Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/My9rEf0CzOqmwjfBD_NVr4w70RE.roa
File: My9rEf0CzOqmwjfBD_NVr4w70RE.roa (raw, json)
Hash identifier: iJlCg0McAXjLod3E2CWr76Ee2A99sFBxcWrlXiiS3Ms=
Subject key identifier: 33:2F:6B:11:FD:02:CC:EA:A6:C2:37:C1:0F:F3:55:AF:8C:3B:D1:11
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01888AD89F3776E04D3A8F15C9C0496975BC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/My9rEf0CzOqmwjfBD_NVr4w70RE.roa
Signing time: Mon 05 Jun 2023 09:17:12 +0000
ROA not before: Mon 05 Jun 2023 09:17:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 46.162.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 14:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:d8:9f:37:76:e0:4d:3a:8f:15:c9:c0:49:69:75:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 5 09:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=332f6b11fd02cceaa6c237c10ff355af8c3bd111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:4a:65:25:fc:45:53:3e:90:c3:dc:ca:79:
6f:e9:95:c7:ce:ec:85:b4:d5:7f:90:1a:5c:7a:06:
8e:e9:7d:97:b8:7d:73:06:ef:ec:c3:f8:0c:42:d8:
b1:e9:df:25:b4:2c:de:7a:ee:cf:4f:6f:6b:d9:6e:
3b:43:a2:f8:d1:16:6c:17:24:6e:e6:7e:ea:74:08:
a3:2a:c2:af:d0:b3:40:c6:2e:23:2b:96:0c:73:b0:
f7:fc:53:19:2e:32:33:bb:65:b5:4c:df:c0:34:48:
bc:39:e4:9d:cc:d7:83:4f:0c:af:6f:af:6a:7f:71:
a6:ce:8e:94:66:3a:74:ab:73:2c:f9:d5:1c:a0:8e:
24:d0:85:87:4f:ef:c0:fd:1b:0e:5b:16:5f:33:84:
51:cd:f5:67:17:d0:d1:6d:0b:bf:d8:7d:17:41:71:
58:72:9a:5a:52:55:c6:28:69:d7:08:e5:a8:66:10:
e5:d7:7e:9d:8b:93:92:e7:1b:e2:8b:a4:dc:9c:d1:
ad:94:35:2e:79:dd:de:66:07:4f:3e:3d:d8:3b:0b:
e9:35:97:94:6a:9f:d0:02:e6:71:5e:7d:06:80:93:
39:ea:f5:56:60:86:ae:bf:e3:c4:52:2f:04:bb:62:
c9:a7:70:7d:8c:66:a1:a8:a8:5e:52:a4:e1:52:32:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2F:6B:11:FD:02:CC:EA:A6:C2:37:C1:0F:F3:55:AF:8C:3B:D1:11
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/My9rEf0CzOqmwjfBD_NVr4w70RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:be:e8:68:16:50:4b:3b:91:1f:11:e0:8d:00:4c:28:eb:61:
77:52:ac:b5:37:ee:d6:84:0d:28:14:ca:99:ce:ca:12:55:78:
6f:9a:35:26:46:ad:9a:03:32:c6:5f:73:1e:5e:45:d5:40:06:
59:8b:c7:e9:34:db:02:c2:a0:cd:f6:be:9c:ee:eb:e7:41:a0:
8a:17:a7:2d:6a:61:d0:1a:38:43:55:5c:e7:af:0c:6f:8b:cd:
68:6c:5a:29:65:22:15:95:8a:f0:8c:30:73:e0:d3:9b:98:ac:
d2:31:53:0d:67:6e:e8:cd:f1:29:21:f2:38:aa:54:2f:68:d2:
b1:08:16:75:15:8f:52:47:dd:2b:79:5d:88:26:33:40:02:a0:
ef:0d:b0:8c:be:c4:25:e5:8f:ad:d4:a5:a0:b2:c4:8e:ae:53:
9e:c5:f9:cc:71:6c:0e:7d:37:35:38:a6:5b:7b:ba:d9:2a:53:
ff:32:ae:36:67:fa:ec:a5:1f:b2:6a:66:22:80:8b:32:8a:3c:
aa:fb:dd:4e:0b:50:ee:d9:5a:2c:11:09:7c:de:29:67:83:86:
98:d2:1d:49:09:bb:e5:89:a8:78:3b:cf:e4:2b:57:ef:0a:27:
10:7b:80:28:a4:30:79:06:4d:be:01:4b:58:3c:60:26:f9:46:
97:b8:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org