Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HpnWnrr4MhOTXl4Wd0FOQv0U4E4.roa
File: HpnWnrr4MhOTXl4Wd0FOQv0U4E4.roa (raw, json)
Hash identifier: S/poit08V8+XFlbVU0KbNwByLcZwQC4aU6wTnQv5ERs=
Subject key identifier: 1E:99:D6:9E:BA:F8:32:13:93:5E:5E:16:77:41:4E:42:FD:14:E0:4E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01894B67F568B24D252CDBC3A4FD97D20D3A
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HpnWnrr4MhOTXl4Wd0FOQv0U4E4.roa
Signing time: Wed 12 Jul 2023 18:40:51 +0000
ROA not before: Wed 12 Jul 2023 18:40:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.9.0/24 maxlen: 24
46.162.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 06:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:67:f5:68:b2:4d:25:2c:db:c3:a4:fd:97:d2:0d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 12 18:40:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e99d69ebaf83213935e5e1677414e42fd14e04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:cf:32:47:ba:a5:f3:e1:9d:07:ea:38:63:
f6:5b:0a:8a:b2:d4:3d:2f:5f:37:59:92:10:28:33:
f3:ca:af:5e:09:68:9f:9e:90:58:33:32:d8:7e:3d:
96:02:ab:ce:92:d9:94:76:e8:77:6e:e4:a9:67:cf:
76:b2:25:74:9f:66:46:f9:2e:fa:25:b1:17:4f:c7:
48:f7:1d:9c:6c:db:1c:9d:c4:b9:b6:ad:54:7a:9a:
0d:dd:fe:52:e3:22:e0:02:52:97:f7:25:6f:61:7f:
99:0f:c9:0e:a4:a8:7a:44:3e:b6:a8:ad:ba:c7:1a:
b2:02:64:82:d1:5b:5a:8f:91:72:f1:14:f2:64:63:
87:3f:81:10:e6:1b:25:00:f8:d2:a7:0c:c3:43:0b:
ca:7e:aa:2c:a6:43:e5:60:f6:93:ba:59:6c:45:99:
be:7d:8f:5e:62:36:f0:39:31:c2:7f:91:24:f1:84:
86:63:d1:09:a8:4a:c0:05:2e:57:2c:e8:ee:15:18:
48:6f:43:3b:f3:ab:4d:d7:89:64:f3:b1:f6:5c:61:
d1:b8:99:84:b4:88:ef:0a:e0:07:3a:fb:af:23:ca:
dc:51:e1:14:24:1f:81:6c:ff:a9:9e:25:b2:6d:55:
2a:05:57:e1:7b:4d:2e:b4:6e:0f:e6:cf:de:74:33:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:D6:9E:BA:F8:32:13:93:5E:5E:16:77:41:4E:42:FD:14:E0:4E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HpnWnrr4MhOTXl4Wd0FOQv0U4E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/23
Signature Algorithm: sha256WithRSAEncryption
25:71:f3:cc:76:d2:1d:3b:54:75:19:a7:35:fb:c8:db:2f:cc:
9d:77:e0:b3:de:26:8c:e7:84:db:94:5b:94:a1:66:7a:1e:46:
54:2c:c3:9b:c7:70:7c:bc:5f:68:1e:02:4b:b3:23:62:98:8d:
b3:34:0f:eb:9a:1f:1c:9a:de:96:57:2f:2e:4a:d3:c6:0f:14:
ca:d8:3f:2c:e8:a4:32:8a:1a:8c:29:47:3a:71:1a:8b:ee:a4:
ff:04:fe:97:a7:91:9d:1b:89:bd:ee:d3:5b:65:af:5b:52:41:
31:ed:7c:32:0e:78:37:78:f0:9b:c0:cb:c1:c1:59:03:e0:b3:
c0:48:fb:25:37:ff:fa:c4:bc:ff:c8:50:de:cb:5a:b9:cf:d1:
19:34:1f:f9:d4:63:2e:a7:be:96:ab:d4:b4:f2:fa:3b:70:a4:
fb:cf:dd:2d:30:b6:e7:78:79:59:34:af:f0:3b:57:d6:fc:38:
a3:2b:47:b0:6f:8c:7c:bc:76:d5:cb:ba:93:2b:21:88:23:de:
c3:39:02:e6:c9:41:54:0f:93:e9:39:f9:70:6c:4d:97:98:35:
68:fb:f0:b8:60:be:b3:48:95:ec:66:a7:aa:6e:e8:86:b6:c8:
29:71:67:3b:7b:5b:02:60:27:88:59:d2:68:5c:ed:d0:4d:f9:
57:f0:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org