Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/_fN8PmnK14tB7nzPfQ3TZlHvJz0.roa
File: _fN8PmnK14tB7nzPfQ3TZlHvJz0.roa (raw, json)
Hash identifier: xPkmyPXxvfko+D+joQcM5JSDmiAbQ1xdx+08Egf2aNc=
Subject key identifier: FD:F3:7C:3E:69:CA:D7:8B:41:EE:7C:CF:7D:0D:D3:66:51:EF:27:3D
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189A2630BF47A0B624CB7605E01BA3F14B6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/_fN8PmnK14tB7nzPfQ3TZlHvJz0.roa
Signing time: Sat 29 Jul 2023 16:02:27 +0000
ROA not before: Sat 29 Jul 2023 16:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.0.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 09:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a2:63:0b:f4:7a:0b:62:4c:b7:60:5e:01:ba:3f:14:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 29 16:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdf37c3e69cad78b41ee7ccf7d0dd36651ef273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:74:a7:0c:0f:8b:f1:c6:3c:68:f3:2a:67:
a8:2c:31:40:e3:fc:8c:af:0b:97:0b:1d:a5:1b:2f:
8b:6f:5b:4b:dc:e3:9c:5b:2a:da:fb:31:f2:06:63:
47:f5:23:ce:f7:da:2c:54:e6:fc:8c:80:a4:68:df:
09:96:a3:1f:8d:95:70:7e:f4:7f:c5:6c:0a:33:d8:
29:af:d4:2f:43:0c:53:f4:58:b3:5b:7e:9a:1d:8c:
76:76:0b:05:16:bf:84:f7:7b:2c:3b:17:be:5c:91:
b7:7e:b8:3b:51:c5:6c:0b:3a:8d:ed:52:84:b5:c8:
58:f3:91:95:91:3a:07:45:e1:dc:27:37:fc:1a:ee:
3c:1c:e5:b1:e1:e9:25:09:62:08:55:04:83:5c:dd:
bf:78:c4:cd:3e:55:aa:e5:13:53:c7:aa:d4:39:b8:
0e:a4:53:cb:bc:89:a4:f4:fd:21:c4:da:5b:db:4f:
96:1a:57:ce:fa:cb:76:89:22:ba:66:0b:42:1d:e1:
0a:c8:98:4a:05:fd:f7:c2:22:4a:f4:95:8d:d7:ad:
06:83:c7:84:82:17:e7:26:f9:d2:73:7d:d7:7c:18:
63:2e:43:43:41:c4:d9:04:aa:eb:e4:e8:fa:75:80:
07:b5:73:26:46:05:dc:2c:0b:57:7a:0e:82:8d:dc:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F3:7C:3E:69:CA:D7:8B:41:EE:7C:CF:7D:0D:D3:66:51:EF:27:3D
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/_fN8PmnK14tB7nzPfQ3TZlHvJz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.10.0/23
46.162.23.0/24
46.162.26.0/24
46.162.48.0/24
46.162.50.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
50:4a:30:d6:b6:c1:87:79:4d:2d:fc:ae:4a:36:e6:58:50:1c:
3c:9f:ed:ef:53:3a:04:d6:82:78:1d:b6:ad:ce:b3:bc:4c:4d:
51:2e:dc:35:5f:92:a6:c3:6a:95:b9:8d:6a:30:3f:1e:1e:0a:
9a:71:32:3c:3a:48:b0:e6:c5:9d:65:a7:01:77:3a:09:cf:a4:
17:a3:65:ff:cb:36:eb:d4:dd:37:05:04:9b:94:b5:8d:79:5e:
bd:b5:cc:94:bc:fb:18:ac:98:64:df:aa:99:17:2c:58:ad:10:
10:f1:8b:0b:35:d2:7f:2b:61:57:7f:60:01:f7:bc:94:4b:21:
63:36:53:ed:fb:75:9a:a0:75:1a:00:23:69:16:48:6a:65:63:
4b:46:a6:61:01:ba:06:0c:bc:2f:28:b6:2c:99:6d:e1:dd:cb:
cb:52:a5:88:93:50:1e:2b:3b:14:5b:2a:2e:3d:c7:9a:25:fb:
88:25:c5:d2:1b:ab:6e:53:8f:f0:ab:6d:0a:58:58:a8:4a:2e:
9a:eb:a1:b5:f1:e7:bb:9a:03:b9:da:8a:47:3c:01:8c:de:64:
0f:b4:fb:c8:1f:00:2d:68:6a:f0:9b:ce:74:a5:88:c5:17:82:
fc:ba:f8:65:0f:c7:9d:42:bc:81:30:12:c2:52:da:af:e6:77:
62:53:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org