Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/fJou3aybGk1G4WYn_SH2kRr8HmI.roa
File: fJou3aybGk1G4WYn_SH2kRr8HmI.roa (raw, json)
Hash identifier: Fs5ircnYT04aZJYH4RFjLPpxkFS2Yxzwb7auVvCd+lk=
Subject key identifier: 7C:9A:2E:DD:AC:9B:1A:4D:46:E1:66:27:FD:21:F6:91:1A:FC:1E:62
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189413EF4382BE86641507625AAAF8A07CC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/fJou3aybGk1G4WYn_SH2kRr8HmI.roa
Signing time: Mon 10 Jul 2023 19:19:52 +0000
ROA not before: Mon 10 Jul 2023 19:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.15.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.12.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 08:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:41:3e:f4:38:2b:e8:66:41:50:76:25:aa:af:8a:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 10 19:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c9a2eddac9b1a4d46e16627fd21f6911afc1e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f9:3e:ec:a6:d5:55:58:ef:cc:cc:43:38:2c:
9f:b8:8a:3b:4d:ab:d3:b7:64:15:76:cb:d2:c2:1d:
b0:5e:6c:75:56:b9:c1:56:1d:67:bd:4a:27:46:51:
76:c8:3a:36:56:65:0f:0e:9b:01:08:f4:ff:d5:ae:
4a:5c:38:21:4b:6a:f4:53:02:a9:a2:61:97:25:b5:
e1:03:d9:d7:44:92:44:a7:62:53:8c:22:11:ea:90:
39:6b:23:a0:03:96:60:a3:a5:6d:4f:0e:75:99:11:
2a:4e:ba:66:4c:26:a4:01:c9:03:2a:5e:9d:5e:81:
28:84:de:38:d9:fd:ba:f0:12:ab:5f:10:8d:6a:09:
1d:58:e1:43:d0:87:6f:62:62:9b:65:cf:50:4d:26:
bb:aa:28:43:57:6d:68:19:4a:a0:73:89:a1:9b:84:
70:46:6f:61:bb:8e:db:f3:52:0d:13:e3:52:11:dd:
c2:4d:7d:8d:49:ca:33:d6:7d:f9:b3:34:85:b6:15:
90:79:3d:6e:81:03:07:f7:2e:5c:02:d3:ae:c4:6c:
76:9c:77:bb:11:b7:86:51:79:ca:0a:ca:2c:2a:07:
3c:c3:3b:b9:ad:c2:ed:4f:c5:7f:c2:ab:ea:77:fc:
69:5f:c8:c6:a8:dc:87:7f:ff:72:fc:e2:fe:39:6d:
1b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:2E:DD:AC:9B:1A:4D:46:E1:66:27:FD:21:F6:91:1A:FC:1E:62
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/fJou3aybGk1G4WYn_SH2kRr8HmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.12.0/22
46.162.20.0/24
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
16:65:b3:d9:15:63:d0:a3:cd:09:40:70:57:d6:a2:97:8b:4c:
20:bf:49:24:49:c4:45:87:ac:69:16:3d:2d:61:8d:56:9e:94:
9e:57:f1:b3:59:57:3a:17:05:ab:cc:18:4a:03:fc:57:94:46:
62:49:7d:2f:30:5b:d4:99:7b:3c:b7:52:46:98:f5:d8:9f:41:
1d:79:86:56:08:a4:4c:af:51:c9:1b:6e:66:e8:d9:57:da:0d:
b0:4e:5d:c8:5b:52:49:9f:fc:97:1d:d1:f2:fc:cd:34:42:80:
bb:13:92:fe:7c:62:dd:5d:03:f5:44:c1:23:40:b1:d6:35:c6:
17:21:08:80:5d:5f:c3:5b:ff:ae:06:9e:bb:12:90:0f:27:de:
78:e2:0e:5c:6b:30:24:dd:31:32:ec:d2:a3:36:8a:d5:bb:9d:
a5:1e:3a:18:6e:49:a4:2d:2a:2f:51:48:32:b2:e9:85:10:e4:
eb:64:c2:36:22:5c:6e:0e:5c:b1:63:d8:f5:15:bb:45:d6:62:
9d:63:43:40:65:22:68:4e:ad:5d:0c:97:16:7e:fb:6e:e8:27:
1e:05:43:63:7a:fc:26:a7:75:5c:bf:9a:59:25:57:3f:b8:82:
1c:45:12:f5:11:60:79:e8:40:10:53:37:ab:a2:db:47:98:c3:
a9:43:7c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org