Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/hFAFGOyDwZKnv-rufGAF2It5egs.roa
File: hFAFGOyDwZKnv-rufGAF2It5egs.roa (raw, json)
Hash identifier: DJ0xy4I/YqsUzpQOX1mu6veOGZiMHr9spSQFP42/bOQ=
Subject key identifier: 84:50:05:18:EC:83:C1:92:A7:BF:EA:EE:7C:60:05:D8:8B:79:7A:0B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01880ECC99329EDEC0717B63CDCC5121EB95
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/hFAFGOyDwZKnv-rufGAF2It5egs.roa
Signing time: Fri 12 May 2023 07:11:09 +0000
ROA not before: Fri 12 May 2023 07:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.162.48.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 16:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:cc:99:32:9e:de:c0:71:7b:63:cd:cc:51:21:eb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 07:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84500518ec83c192a7bfeaee7c6005d88b797a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:37:55:96:71:7c:5e:3f:89:d4:2f:2c:3f:
71:e2:14:f5:63:80:7a:59:27:cf:20:6e:bc:12:fe:
a2:2f:18:b7:3f:54:08:97:5f:3a:57:43:ad:74:16:
00:1a:dd:49:a9:67:58:cc:dc:a0:91:c4:5c:31:da:
93:51:c7:6f:f7:e3:5a:a8:88:c5:5f:c4:c2:53:2e:
89:59:c8:d6:c9:3d:30:82:8e:13:4b:ea:61:9f:29:
74:d0:96:d9:4c:30:11:f7:1c:2e:f9:59:df:51:19:
c8:02:4b:46:79:0d:ec:10:67:d7:ea:32:30:a1:07:
7e:03:09:cf:a9:5b:c3:c3:0d:5c:0d:0e:47:2c:dc:
c3:01:8a:03:cb:4d:90:43:4a:b0:76:c7:bd:04:c0:
0c:7c:e2:e9:91:96:c2:91:9a:20:b3:1e:36:d8:5c:
66:ff:b6:db:3b:ce:c5:da:f7:a9:4d:f7:d6:b3:24:
dc:a0:3b:69:49:a1:69:a0:57:a9:0b:49:1d:38:c8:
5e:ea:d6:ac:1f:14:4f:19:7b:d6:cf:45:0c:b1:11:
82:70:6c:92:41:98:1c:9a:3b:da:ef:df:02:60:57:
72:d2:01:45:a5:a6:3c:ed:c5:80:40:bb:d8:5d:01:
26:bc:20:c9:b6:79:c5:f6:8c:e9:69:f3:7e:08:a5:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:05:18:EC:83:C1:92:A7:BF:EA:EE:7C:60:05:D8:8B:79:7A:0B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/hFAFGOyDwZKnv-rufGAF2It5egs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.48.0-46.162.50.255
Signature Algorithm: sha256WithRSAEncryption
13:26:27:ed:73:45:18:f7:66:20:c7:4d:a0:52:0a:85:0e:b4:
39:6e:95:6f:25:68:b9:86:ba:30:ff:04:13:16:40:7e:5b:f7:
3a:40:6b:93:4e:ea:df:01:45:46:50:f8:18:70:36:d1:10:46:
fb:3a:7f:b6:1f:11:1e:cd:8e:ae:e1:bb:b0:43:96:c9:09:2a:
e4:ba:00:c8:2f:b7:85:e4:48:7d:45:b6:c7:77:e6:91:cc:cc:
a7:a0:6e:dd:0e:73:d4:ce:67:4c:58:ee:07:14:0d:8e:dc:cf:
71:a7:80:3a:b3:a0:8d:d6:2a:c3:25:16:c0:9f:42:c1:1d:42:
bb:18:c0:d6:cf:42:bc:90:f2:c7:97:7c:ed:77:b1:f9:4e:e4:
c0:f0:3d:ab:76:bf:3f:43:13:c9:ff:6e:ba:e3:27:e9:3d:ad:
03:f1:de:d0:53:c7:b3:2e:43:00:4c:c2:ff:bf:a7:32:d4:4c:
85:4b:ba:05:e1:22:89:ca:2d:35:99:f6:55:c7:91:f0:d0:05:
d2:a6:83:72:da:85:bf:46:d2:61:f1:52:04:43:f8:e4:db:04:
16:36:d7:47:7f:d6:7e:82:45:4d:0d:1e:3a:a3:16:43:44:7a:
d2:01:94:8d:42:bc:87:d4:59:92:22:60:d4:9d:22:9d:b6:9d:
1f:32:4e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org