Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/WJv0_NAEIZpWsNxXqaK5J7oc4LA.roa
File: WJv0_NAEIZpWsNxXqaK5J7oc4LA.roa (raw, json)
Hash identifier: mTLCFzo+LlVUKYQT6/OaTqKrr65Vv/UwMi0AFbKCprE=
Subject key identifier: 58:9B:F4:FC:D0:04:21:9A:56:B0:DC:57:A9:A2:B9:27:BA:1C:E0:B0
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187E360E0F5F5206F9F83F3DA0994AA482D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/WJv0_NAEIZpWsNxXqaK5J7oc4LA.roa
Signing time: Wed 03 May 2023 20:49:49 +0000
ROA not before: Wed 03 May 2023 20:49:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.12.0/22 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e3:60:e0:f5:f5:20:6f:9f:83:f3:da:09:94:aa:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 3 20:49:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589bf4fcd004219a56b0dc57a9a2b927ba1ce0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:8c:10:94:ad:e7:8d:09:43:78:64:21:80:
ea:8b:8d:6d:90:99:b3:6f:b0:2a:10:41:b6:17:64:
78:c1:0d:48:96:7a:98:15:5b:39:c3:59:d4:0f:c9:
84:57:0f:05:18:f1:a4:f0:2a:cf:48:db:3b:a0:02:
a4:c7:48:56:64:9a:d2:ce:0c:49:46:ff:43:eb:ff:
a1:a6:a7:85:2d:09:25:16:c0:73:9e:0f:ea:2d:e4:
b6:0e:72:a7:b9:bc:af:73:a5:26:50:89:22:ce:12:
fb:28:8f:78:ed:9f:3b:88:49:fa:1d:0b:47:8a:12:
20:ae:9a:61:5e:8f:fa:a4:ed:5d:01:fa:fe:3a:fc:
f5:02:b5:da:4e:a4:53:47:36:fc:7b:0f:4a:86:aa:
29:5e:e5:ae:64:92:70:b3:eb:bf:10:fc:86:e8:05:
eb:fd:3a:93:7e:8e:d8:59:ca:76:70:55:ac:eb:9c:
38:c2:67:f2:f3:02:86:96:d3:4b:39:2e:11:35:85:
f2:9e:17:10:51:7b:27:72:6a:04:13:1c:b6:7a:55:
0d:e9:01:28:f7:ed:fa:93:9c:33:16:10:43:1d:36:
09:76:59:75:77:52:2a:93:af:80:76:88:45:8a:ac:
83:c6:1d:29:5b:41:42:67:f7:84:29:78:a0:a5:8c:
fa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:F4:FC:D0:04:21:9A:56:B0:DC:57:A9:A2:B9:27:BA:1C:E0:B0
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/WJv0_NAEIZpWsNxXqaK5J7oc4LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.12.0/22
46.162.26.0/24
46.162.28.0/24
46.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:92:6e:0f:61:c9:fe:67:7d:bc:02:25:c6:bb:fd:d0:4a:11:
18:b4:d5:8d:e3:17:b9:cb:9c:db:ea:78:21:7f:11:b2:f2:1e:
79:3d:ae:23:72:8d:5a:09:06:e2:5e:bb:44:ca:74:03:b3:ff:
8f:fb:6f:6a:f1:e1:e8:13:37:ff:3d:18:c0:4d:14:70:99:c1:
25:80:61:60:9e:e8:63:75:30:cf:e7:b4:53:29:a8:de:7d:e7:
0e:d4:e9:47:83:98:81:95:8b:3f:6a:f7:eb:56:6f:9c:7d:db:
6f:57:07:26:3c:94:ef:30:ff:0f:85:53:55:0f:34:a0:a9:8a:
f6:17:ef:f3:20:b0:86:0e:d9:6c:29:d4:9d:95:fa:25:3c:7b:
0f:2e:83:b5:ce:61:c7:ec:aa:93:1d:31:74:da:62:f9:97:1d:
a5:a7:05:c8:bf:02:77:48:20:c9:7e:c4:d9:1e:ce:ca:67:26:
06:e2:25:2f:06:2a:8a:34:b6:06:a7:3c:34:eb:e2:af:32:d6:
fc:7e:fc:30:f5:86:a6:bc:6d:20:a4:9f:7c:ad:13:b6:e2:b7:
0c:b0:3b:b4:38:56:3c:a6:49:84:40:85:44:44:94:5b:20:6e:
91:ed:a4:52:ed:da:05:b9:22:6d:33:65:f9:fa:be:1f:ed:c4:
63:74:42:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org