Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/PUHPvJoemtd3obFu_3pJ2XzJOmo.roa
File: PUHPvJoemtd3obFu_3pJ2XzJOmo.roa (raw, json)
Hash identifier: AM5VHI2z04500cQGxe3YVuhJ8GQBHLBXx6w0aBtaO7E=
Subject key identifier: 3D:41:CF:BC:9A:1E:9A:D7:77:A1:B1:6E:FF:7A:49:D9:7C:C9:3A:6A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018618A67D3299495E6FB9555A804C69DDDD
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/PUHPvJoemtd3obFu_3pJ2XzJOmo.roa
Signing time: Fri 03 Feb 2023 19:00:09 +0000
ROA not before: Fri 03 Feb 2023 19:00:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13347
IP address blocks: 46.162.38.0/24 maxlen: 24
46.162.32.0/24 maxlen: 24
46.162.33.0/24 maxlen: 24
46.162.34.0/24 maxlen: 24
46.162.35.0/24 maxlen: 24
46.162.36.0/24 maxlen: 24
46.162.39.0/24 maxlen: 24
46.162.40.0/24 maxlen: 24
46.162.41.0/24 maxlen: 24
46.162.42.0/24 maxlen: 24
46.162.43.0/24 maxlen: 24
46.162.44.0/24 maxlen: 24
46.162.45.0/24 maxlen: 24
46.162.46.0/24 maxlen: 24
46.162.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:a6:7d:32:99:49:5e:6f:b9:55:5a:80:4c:69:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 3 19:00:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d41cfbc9a1e9ad777a1b16eff7a49d97cc93a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:84:7d:55:58:26:55:8a:06:e8:ac:44:84:
ba:6f:f4:fe:b1:4a:ac:c9:e7:37:51:5f:f6:e2:33:
34:1b:4c:7f:14:0b:35:20:ad:3c:2e:15:38:99:b1:
40:35:c1:73:70:89:8e:93:49:e1:28:0c:29:61:01:
6f:34:2e:7b:df:f5:de:5d:ea:59:44:25:d8:c7:59:
84:60:52:46:70:17:d2:8a:b5:5f:f4:26:61:b9:3a:
4d:5f:09:4c:f9:4f:3a:b0:77:f1:81:37:38:9e:f0:
ed:a7:65:c9:a4:2d:5b:5b:98:d3:b4:cf:5d:5d:61:
58:5a:6a:81:13:0a:80:fe:e6:7d:1a:a4:ca:49:d6:
6d:67:7a:5d:d3:8f:9e:90:1b:0e:91:12:ab:c7:38:
9d:90:cc:ba:cf:7f:91:e7:20:e1:a3:65:3c:5b:20:
ea:98:11:21:c6:42:c8:24:73:22:c7:92:6f:36:f0:
a4:e1:7b:af:18:87:31:a4:fb:ee:31:e4:5d:28:46:
ae:df:34:12:5d:c8:af:9e:9b:90:77:c5:41:41:cd:
ac:f4:11:0a:d6:fc:5b:7f:4a:44:bd:8f:2b:8f:01:
38:ef:1a:40:2e:f3:38:dc:25:e9:1b:5c:48:dd:2d:
fc:9e:42:5b:0e:58:2e:6c:5a:29:8a:aa:db:d8:13:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:41:CF:BC:9A:1E:9A:D7:77:A1:B1:6E:FF:7A:49:D9:7C:C9:3A:6A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/PUHPvJoemtd3obFu_3pJ2XzJOmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0-46.162.36.255
46.162.38.0-46.162.47.255
Signature Algorithm: sha256WithRSAEncryption
1e:e3:ed:9a:72:b1:da:e6:7e:10:32:57:1c:06:cc:47:33:94:
33:bc:07:ea:c4:a6:f6:ae:5e:16:fb:27:fb:34:0e:92:96:16:
f4:1c:15:6c:c8:5c:3b:fd:e6:af:77:e2:dc:1f:89:1d:4a:22:
10:18:21:9d:62:62:cd:ed:9d:69:cf:55:de:a7:ab:61:6d:0f:
cc:fb:b8:43:d0:b7:2a:f6:d8:2f:3f:2c:f2:9c:1d:b7:c0:62:
59:1f:c3:f3:55:89:2d:c8:94:44:cb:f5:bb:ab:d5:df:db:72:
3c:5d:28:f5:69:3d:b7:44:4d:d7:9b:30:23:61:cf:de:2a:93:
71:3a:ca:94:c1:20:ef:cc:25:51:61:31:67:06:cd:e9:b2:05:
28:9f:45:0f:ea:ef:b6:5e:a0:a6:dd:4e:77:66:ca:65:86:4f:
85:77:51:93:98:9f:c2:5f:ad:d4:b5:c6:5e:04:14:af:22:4a:
2d:a6:00:3a:6e:5d:22:93:92:53:4c:b0:68:6d:12:d2:28:25:
ab:2a:0e:c2:0e:af:73:9a:38:6d:cc:7e:cb:c8:0b:24:b7:c1:
41:3e:f2:d3:0f:18:89:a3:44:fe:86:4b:38:80:bf:1c:11:ff:
c2:fb:da:a9:43:a1:18:16:fa:0e:dc:fe:2b:9a:5a:54:1b:ac:
91:61:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org