier: SQ4+VbLe33K+R0gzVtEYFFh3TTlu/Oi8EXAN1MN7Nus=
Subject key identifier: 1C:E6:0E:89:45:BA:5B:07:4F:0C:31:B8:C8:74:11:8F:1E:99:B3:B2
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187E0FFA4EB7083EE77218D1EBC171741E7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HOYOiUW6WwdPDDG4yHQRjx6Zs7I.roa
Signing time: Wed 03 May 2023 09:44:22 +0000
ROA not before: Wed 03 May 2023 09:44:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.2.0/23 maxlen: 24
46.162.4.0/22 maxlen: 24
46.162.27.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 20:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:ff:a4:eb:70:83:ee:77:21:8d:1e:bc:17:17:41:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 3 09:44:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ce60e8945ba5b074f0c31b8c874118f1e99b3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:a6:a1:aa:6d:d3:65:6d:0c:44:cf:70:1b:
7e:6a:87:c4:73:4a:4d:41:26:58:0a:33:33:77:be:
3e:01:4b:05:e4:ca:c9:ed:05:22:ba:c3:be:32:30:
9f:59:bc:78:60:30:e6:74:53:52:10:a6:d1:b1:ba:
9f:4a:0d:04:45:cf:b9:a8:a0:ba:1a:ca:26:70:23:
06:9d:2a:47:2e:a2:9d:4a:c2:5b:71:ea:58:2e:9d:
00:fd:4b:d6:38:f6:5f:33:a6:b4:59:54:e5:0a:11:
6a:08:ea:26:d9:46:8c:9d:0e:ff:ef:6a:43:ca:db:
56:21:7b:77:4b:fb:91:f8:fe:a5:d0:ac:86:3d:bc:
4a:da:0c:4d:e1:43:eb:05:81:c1:0e:ea:54:e7:b5:
07:76:cd:57:2a:a2:cd:2c:e2:26:c7:d9:21:d1:88:
bc:8a:cc:40:27:cd:f0:1b:b2:d5:9d:c4:28:55:ef:
bf:b2:52:f3:44:a8:77:45:39:6b:83:60:4a:79:3d:
41:bf:c0:04:57:8a:c3:89:72:b4:3d:8d:07:70:ff:
ec:2c:8d:6d:f0:a4:1c:bd:42:c3:14:df:40:63:a0:
bb:3f:c2:84:c3:cc:26:9d:fd:1d:4e:2c:3d:2a:e5:
ca:93:59:ef:f7:72:53:09:30:43:e7:2e:78:6d:9c:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:0E:89:45:BA:5B:07:4F:0C:31:B8:C8:74:11:8F:1E:99:B3:B2
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HOYOiUW6WwdPDDG4yHQRjx6Zs7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0-46.162.7.255
46.162.27.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ce:22:c8:a5:d0:6f:9e:0b:bc:d5:de:ee:ea:7f:0f:b8:8a:
8e:d9:f7:9d:29:fc:e3:ce:a4:9a:87:67:c6:d4:c7:c8:83:7c:
62:98:2f:c8:1e:5d:5b:de:ed:1d:89:00:b2:be:01:1c:09:f6:
17:ba:8c:75:a7:1b:71:f8:92:d4:18:a9:fd:20:fa:9d:28:55:
6b:16:b9:77:ba:3e:4c:30:a3:ef:36:86:ef:98:01:77:b9:8a:
a6:d2:0c:20:37:d4:69:58:0d:0c:9f:80:1b:95:b6:2e:9f:8c:
1a:16:7f:a1:f3:1f:ca:a6:96:61:5a:3f:ee:8c:fe:f5:7e:c6:
4c:4d:a8:55:37:04:54:3f:c5:b3:20:21:e0:ad:ae:5b:8a:f9:
f4:ee:f0:74:e5:43:11:71:f6:19:e9:7c:be:fa:5b:da:99:04:
9c:27:81:81:82:52:69:0b:8d:af:6a:10:94:a8:37:87:d3:bf:
d7:55:3e:23:39:15:5d:74:42:8f:c9:ee:38:f7:93:ae:03:d0:
f2:63:c7:5f:05:56:63:e1:ce:4c:b9:ff:d8:b1:24:b1:c5:3b:
94:68:99:f1:44:99:8b:39:25:84:05:9a:2f:62:c4:2d:ab:b0:
5a:98:71:93:3a:ca:c0:3b:2b:b0:21:f1:fa:ea:5d:89:ca:af:
9d:62:8a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org