Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qfw68zS4pJcrRLRMgnM3gKaE7hg.roa
File: Qfw68zS4pJcrRLRMgnM3gKaE7hg.roa (raw, json)
Hash identifier: hFZ8qDQ7HDAsq+aTD3MPS0txWfS2haJvNopzMVaEH8s=
Subject key identifier: 41:FC:3A:F3:34:B8:A4:97:2B:44:B4:4C:82:73:37:80:A6:84:EE:18
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01880ECC987CA66E353E3D336B2783A962E6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qfw68zS4pJcrRLRMgnM3gKaE7hg.roa
Signing time: Fri 12 May 2023 07:11:09 +0000
ROA not before: Fri 12 May 2023 07:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.57.0/24 maxlen: 24
46.162.55.0/24 maxlen: 24
46.162.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 12:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:cc:98:7c:a6:6e:35:3e:3d:33:6b:27:83:a9:62:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 07:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41fc3af334b8a4972b44b44c82733780a684ee18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:cf:41:9a:0e:c2:d5:79:07:68:d0:e2:a9:
46:0c:dc:b6:a6:f7:01:96:b1:89:45:b1:78:b3:c2:
b6:78:8b:03:4c:6f:5b:81:3b:4f:ff:3b:6c:b4:86:
ed:38:e7:6e:36:70:9b:10:5a:03:8e:49:19:d6:bd:
6a:a9:86:d9:a8:13:e5:08:6b:c2:3e:c9:44:ca:a0:
70:4a:1e:ce:2c:c6:08:f2:ca:5c:03:f7:61:ce:5b:
6c:5c:8b:bc:15:70:fe:24:f3:30:a9:01:ff:4a:69:
04:69:83:89:26:7e:55:29:30:71:f2:3e:39:56:ed:
7b:57:66:9c:ce:3e:e6:89:e9:1d:e3:4f:78:d0:8e:
59:93:0a:61:da:b0:10:e1:fe:82:56:ff:5b:6f:cc:
20:de:69:20:38:c5:52:ee:07:0c:31:49:80:71:99:
2e:31:a7:6e:6e:46:f7:59:a8:5b:1a:f4:eb:35:c7:
06:7f:f6:34:38:12:99:a2:1c:5c:73:97:27:01:e5:
cf:11:8b:44:02:9a:b4:17:10:9a:78:fe:6b:3d:83:
80:eb:43:97:99:31:97:97:91:9a:3c:b6:41:f5:3a:
27:7b:36:06:74:ae:6d:e9:3d:39:e0:80:38:4e:63:
9b:ca:c8:d1:ca:a1:71:6a:98:5e:46:97:58:ba:94:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:3A:F3:34:B8:A4:97:2B:44:B4:4C:82:73:37:80:A6:84:EE:18
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Qfw68zS4pJcrRLRMgnM3gKaE7hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.55.0-46.162.57.255
Signature Algorithm: sha256WithRSAEncryption
34:f8:87:ec:97:80:f2:8d:52:8c:22:70:55:d3:33:df:19:8a:
f4:db:56:5d:f2:71:bf:fc:19:93:dc:91:5e:72:5e:9f:20:75:
a4:c7:f6:a6:fc:5c:da:5c:21:c0:c2:2f:9d:5d:2c:e7:60:3a:
c4:40:e2:50:4e:29:d2:8a:48:7d:b5:fa:16:d1:9d:d9:ab:9e:
ee:12:f7:b6:cb:4f:1f:87:dd:73:d8:02:0d:58:69:cc:2f:97:
81:76:ff:18:69:c6:4a:dd:ec:29:d7:1f:d6:a6:94:a7:94:6e:
7b:00:01:55:07:63:b8:a3:9c:72:2a:c6:c7:52:5e:52:f4:b3:
9c:de:ae:21:99:3c:7c:63:19:8a:e1:30:1d:d9:71:da:f2:e6:
eb:74:e8:08:53:12:6d:cd:8c:c2:ee:5a:7d:f3:54:71:97:84:
a2:4a:3f:5f:bb:0b:fd:5f:10:de:29:6f:ab:20:3a:81:b8:88:
de:19:7c:29:2f:81:de:48:2b:cc:75:89:6f:e2:09:c0:75:21:
a1:32:f4:92:ff:30:b8:45:45:3a:43:b2:11:79:c7:c8:cc:8a:
60:46:6f:e7:6d:5d:d6:7f:9f:c1:df:c5:93:93:61:9b:bd:9d:
61:82:a9:96:1b:0b:9f:c7:a6:19:44:c7:3d:cc:4d:f1:9f:8b:
35:f9:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org