Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Rh8DhbPrjwaeRhqpT6PpEGfN76g.roa
File: Rh8DhbPrjwaeRhqpT6PpEGfN76g.roa (raw, json)
Hash identifier: JMfHYNCBRckQANjFREyXiBfdPxXghSiY7Y3X7ITuTgU=
Subject key identifier: 46:1F:03:85:B3:EB:8F:06:9E:46:1A:A9:4F:A3:E9:10:67:CD:EF:A8
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A045CC93FF6C60C1DC83EC1DC3D184DD
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Rh8DhbPrjwaeRhqpT6PpEGfN76g.roa
Signing time: Thu 20 Apr 2023 20:05:41 +0000
ROA not before: Thu 20 Apr 2023 20:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.27.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 14:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:45:cc:93:ff:6c:60:c1:dc:83:ec:1d:c3:d1:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 20:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=461f0385b3eb8f069e461aa94fa3e91067cdefa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:85:c4:b0:3a:34:89:7d:ce:b2:f9:f4:19:
12:a8:be:19:eb:66:19:a7:0e:bc:52:dc:46:d6:40:
9c:d3:ba:07:b7:0b:07:22:30:2d:d8:08:25:ec:e4:
37:bc:88:aa:be:d8:b2:bb:17:27:13:b8:5a:05:f3:
48:fa:6e:c2:33:70:70:db:fd:3d:8f:87:13:ea:53:
7e:ce:de:6b:e4:fa:9e:2a:66:aa:d9:32:93:bb:ac:
fe:ef:fb:5c:4a:3d:07:89:4e:23:a9:3d:0d:13:e4:
6e:c6:69:4d:93:fc:6d:68:32:34:23:f2:d1:03:68:
70:8b:b6:97:5f:ee:37:16:f5:85:79:76:f0:a4:51:
08:85:f6:dc:31:52:b4:33:20:2b:30:3e:a0:3b:3c:
a0:1e:f3:4e:32:a6:37:c3:59:de:3b:33:4b:b3:da:
2c:38:e3:48:91:4a:d8:fb:ff:13:e1:10:9b:92:2e:
67:23:f8:57:53:ad:68:2b:7f:96:2f:12:42:29:89:
98:98:95:89:b0:20:7a:ae:b0:8e:d7:3d:bf:a9:16:
71:bd:bc:6a:01:3f:8c:2d:f1:17:93:96:8d:c0:54:
f7:64:04:aa:55:3e:64:d7:70:da:4b:d9:a0:93:87:
54:a7:1a:06:e4:57:60:dc:00:d4:5e:97:0c:db:17:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:03:85:B3:EB:8F:06:9E:46:1A:A9:4F:A3:E9:10:67:CD:EF:A8
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Rh8DhbPrjwaeRhqpT6PpEGfN76g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.27.0/24
46.162.54.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
02:cf:0b:a9:5e:b7:e7:dd:8b:78:5b:ca:f0:d7:45:2a:8e:e5:
a9:6c:7b:ba:c1:93:03:22:bf:c8:c6:ca:6c:22:71:5f:e1:fc:
29:5c:ec:bf:5a:49:93:08:20:47:d9:0b:a8:ad:eb:39:47:d4:
89:0c:fc:8b:c8:03:08:5f:15:c8:9a:29:38:01:b6:bf:97:5b:
88:6e:c3:27:36:a0:24:dc:cb:7e:ef:b6:67:12:fd:5c:d3:a3:
4f:2d:12:21:c9:e8:e1:0e:75:12:30:b4:83:c3:6f:7c:0c:e9:
63:f5:49:17:82:52:cf:d4:fb:87:eb:4f:a7:2e:ef:10:d7:bb:
f6:a9:9e:ef:10:a6:53:e1:e9:24:26:fd:0a:8d:3a:fb:aa:e6:
97:be:2a:ff:90:a9:0c:b9:4b:57:72:81:a9:79:ad:9f:58:f7:
ef:8d:e8:56:b9:ff:d5:32:82:ef:06:07:ba:f4:5b:4a:42:a7:
f7:df:25:11:ef:14:15:a5:15:9f:cc:74:ff:8c:7c:b2:40:bd:
73:f2:b7:e5:92:23:15:9e:80:85:a7:bd:31:7b:c3:bc:22:de:
35:58:5f:43:02:cc:7e:1a:79:de:db:96:df:3a:b4:9b:8a:e5:
e6:9e:84:e2:c6:2e:31:69:e5:12:f7:78:44:ce:08:d5:92:1f:
f7:a8:06:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org