Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/cckCq2_CWJrP_DlP4p2R2HYC2wM.roa
File: cckCq2_CWJrP_DlP4p2R2HYC2wM.roa (raw, json)
Hash identifier: E+YZOD9sXlzmWPuP5OmbMwnl5/XIKjPKGbyV7SzdEzc=
Subject key identifier: 71:C9:02:AB:6F:C2:58:9A:CF:FC:39:4F:E2:9D:91:D8:76:02:DB:03
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189D3C34E9FB0FE60A51C9B8BBA9B3A17CF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/cckCq2_CWJrP_DlP4p2R2HYC2wM.roa
Signing time: Tue 08 Aug 2023 06:08:59 +0000
ROA not before: Tue 08 Aug 2023 06:08:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d3:c3:4e:9f:b0:fe:60:a5:1c:9b:8b:ba:9b:3a:17:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 8 06:08:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c902ab6fc2589acffc394fe29d91d87602db03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:76:15:82:3f:2d:9f:62:19:ad:09:2a:fb:
06:d9:b7:06:c0:92:10:04:bd:8f:f2:5c:20:16:1e:
90:78:95:a0:07:36:09:6a:39:98:6d:b8:97:37:2e:
f0:d2:3b:f1:b0:1e:d3:3c:1c:12:6b:b0:6c:2f:9d:
fd:09:85:8d:c4:13:81:8c:be:58:4a:e4:62:f0:b1:
89:70:0d:75:cf:63:56:1c:63:23:36:85:49:91:65:
ad:fb:da:41:8c:4a:5e:c9:14:da:6c:60:0c:e9:ff:
54:03:6c:5c:fa:78:a4:be:5a:77:fa:9a:23:63:58:
b2:e1:2c:c2:a0:f4:aa:e8:56:b2:df:45:5c:f5:ed:
df:fd:03:05:fc:b3:d1:6b:cb:b9:5f:62:d0:9f:5c:
36:22:dc:00:86:20:eb:b6:1f:a3:57:7d:d0:8c:d6:
99:14:60:36:20:ff:be:d9:6a:c7:48:bd:85:f0:89:
af:3e:42:8a:a7:2c:c6:64:81:d1:25:62:5b:c1:bf:
68:ed:e2:af:54:a5:f9:fa:f6:c7:6c:d4:bd:be:f8:
e3:a2:5c:c6:ea:63:7f:d7:fe:da:aa:d8:91:02:79:
52:fc:32:20:f0:4e:d6:82:92:d7:d5:3b:79:00:d0:
9d:db:eb:bb:c2:a8:17:41:10:8b:a2:d2:0a:c8:a7:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C9:02:AB:6F:C2:58:9A:CF:FC:39:4F:E2:9D:91:D8:76:02:DB:03
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/cckCq2_CWJrP_DlP4p2R2HYC2wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.9.0/24
Signature Algorithm: sha256WithRSAEncryption
11:35:88:31:25:db:a9:7e:38:f2:93:59:5f:a0:6a:53:d5:f1:
21:f4:bc:dc:ca:97:ab:c7:b9:a3:19:53:b6:d6:fc:3a:53:f9:
4f:19:4b:e7:61:59:e6:8b:f8:0f:f0:6a:40:ae:13:63:e4:ea:
1c:ae:55:0c:4d:9a:33:01:9f:51:60:e2:fd:3a:8b:d4:01:9d:
e4:e6:44:53:fd:69:d9:2c:99:5f:62:f3:75:de:10:5d:b5:29:
7b:5e:e7:22:4d:cb:f5:4e:e0:34:94:3f:fd:fd:d1:5a:c0:67:
ca:6c:8d:ac:6a:d5:49:8e:5a:4a:16:01:08:60:5e:ee:09:ac:
7f:db:09:7b:76:f2:15:e3:a2:b6:37:4a:5b:42:f4:a2:ca:d9:
d1:81:f0:fe:f2:6c:26:87:c8:03:29:41:5b:91:a8:c8:70:67:
26:1d:57:f7:66:94:f3:c0:f1:c8:e3:b5:18:42:e1:30:37:4c:
93:a9:42:18:dd:cb:5f:dd:08:66:34:4a:54:d1:bf:18:57:e4:
16:bd:eb:49:0f:28:27:07:cd:81:bf:d2:7e:50:5d:e8:94:1f:
9d:2c:c3:fb:fc:68:6f:4f:bc:4e:e9:15:27:5d:98:26:a6:60:
04:a6:f6:5d:25:0d:77:ef:fe:99:0a:9b:aa:69:b3:83:bf:6c:
5d:b5:ce:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 22:05:51 2023 by rpki-client on console-fra.rpki-client.org