Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/c-aVrqKCezlFRo3qAWphdRMvWOI.roa
File: c-aVrqKCezlFRo3qAWphdRMvWOI.roa (raw, json)
Hash identifier: aWCHo6kUfqeHYJKxc2qhKhhl1OEyU8J9NSQMn74M1tw=
Subject key identifier: 73:E6:95:AE:A2:82:7B:39:45:46:8D:EA:01:6A:61:75:13:2F:58:E2
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01860D8DF59808FEF4756CB28AF43451C2EF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/c-aVrqKCezlFRo3qAWphdRMvWOI.roa
Signing time: Wed 01 Feb 2023 15:17:32 +0000
ROA not before: Wed 01 Feb 2023 15:17:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/19 maxlen: 19
46.162.0.0/18 maxlen: 18
193.111.156.0/22 maxlen: 22
46.162.32.0/21 maxlen: 21
46.162.40.0/21 maxlen: 21
46.162.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 01 Feb 2023 16:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:8d:f5:98:08:fe:f4:75:6c:b2:8a:f4:34:51:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 1 15:17:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73e695aea2827b3945468dea016a6175132f58e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:74:53:1a:1f:62:b0:5d:6b:d5:0a:c3:9e:
da:8e:11:14:0a:bb:5f:4c:81:7d:81:85:27:c2:b1:
2b:9a:48:b1:60:5a:85:f3:80:ba:6b:13:96:ad:fd:
39:70:1f:b7:37:e1:0b:63:bc:44:14:e5:f8:50:eb:
63:3e:71:24:d9:65:08:5b:f7:0c:a8:52:44:37:2f:
12:e6:51:1e:7c:b3:7d:e7:7e:9b:1e:82:20:c1:a4:
26:d7:c9:f6:df:69:14:e2:0c:7d:4d:91:7f:05:d1:
ff:a8:0b:54:23:27:f7:a9:da:1b:0f:17:a9:63:63:
41:b0:c0:5b:2b:9a:7e:17:a1:9b:08:79:bd:0a:ff:
a7:3e:6b:20:b6:5e:6f:e4:78:bd:bc:41:8f:e7:fa:
0b:d5:eb:4b:53:71:e9:e1:fe:b9:75:b6:b7:34:ba:
7e:1f:7b:75:df:50:c3:0c:70:1b:f1:aa:15:0a:b9:
18:a1:33:08:ae:9b:ca:6d:e2:79:c5:8e:9d:9f:55:
63:08:2a:32:24:fa:e3:ff:5b:21:a1:13:62:90:5b:
73:0f:2a:97:66:15:68:b8:67:be:1a:ad:c2:55:48:
84:5c:5a:61:e5:65:07:5d:fd:1a:40:b7:f9:fe:f4:
1f:7f:f0:72:7e:07:0f:2f:33:76:38:26:cf:80:a5:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E6:95:AE:A2:82:7B:39:45:46:8D:EA:01:6A:61:75:13:2F:58:E2
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/c-aVrqKCezlFRo3qAWphdRMvWOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:0b:c4:06:9a:0b:5b:e1:f1:2f:1d:d9:79:ec:ef:e1:fa:26:
55:92:7a:4c:12:0c:1b:0d:8b:bf:8b:ce:ce:11:11:82:85:dc:
50:be:df:00:b9:41:41:ba:ce:87:3f:83:bd:4f:78:f4:8e:d9:
86:83:b2:61:3b:b0:69:39:8f:43:50:17:d7:d9:e9:ed:4f:34:
28:c3:96:d4:c8:da:27:11:6c:e3:93:1e:17:8a:0e:25:6c:ea:
1d:bd:9d:7f:a6:c6:38:ca:05:dd:9a:ff:54:33:9a:ec:ba:6f:
60:9d:57:21:3c:3b:1d:93:df:4f:83:28:f7:eb:67:b5:6d:93:
0f:51:74:1e:39:ab:44:31:10:58:46:e9:4e:70:61:18:c3:0b:
37:bc:dc:3c:58:15:20:e8:2e:a7:46:78:c8:a9:81:33:c9:5d:
a4:dd:5b:a1:eb:62:71:45:bf:f8:63:3b:87:42:d3:7e:62:41:
9f:e8:2c:a3:14:43:fb:89:ed:87:1d:13:64:70:5a:51:91:cb:
fd:ae:fd:fd:4d:d5:ed:f1:0d:d8:1f:1f:49:61:96:09:f9:84:
2e:2c:4c:59:49:ce:03:5d:4b:9d:13:b9:56:dc:3d:b8:ea:a8:
55:6a:c2:fc:5b:94:51:7b:58:d6:73:99:2e:91:f0:18:f0:ea:
a7:83:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org