Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MLVE4gWeXLMJAV_wL9BKKGLUK7w.roa
File: MLVE4gWeXLMJAV_wL9BKKGLUK7w.roa (raw, json)
Hash identifier: PKXIgIp/P+rNqVN+XVjxN9ghlFGwMn560TLdJY9jlJQ=
Subject key identifier: 30:B5:44:E2:05:9E:5C:B3:09:01:5F:F0:2F:D0:4A:28:62:D4:2B:BC
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A34A80C77374515987E92ECA8883888F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MLVE4gWeXLMJAV_wL9BKKGLUK7w.roa
Signing time: Fri 21 Apr 2023 10:09:41 +0000
ROA not before: Fri 21 Apr 2023 10:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 46.162.22.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 06:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:4a:80:c7:73:74:51:59:87:e9:2e:ca:88:83:88:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 21 10:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b544e2059e5cb309015ff02fd04a2862d42bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:2a:76:09:41:38:d1:77:3e:db:7f:ee:c8:
9d:f1:e9:9c:f5:f5:a3:bf:72:70:84:b0:5a:10:66:
03:45:30:4f:f3:e8:4c:c3:dd:a6:7d:02:76:a7:7b:
a7:47:43:20:d3:0b:09:2b:68:b7:94:b1:0c:89:a9:
34:c8:7e:04:84:f4:eb:2e:16:15:71:99:4f:18:8a:
9e:a1:ff:e8:61:4f:ad:56:d3:88:8d:10:67:df:c2:
54:04:dc:db:11:90:04:c2:45:14:6b:ea:5d:39:37:
3c:5a:7b:c7:e5:33:0d:b1:44:e1:3e:4e:b0:25:35:
3b:a4:a8:83:f6:52:b9:c7:ac:58:60:91:97:9d:d3:
0e:c3:9e:1d:c2:ba:71:6a:3e:62:81:9c:a9:c5:6e:
49:64:9e:8e:a3:19:53:60:b5:5f:4c:96:a9:2a:e2:
a9:cf:f2:4e:aa:b4:b7:40:d8:38:9e:1c:59:1a:1f:
20:5d:84:33:80:8c:34:3a:41:a8:1b:67:86:b0:6e:
19:14:56:2b:05:84:e7:5e:2b:e2:74:92:bb:13:85:
f1:0f:44:6d:8d:94:92:c3:55:3e:e9:72:19:e7:a5:
e4:b6:cd:c7:77:dc:af:3f:ce:d1:a5:dc:bc:de:49:
fc:46:a8:bf:1f:b6:d2:25:95:23:a3:4b:d0:d0:ed:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:44:E2:05:9E:5C:B3:09:01:5F:F0:2F:D0:4A:28:62:D4:2B:BC
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MLVE4gWeXLMJAV_wL9BKKGLUK7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.22.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:31:85:f1:f9:01:8c:6b:b6:0a:dc:2d:b6:48:2a:00:69:14:
90:41:ff:24:19:d5:5d:4b:5e:e6:d5:61:0d:a0:35:77:56:9c:
d6:2a:23:89:2c:74:b2:fb:27:ac:fe:d6:9f:ed:1c:a5:cf:37:
25:5e:35:de:0d:f2:74:03:c3:15:c3:76:0f:b8:50:b8:f0:72:
28:3f:64:26:e9:ae:78:d6:e4:b2:ad:aa:7f:f4:a5:15:4b:99:
88:8e:9e:8f:5d:31:d1:f0:5a:5f:b3:ac:51:74:07:c0:fa:37:
74:49:14:b1:64:91:52:8e:f0:0b:4a:a4:65:62:72:a1:ef:8c:
03:52:46:a4:2d:17:29:3f:6d:39:4c:bd:fd:f0:75:dc:ab:53:
cd:f7:fe:e0:f5:65:91:83:9e:8e:80:6b:06:44:6b:13:61:0d:
80:3f:fa:b7:b2:72:c9:d9:e7:a5:e2:8a:43:67:3a:e3:76:bb:
08:2e:60:1c:05:3b:98:1e:e7:40:56:88:a6:1a:b9:5b:fb:e5:
c9:d0:62:5a:83:8a:3a:c0:21:c8:37:f7:51:7b:0d:e4:df:dc:
76:44:ed:d1:59:4c:c9:d9:d5:5e:8c:f7:71:7c:a3:87:e7:7b:
13:13:0f:73:bf:42:24:7f:7f:08:dd:56:a4:a7:1c:a3:ad:00:
0d:5d:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org