Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VlrvnUvYzAJehlveZ6LcfbRPNIY.roa
File: VlrvnUvYzAJehlveZ6LcfbRPNIY.roa (raw, json)
Hash identifier: p5y4VFpIXBiwUQMghWCcmWuXVi3XV8LX66NtIf8y3MU=
Subject key identifier: 56:5A:EF:9D:4B:D8:CC:02:5E:86:5B:DE:67:A2:DC:7D:B4:4F:34:86
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018795AFD6717A336EA1EED72E70DF212F44
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VlrvnUvYzAJehlveZ6LcfbRPNIY.roa
Signing time: Tue 18 Apr 2023 18:45:41 +0000
ROA not before: Tue 18 Apr 2023 18:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.27.0/24 maxlen: 24
46.162.25.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.58.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 06:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:af:d6:71:7a:33:6e:a1:ee:d7:2e:70:df:21:2f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 18 18:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=565aef9d4bd8cc025e865bde67a2dc7db44f3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:cc:08:c0:d1:86:0d:47:d1:1f:74:b8:af:
62:3c:77:8d:66:13:db:1e:cb:15:4a:b0:c7:80:42:
f7:f1:29:16:23:57:04:9b:0a:06:0b:1e:6b:cf:5c:
85:92:51:a8:2f:1d:30:ea:e3:6c:87:fa:a2:32:c1:
97:a8:86:eb:c5:f1:16:b9:bb:a0:6c:9c:48:8f:44:
0d:e0:f9:8c:f4:37:52:bb:6c:76:17:a9:4b:8e:ab:
bc:ca:a0:6e:0e:60:51:f2:7f:e2:94:a1:7a:8f:d3:
d0:bb:1d:b5:25:86:9f:a1:39:ca:9b:70:b9:e8:d8:
f7:a4:ed:48:68:cf:5c:7e:82:03:40:0c:8a:7d:7f:
a4:29:e4:0a:df:cc:45:fb:f7:92:9d:11:08:c4:58:
08:1b:3d:61:71:6f:83:d5:89:b6:22:96:80:10:6d:
50:10:86:56:47:4f:de:94:d1:07:b5:f6:80:6b:2b:
ff:04:ac:46:b5:61:90:61:44:d3:ae:7f:83:61:27:
c1:7f:d5:89:05:13:12:6b:df:8d:4a:f2:a1:d1:7a:
9e:2b:de:67:c7:12:16:74:cf:56:4a:5f:54:62:c6:
be:96:17:8d:95:d1:32:c6:b2:f2:09:05:56:16:3e:
3c:3a:bf:02:a2:1f:2d:df:f2:8c:dc:e2:d2:a1:26:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:EF:9D:4B:D8:CC:02:5E:86:5B:DE:67:A2:DC:7D:B4:4F:34:86
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/VlrvnUvYzAJehlveZ6LcfbRPNIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.25.0/24
46.162.27.0/24
46.162.48.0/24
46.162.50.0/24
46.162.54.0/24
46.162.58.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:46:61:96:90:81:b9:7e:d8:9c:09:c5:20:0a:cb:62:06:83:
12:aa:94:d3:72:fb:15:4b:e2:bb:ed:32:17:07:3c:58:90:76:
c5:22:a7:cb:9b:42:09:c6:37:1a:1f:3a:3d:88:97:05:05:88:
8f:9d:09:9d:45:54:af:2a:b1:87:9d:c1:88:24:97:51:8b:d9:
57:d6:a2:0a:06:17:e7:ce:21:29:e3:9f:7f:3c:80:c3:d6:59:
cb:1f:51:cb:a8:f7:64:7c:66:36:e7:66:c4:e8:ed:fe:25:7f:
21:d1:88:63:f6:70:f5:7c:d6:c6:06:fb:ae:d6:89:ce:03:6e:
36:a4:db:65:65:9b:42:25:dd:7f:2f:85:a5:5f:2e:59:12:69:
a5:9d:ad:2e:cf:ff:9c:ed:20:f3:43:5d:7d:af:bf:72:12:de:
61:63:5b:e8:26:44:79:61:64:96:e3:1b:00:30:cf:0b:9b:5a:
18:0e:36:54:e7:f6:2b:5f:ee:7b:f8:c8:f4:ca:d3:72:9e:5c:
e1:14:12:94:72:85:b4:37:64:e5:2c:c9:b0:1c:21:7c:f8:18:
fe:67:85:c0:56:c4:1a:fa:03:df:f5:ec:e8:ba:8d:35:51:cd:
c8:9a:2f:db:d1:6f:8a:4f:e1:3d:23:57:41:34:87:2f:2d:98:
d1:9a:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org