Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gmI2nNzAH_lmde64_y9pTWf69Is.roa
File: gmI2nNzAH_lmde64_y9pTWf69Is.roa (raw, json)
Hash identifier: 7WaLhmdroqKXWNTjZh44OhdlafKHRIwt2eXbxD5jSAU=
Subject key identifier: 82:62:36:9C:DC:C0:1F:F9:66:75:EE:B8:FF:2F:69:4D:67:FA:F4:8B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01889300F1CA6AFD236E76C89536BDAF341B
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gmI2nNzAH_lmde64_y9pTWf69Is.roa
Signing time: Tue 06 Jun 2023 23:18:12 +0000
ROA not before: Tue 06 Jun 2023 23:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.16.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
46.162.37.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 16:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:93:00:f1:ca:6a:fd:23:6e:76:c8:95:36:bd:af:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 6 23:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8262369cdcc01ff96675eeb8ff2f694d67faf48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:42:1e:d6:41:e8:25:06:bb:79:d8:25:2b:0e:
ea:5b:03:18:99:35:c9:09:60:5f:a9:26:56:85:83:
e6:c0:1d:fb:45:a7:1a:c2:60:ee:f6:a5:6d:38:ee:
86:a7:f2:08:09:c9:1d:7b:75:dc:09:f2:5d:34:17:
7e:a5:af:39:fe:43:7a:1a:92:e5:1c:23:88:68:f1:
a9:31:7c:7e:54:eb:da:9a:ad:54:7e:47:13:d0:20:
8c:ab:77:22:da:75:76:31:e2:53:81:34:f8:5c:35:
53:b5:b7:8c:69:17:a0:fd:a6:a4:d8:fb:6a:bd:87:
1e:45:b6:b2:be:7a:d9:d3:21:b2:92:73:96:fa:7a:
a8:3a:e8:d0:55:69:48:5a:83:a2:ef:fd:76:4c:dc:
51:07:68:3e:9a:b1:9b:74:c3:bf:c1:84:7b:7c:b1:
43:83:34:c0:e5:ea:ad:a9:73:03:51:5f:da:3b:72:
a6:84:ed:3c:99:de:47:58:a6:f6:7c:d4:6c:93:1e:
80:59:e4:45:82:a4:b2:35:f7:db:63:d3:1f:4f:da:
ea:63:7f:0d:b1:16:5e:bd:ef:e8:10:32:a0:34:76:
fb:19:c3:7f:77:2d:6c:85:cd:fc:7a:87:5a:20:a2:
66:26:5f:cd:e9:e6:87:cb:60:58:20:45:2d:3a:1f:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:62:36:9C:DC:C0:1F:F9:66:75:EE:B8:FF:2F:69:4D:67:FA:F4:8B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/gmI2nNzAH_lmde64_y9pTWf69Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.16.0/24
46.162.28.0/24
46.162.30.0/24
46.162.37.0/24
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4d:7d:fe:be:2c:66:29:cc:85:fe:07:ca:09:a2:c7:1c:4c:
bf:6d:74:01:c0:1a:67:af:77:d0:34:3e:4f:e0:fe:71:5b:b9:
5b:f8:57:a3:e5:be:ef:93:4e:d4:c8:2c:38:49:1c:5c:e0:56:
80:dc:e0:2a:13:b6:32:f0:b0:01:cb:7a:07:ea:7c:ab:b3:58:
58:d7:60:4b:41:4a:c9:21:3c:12:b0:f8:a9:e4:1c:83:c3:6e:
8a:df:05:2c:db:98:ec:9c:05:ff:d6:7a:16:f8:05:9b:63:58:
cb:21:ca:41:8b:17:51:d7:1b:ef:90:7a:5d:92:3c:35:ef:91:
82:17:eb:42:17:25:93:80:1a:8d:90:db:4a:d1:0d:fb:33:4a:
28:0a:3e:40:97:cd:2c:54:71:ff:bc:e8:f4:1e:e7:b8:d7:c1:
f8:b4:a7:48:0e:79:fa:c9:ca:e1:0c:4f:71:21:65:b0:89:36:
30:53:3a:87:a3:df:87:e2:eb:a7:b2:a6:35:34:8a:70:3e:34:
38:3a:58:7d:4e:de:48:cc:99:b1:80:98:e9:4d:99:6d:76:3c:
21:44:2e:dd:0b:49:9b:65:61:16:e1:79:04:a1:89:e0:64:b4:
3b:36:4d:f4:fb:f7:a7:b5:2c:5a:bc:af:2e:be:2c:e7:93:b8:
fa:83:5e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org