Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/g0pX1Bnq7pXjrUF6OZEp0NABwvA.roa
File: g0pX1Bnq7pXjrUF6OZEp0NABwvA.roa (raw, json)
Hash identifier: bLkCtHGTYPGatagllfCz7JCov0ljgqlHBV/cyzomaV4=
Subject key identifier: 83:4A:57:D4:19:EA:EE:95:E3:AD:41:7A:39:91:29:D0:D0:01:C2:F0
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018917FDD51A08CF19C5F49CA32CD29A5175
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/g0pX1Bnq7pXjrUF6OZEp0NABwvA.roa
Signing time: Sun 02 Jul 2023 19:04:18 +0000
ROA not before: Sun 02 Jul 2023 19:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.17.0/24 maxlen: 24
46.162.16.0/24 maxlen: 24
46.162.19.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
46.162.37.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
46.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:fd:d5:1a:08:cf:19:c5:f4:9c:a3:2c:d2:9a:51:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 2 19:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834a57d419eaee95e3ad417a399129d0d001c2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:af:a7:10:93:96:80:7c:4e:97:a3:e2:ca:d6:
16:f4:26:00:80:e4:6f:d6:27:a1:b4:e0:6e:6b:cd:
73:9d:c0:e7:73:f6:52:8a:46:a7:53:6a:c7:23:f2:
76:bb:e8:b6:48:4b:9a:ce:b2:d2:2e:35:b9:2b:a3:
48:74:52:41:a8:57:4e:41:d4:3c:98:93:ec:95:0a:
94:4b:c7:9e:4e:0b:43:f8:da:67:c1:af:19:9d:d8:
ea:9e:ec:06:e5:96:a3:8b:d2:99:ce:29:6a:ad:3e:
e2:e5:3c:13:6d:3f:18:3a:8c:60:d8:47:98:a3:42:
85:8f:1f:ea:9e:67:b3:2e:ee:5f:1c:03:a8:0d:d5:
bf:f2:22:56:c4:b8:d5:dd:02:48:43:b0:38:5a:57:
66:e0:02:59:58:bf:23:a2:78:01:c6:a2:41:ec:a1:
a4:35:c0:ba:8a:4f:f0:fe:79:a2:26:3a:ef:15:da:
8b:7b:fe:6f:e3:95:95:ec:c6:a8:27:ae:a7:6f:93:
0d:3c:a9:1b:15:2f:d5:18:12:d0:f9:7c:67:1d:30:
0d:47:52:18:07:42:53:02:e2:f8:32:28:d1:89:73:
0d:a7:2e:f3:b2:d5:39:52:c1:ef:b6:2d:77:fe:1e:
df:32:5c:66:31:7c:f8:70:43:17:ac:ce:d9:39:c7:
eb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4A:57:D4:19:EA:EE:95:E3:AD:41:7A:39:91:29:D0:D0:01:C2:F0
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/g0pX1Bnq7pXjrUF6OZEp0NABwvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.16.0/23
46.162.19.0/24
46.162.28.0/24
46.162.30.0/24
46.162.37.0/24
46.162.62.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b8:99:a7:f0:98:16:55:c7:30:83:d4:75:ff:b1:ce:5d:85:
f5:4e:3b:4c:c7:2b:37:81:03:01:c2:6b:1d:27:8c:c2:4a:28:
75:8b:51:11:0a:95:07:33:78:85:27:e3:51:a1:b2:98:51:f4:
b1:2f:a2:d7:88:57:be:52:0d:5b:7f:74:fc:b5:3d:94:28:56:
80:c0:65:59:de:59:54:60:71:53:28:b0:a8:25:b7:4e:96:bd:
70:96:53:36:b3:4a:cf:f9:26:8d:09:b2:51:90:d2:1f:2d:78:
9d:bd:9b:4c:7b:d4:ee:fc:45:bb:7e:5b:f2:78:b6:5c:88:04:
de:ab:39:52:fc:c6:dd:e1:67:a1:8f:fb:80:85:c2:88:ba:08:
4b:f9:f4:42:a8:1b:8b:03:5d:9c:c7:c2:6c:56:6c:da:24:8f:
a4:97:ef:a4:10:03:4e:2b:06:f6:14:c1:ff:8d:f8:d0:d6:0a:
a7:a4:81:12:50:c8:1a:f0:dd:4d:dc:c8:0b:5d:b7:2b:fd:0d:
b2:b9:d9:de:ad:5b:6b:05:84:7f:c6:13:6a:21:64:38:62:60:
85:e0:9d:10:1d:c7:91:82:23:0e:5d:65:f6:e8:13:8b:92:ca:
c1:b5:52:29:b7:4c:e7:fa:ad:22:c9:2b:ee:a4:28:58:ab:fa:
39:1d:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org