Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T8SbpIHv0BHRM3GonwzDkO2k2Vo.roa
File: T8SbpIHv0BHRM3GonwzDkO2k2Vo.roa (raw, json)
Hash identifier: eJS+Mnk2TxuSGuXtoL3gwDw7iX8fL60noEV3DYuShSA=
Subject key identifier: 4F:C4:9B:A4:81:EF:D0:11:D1:33:71:A8:9F:0C:C3:90:ED:A4:D9:5A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A045CCE8A4D2CE8A3CD7C531AD6FF374
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T8SbpIHv0BHRM3GonwzDkO2k2Vo.roa
Signing time: Thu 20 Apr 2023 20:05:41 +0000
ROA not before: Thu 20 Apr 2023 20:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.162.48.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 07:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:45:cc:e8:a4:d2:ce:8a:3c:d7:c5:31:ad:6f:f3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 20:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fc49ba481efd011d13371a89f0cc390eda4d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:69:ec:ea:4b:0a:a1:b0:7a:98:5f:99:0a:
73:5a:a7:1b:15:7a:14:83:19:d9:b7:35:df:8e:6c:
61:3a:cf:c0:97:6d:30:72:3e:72:cd:c8:b2:7f:2e:
d3:e1:7b:c4:c9:22:f8:63:da:b3:d9:97:f8:9c:0c:
25:a6:37:1d:fe:ea:43:0f:60:7d:89:6a:b1:7c:2e:
9f:ef:21:01:5e:88:f3:c1:65:79:81:f2:e1:ed:6b:
f7:11:a0:f6:27:9b:b5:1f:c6:38:7f:70:32:42:03:
47:ea:cd:d0:6a:47:8a:1e:e2:c9:8b:fc:80:f0:65:
9f:89:fd:0c:a4:4a:4a:c8:6a:62:8c:16:26:9d:c6:
5f:89:95:cb:4d:71:fb:2f:1c:a3:57:e1:a0:72:98:
8d:5b:f1:3c:4f:d9:1a:97:2a:db:b9:f1:42:08:d2:
23:0e:e5:81:b0:aa:3a:57:f6:71:e5:bf:77:4f:4a:
6d:f2:82:c3:9f:2d:6c:7f:24:6b:6f:5e:89:6a:2b:
45:34:01:bc:52:bd:b2:1a:c7:ac:67:64:f8:91:e5:
12:49:75:17:64:4e:41:fe:50:f6:68:e5:ba:51:63:
f3:53:08:8c:28:f0:01:fe:c3:2d:59:8d:a9:fe:c4:
60:11:f8:d7:62:9f:25:91:50:d2:a1:19:84:98:63:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C4:9B:A4:81:EF:D0:11:D1:33:71:A8:9F:0C:C3:90:ED:A4:D9:5A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/T8SbpIHv0BHRM3GonwzDkO2k2Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.48.0/24
46.162.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:76:2c:45:6d:19:61:7d:04:69:ae:84:05:f8:c6:c3:7b:30:
bb:87:c6:ac:cd:f1:b9:26:00:6c:26:30:6c:02:0f:cb:d2:2a:
70:f5:a6:75:83:df:16:93:07:46:05:c9:71:60:b4:37:59:c1:
f0:49:85:6a:0d:c4:ec:7f:3e:a9:4a:63:19:dd:5c:14:bf:29:
b7:7b:91:68:30:c3:f7:08:c2:a1:46:dc:4d:14:40:47:49:ee:
43:69:21:75:4f:b1:37:d3:95:97:ee:13:7e:c3:a9:96:b8:77:
92:e7:7c:a7:28:21:b0:40:2b:9e:2e:6c:7d:21:cb:9d:49:02:
04:5b:fc:25:25:20:82:41:c3:7b:bb:65:d1:80:64:c5:a9:07:
e5:3e:dc:52:22:41:6d:82:ef:d0:0d:cf:58:af:34:e5:e9:12:
2b:14:0d:f3:75:e0:e1:0f:f4:d4:eb:5e:52:e0:c9:94:54:e4:
de:ab:18:d1:87:19:28:1a:f9:fe:8c:2b:aa:10:80:e6:7d:25:
73:4e:85:08:81:57:82:ca:a0:d4:db:9b:36:f8:b2:6e:7b:22:
23:18:34:b3:e0:89:fe:a2:16:9e:4c:c9:33:92:cd:37:ee:f6:
ec:5a:d5:91:1e:2b:d0:81:5c:3e:f8:e5:74:14:4e:a2:c0:5e:
e0:65:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org