Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/haNrDdPMrxMp1Hn8ZC04ZCZyscE.roa
File: haNrDdPMrxMp1Hn8ZC04ZCZyscE.roa (raw, json)
Hash identifier: FY542I94yygJ/dPdfoFGC5G/dmVIeAU1xK0xbcQcWvs=
Subject key identifier: 85:A3:6B:0D:D3:CC:AF:13:29:D4:79:FC:64:2D:38:64:26:72:B1:C1
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01861B4231880695007C74866F934C733FAE
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/haNrDdPMrxMp1Hn8ZC04ZCZyscE.roa
Signing time: Sat 04 Feb 2023 07:09:28 +0000
ROA not before: Sat 04 Feb 2023 07:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13347
IP address blocks: 46.162.38.0/24 maxlen: 24
46.162.32.0/24 maxlen: 24
46.162.32.0/22 maxlen: 22
46.162.33.0/24 maxlen: 24
46.162.34.0/24 maxlen: 24
46.162.35.0/24 maxlen: 24
46.162.36.0/24 maxlen: 24
46.162.38.0/23 maxlen: 23
46.162.39.0/24 maxlen: 24
46.162.40.0/24 maxlen: 24
46.162.41.0/24 maxlen: 24
46.162.40.0/21 maxlen: 21
46.162.42.0/24 maxlen: 24
46.162.43.0/24 maxlen: 24
46.162.44.0/24 maxlen: 24
46.162.45.0/24 maxlen: 24
46.162.46.0/24 maxlen: 24
46.162.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Feb 2023 07:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1b:42:31:88:06:95:00:7c:74:86:6f:93:4c:73:3f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 4 07:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85a36b0dd3ccaf1329d479fc642d38642672b1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:58:0e:54:5b:1c:f3:0b:c1:c2:41:8c:ba:
db:56:1c:44:24:33:c2:9b:80:d8:02:90:83:1c:74:
1f:22:45:fe:25:0f:6f:a2:80:46:c8:dd:da:68:c1:
0c:51:c8:9b:12:27:0b:3d:d4:d7:c9:88:95:4c:15:
a6:4a:fc:26:e5:e3:5a:b8:a4:d3:de:b4:8d:2d:cc:
ba:70:93:6c:a0:94:5b:c0:bd:8e:35:6f:ba:07:d7:
12:67:30:36:6b:51:fb:dd:d9:8b:bd:8d:cb:b6:4c:
93:a0:00:12:ca:dd:f4:33:73:41:ca:f5:73:36:e6:
e8:a0:30:a3:4b:88:c8:6e:7e:14:d5:bf:8d:49:08:
25:67:60:04:7b:1a:f7:3e:5f:f5:85:df:85:30:53:
1b:72:91:a8:ce:31:ea:87:d5:54:ff:ad:36:e6:0a:
40:8a:6a:d2:9d:e9:ec:9f:a5:2d:d5:01:aa:7a:1e:
db:77:af:b8:36:ea:f1:fd:9a:a3:59:0e:4a:fd:20:
e6:cf:e7:2e:07:10:64:a1:32:b8:3e:b4:ce:ad:68:
36:8f:2a:7f:c1:2d:62:e2:4e:d8:2e:29:f5:79:37:
bc:dc:fb:3c:3d:94:88:d5:ab:e5:ba:7f:3d:a1:66:
35:74:47:2e:44:ad:14:1b:17:2c:a3:8c:92:37:7c:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:6B:0D:D3:CC:AF:13:29:D4:79:FC:64:2D:38:64:26:72:B1:C1
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/haNrDdPMrxMp1Hn8ZC04ZCZyscE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0-46.162.36.255
46.162.38.0-46.162.47.255
Signature Algorithm: sha256WithRSAEncryption
58:09:e1:90:fb:ff:a9:4c:c7:93:1c:c9:9b:e3:fd:a8:7b:6c:
f0:cf:5c:49:f8:b8:82:7d:14:0d:50:97:f7:a8:e3:69:dd:d5:
7d:94:fc:1a:38:e7:c6:c0:73:f2:3c:51:13:a6:c3:58:5b:4c:
ee:18:c7:26:0d:5b:35:4c:d0:33:a8:c2:b6:20:b6:db:23:9e:
ff:c7:cc:81:14:dd:1f:7f:f3:98:89:b3:02:04:8c:94:fe:9e:
90:a3:93:23:ee:56:14:98:25:50:f6:68:d0:99:bd:e8:aa:65:
da:31:f1:d7:4b:aa:ed:e2:55:d4:7b:c3:5b:25:f1:c9:a1:ec:
64:7e:ef:f1:4f:f0:58:77:a4:6a:04:0b:1f:38:77:aa:c0:ca:
65:f7:3f:69:8e:28:e6:1e:fb:c9:1d:34:63:70:4c:95:84:e2:
19:c0:a9:75:bf:7a:60:ce:b9:3d:8c:f7:6c:07:63:77:b5:e2:
db:a2:64:ae:84:25:31:e9:94:b8:cf:56:45:32:93:6f:d0:7d:
44:37:50:f4:0f:0e:c7:52:58:c4:a7:47:da:80:8f:eb:4f:a1:
16:61:6b:f4:80:d6:df:b1:5b:18:da:8a:52:cd:1b:7b:52:8b:
11:53:08:83:bb:c6:45:a7:58:30:03:c4:6b:b6:2d:05:ba:21:
9d:d7:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org