Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MjOFkwdPZGK0xqaGOX7kTbbH7u8.roa
File: MjOFkwdPZGK0xqaGOX7kTbbH7u8.roa (raw, json)
Hash identifier: X1Ydf5KsC8cCRvNcYSTX6Cwihhz1H6E64ldzjIlCCwA=
Subject key identifier: 32:33:85:93:07:4F:64:62:B4:C6:A6:86:39:7E:E4:4D:B6:C7:EE:EF
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01876C31E692F7998001445D1DB90B520D12
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MjOFkwdPZGK0xqaGOX7kTbbH7u8.roa
Signing time: Mon 10 Apr 2023 17:23:42 +0000
ROA not before: Mon 10 Apr 2023 17:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150752
IP address blocks: 46.162.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6c:31:e6:92:f7:99:80:01:44:5d:1d:b9:0b:52:0d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 10 17:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32338593074f6462b4c6a686397ee44db6c7eeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:85:8e:c8:d4:41:98:8b:a4:e3:55:da:5c:
5d:97:27:16:1c:65:68:c4:4c:1e:f1:2a:9c:ec:d7:
fe:eb:95:16:21:d5:21:41:7a:fa:b5:55:f0:7f:95:
63:aa:22:50:65:c8:c6:32:e7:46:65:6a:a1:79:d5:
cf:84:76:db:45:13:b2:7f:6a:32:9b:b3:36:da:0a:
37:08:bb:e3:34:fd:32:fa:9d:30:d4:3c:9a:97:9a:
8c:f7:c9:7c:6e:33:05:ea:24:de:9c:84:d5:55:bb:
d5:f3:52:93:c7:30:9c:35:42:29:46:a9:f8:f8:c2:
cc:7a:aa:b0:d3:f4:56:da:9c:78:a4:7b:46:b9:12:
16:8c:a2:c4:6f:bc:b4:e3:74:7a:ce:b6:fd:43:3d:
27:53:d8:bc:1f:c2:e1:4c:c4:79:65:bb:52:0e:93:
d2:93:24:af:20:d7:7d:da:c7:45:e1:37:5b:1b:73:
4d:16:2f:fb:76:99:dc:a1:4f:14:68:db:23:62:d4:
b7:0f:3e:d8:24:d3:66:b8:d3:7e:bd:f3:bb:7e:c0:
fe:39:84:ed:0e:d7:78:cd:0e:55:20:74:0e:7f:3e:
c2:d6:77:92:a7:fa:02:39:aa:56:a4:aa:fe:2c:80:
f6:32:f8:59:cb:20:23:3b:42:1a:f1:01:7d:9a:60:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:33:85:93:07:4F:64:62:B4:C6:A6:86:39:7E:E4:4D:B6:C7:EE:EF
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MjOFkwdPZGK0xqaGOX7kTbbH7u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.27.0/24
Signature Algorithm: sha256WithRSAEncryption
91:00:18:5b:f1:b1:4e:19:ae:42:dd:31:3e:33:60:19:67:07:
3c:4c:74:e0:52:47:f3:ae:5d:2b:90:fc:6d:e8:96:f0:ab:90:
b7:ed:3d:df:55:96:57:66:b5:ae:73:5c:53:4e:ed:73:0a:57:
55:14:55:1f:dd:56:6a:6d:f1:97:29:85:ab:e4:37:79:62:4c:
b4:87:b1:93:65:4c:8c:8e:c8:9e:36:32:5f:df:ec:6f:ba:49:
48:32:95:b8:69:f8:6a:dc:71:22:97:28:a5:5b:63:f3:07:17:
ec:2b:2a:39:95:48:bf:dd:01:38:82:03:f2:4f:96:db:cf:c5:
1f:2e:8e:54:51:a4:89:a0:8f:71:54:7c:b4:8e:2a:0f:27:77:
c3:7b:cf:a2:d2:0f:95:b0:13:e6:eb:55:4c:ac:54:5f:d0:dc:
a0:b3:fc:00:6c:98:14:55:2a:80:4a:59:34:2c:69:9a:58:5b:
5c:fd:57:71:04:f4:3e:0d:82:10:14:b8:69:60:dd:26:80:b2:
58:3f:f2:7a:dc:42:54:91:a8:ff:54:03:51:9c:fa:87:9b:0c:
33:d6:c4:8f:93:ab:04:ee:48:5b:1f:d2:ba:0f:12:04:80:86:
46:42:65:7f:eb:3d:e2:68:33:96:c3:76:e5:d2:2b:87:db:b0:
e2:57:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org