Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QSflGqY7RdzcMGcpExAGbguqmXY.roa
File: QSflGqY7RdzcMGcpExAGbguqmXY.roa (raw, json)
Hash identifier: sQMjpMIraURq1HkVvuVntZYmdZtBJfdvy2oLzImRCTw=
Subject key identifier: 41:27:E5:1A:A6:3B:45:DC:DC:30:67:29:13:10:06:6E:0B:AA:99:76
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01889A0C86A0C3C88C2DBE42AE5F24BF68CF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QSflGqY7RdzcMGcpExAGbguqmXY.roa
Signing time: Thu 08 Jun 2023 08:08:12 +0000
ROA not before: Thu 08 Jun 2023 08:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 20:26:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:0c:86:a0:c3:c8:8c:2d:be:42:ae:5f:24:bf:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 8 08:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4127e51aa63b45dcdc3067291310066e0baa9976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:52:44:d5:24:34:6e:24:a9:6e:46:08:66:
32:7a:85:cb:2f:8c:a1:18:ea:79:7f:ba:1a:a6:e2:
65:24:3b:ce:51:ce:29:88:dd:50:c7:d7:55:4c:40:
16:0b:c5:19:c4:19:bb:a2:e9:42:e6:ee:1d:1a:41:
78:d8:f0:64:76:df:aa:62:33:37:30:aa:8f:74:0b:
85:47:4d:28:4c:df:26:d4:ae:f2:53:dd:92:ce:54:
d4:69:5d:47:64:c9:0f:88:7e:dd:2c:35:d6:a2:9f:
79:ab:dc:38:18:07:dc:9a:ca:d2:58:ba:6a:b1:64:
b3:d4:84:b5:90:66:ca:5f:40:fc:95:2e:d3:ee:95:
bc:3a:0a:13:0a:8a:21:3e:10:1f:c2:77:b3:5a:94:
1d:54:b1:34:83:66:97:24:64:d2:09:7e:e4:34:6d:
14:50:ec:b9:6c:e2:0d:5a:f7:5e:c8:3a:24:32:91:
d8:22:b8:fb:49:0c:20:48:88:43:d1:d2:83:e7:ba:
5c:69:04:25:7a:47:5c:1c:7d:da:21:a6:be:30:a1:
20:75:93:84:6b:f8:e3:18:0d:db:16:e9:51:26:e1:
70:be:4b:96:af:f9:0d:85:81:47:54:b3:f8:6d:25:
7e:55:1c:9a:19:50:2a:58:f6:ab:7b:12:ef:bc:3b:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:27:E5:1A:A6:3B:45:DC:DC:30:67:29:13:10:06:6E:0B:AA:99:76
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/QSflGqY7RdzcMGcpExAGbguqmXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:23:33:e2:57:6f:a3:e8:41:f7:c0:ee:c8:12:49:27:19:f0:
c2:45:fb:b0:7f:e9:73:49:0a:77:78:94:44:27:f0:c8:15:9b:
cc:03:2c:da:74:71:1b:a3:85:d9:49:61:5a:4e:03:1f:c8:07:
d5:96:ee:0f:db:90:82:29:1c:2e:5d:48:dd:d3:bf:1d:2a:2c:
ad:39:58:ea:c5:89:f7:b5:3d:0b:46:60:ed:72:ad:ba:6b:60:
af:3b:2d:16:a0:fc:dd:ca:50:b3:eb:29:1e:15:b1:a5:e3:7e:
fb:e2:27:75:58:87:91:4b:9a:04:2b:54:3c:84:09:b1:56:06:
d7:67:4a:b3:44:87:7d:98:54:72:b1:71:40:65:2e:b4:3d:83:
16:3b:bb:eb:fb:0c:82:82:f6:1f:97:47:89:64:a8:3f:6c:ef:
50:a0:e9:df:60:03:f5:cd:63:a4:d8:7f:9f:01:ad:ea:ad:04:
ee:8f:2c:48:71:67:bd:a2:6f:1f:04:62:d7:86:36:30:03:b0:
88:13:9c:c8:c1:53:68:56:c6:1c:2b:9d:1e:7a:5e:56:9e:21:
1e:05:63:fa:17:d9:b1:28:11:91:ee:85:7b:b6:08:b3:2c:48:
2d:04:e8:0e:34:dc:5a:e4:bf:e8:fa:e4:95:1c:7e:8d:95:0a:
1c:c0:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org