Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T2h150L-0z-Y7JyELrwb0Kl77zQ.roa
File: T2h150L-0z-Y7JyELrwb0Kl77zQ.roa (raw, json)
Hash identifier: dPpbLF7PAmU0EuRntc390aAtbXx3vk8cnxMCHQGWe3w=
Subject key identifier: 4F:68:75:E7:42:FE:D3:3F:98:EC:9C:84:2E:BC:1B:D0:A9:7B:EF:34
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018998575B1CE4D8A0455206BE474326EC24
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T2h150L-0z-Y7JyELrwb0Kl77zQ.roa
Signing time: Thu 27 Jul 2023 17:13:28 +0000
ROA not before: Thu 27 Jul 2023 17:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 46.162.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 06:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:57:5b:1c:e4:d8:a0:45:52:06:be:47:43:26:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 27 17:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f6875e742fed33f98ec9c842ebc1bd0a97bef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:52:4e:05:b5:ee:09:01:af:c4:97:5a:05:fb:
5a:3a:fd:ee:36:e1:a0:cd:05:77:1e:88:bf:31:3e:
60:db:d1:65:25:e1:98:69:f6:16:47:31:2a:e4:73:
59:b1:db:2f:53:d3:d8:40:d4:3c:a6:2c:12:76:d6:
f0:02:43:19:65:49:c8:b0:3b:2c:11:bb:ac:35:b4:
6c:63:b8:c5:bb:43:bc:7f:77:e5:31:e2:5b:0c:72:
ec:7e:e7:0c:d3:14:2d:7b:63:16:1b:53:30:e7:94:
a3:50:a4:7c:85:6b:20:40:d1:ce:60:5c:6a:2e:e3:
15:e6:b9:81:56:db:1c:ee:e1:4d:f9:73:fc:cf:a0:
30:ad:0c:7f:9d:3b:64:c5:3d:9a:27:3d:7c:2b:d2:
5a:48:1e:e2:cc:29:d6:6e:8f:f3:33:58:34:45:09:
45:d0:f7:7f:04:b7:af:b4:d8:0b:e5:d6:ed:a0:7f:
fa:02:77:ce:dd:4b:0e:20:bf:12:4a:cc:d4:2a:f6:
26:f4:f7:b3:05:ff:3d:2e:f8:1e:50:b8:fe:69:aa:
5a:06:87:89:85:0c:04:e1:23:7b:dc:af:b0:da:95:
26:fe:20:24:c3:9a:64:4b:51:8d:c0:1e:f2:10:dd:
ec:b5:dd:0d:3a:f3:13:64:08:b4:bd:e0:f8:71:f6:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:68:75:E7:42:FE:D3:3F:98:EC:9C:84:2E:BC:1B:D0:A9:7B:EF:34
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T2h150L-0z-Y7JyELrwb0Kl77zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6e:2f:e6:89:f9:28:fe:f9:95:7a:31:82:e9:73:a9:a7:c3:
d1:60:5f:48:d5:de:eb:a7:0b:10:ff:3a:e4:90:71:ac:55:31:
a1:0f:79:e2:f4:a7:9c:95:15:20:4e:09:25:7b:3a:fe:d0:65:
51:45:0a:b7:5d:a9:4c:86:ec:48:45:8c:4c:3b:8a:50:78:8c:
12:d4:cd:43:98:b0:41:81:92:49:a0:54:21:90:6d:b5:b7:0e:
8d:fd:12:8a:cd:1e:24:22:df:b6:35:6e:60:0a:77:45:a1:04:
6d:6e:b0:62:98:7b:50:78:0f:a8:b7:60:e3:27:3d:13:b9:e0:
8a:34:4a:d2:b5:9e:33:93:59:1d:65:e2:16:1a:17:89:df:11:
f6:21:88:46:1f:58:02:4f:d5:33:40:94:32:bb:80:b6:7e:4d:
8c:2b:4b:6b:57:e3:d3:c3:fe:3b:47:ef:4c:3c:e8:e4:6d:44:
10:db:b5:a2:2d:15:75:22:a9:56:66:6c:7e:a9:17:24:6f:ea:
b3:70:bc:09:7a:f7:c7:6e:84:53:b1:e2:77:83:29:7d:ea:8e:
74:51:9b:46:d6:89:39:ee:5a:fa:8f:fa:4f:36:ff:9a:b9:22:
21:b8:d9:80:5c:85:de:2e:c1:01:15:a2:ec:bf:af:9f:1c:0d:
42:16:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org