Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/iafC1tCM7xdRRp-sc70ggp-jqBs.roa
File: iafC1tCM7xdRRp-sc70ggp-jqBs.roa (raw, json)
Hash identifier: S8yu8QawWgv65kpMTUikyoKfW4WsXe+dyK1+0onz284=
Subject key identifier: 89:A7:C2:D6:D0:8C:EF:17:51:46:9F:AC:73:BD:20:82:9F:A3:A8:1B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187A043F7CC375AA33E2A560AD2D41FF8BA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/iafC1tCM7xdRRp-sc70ggp-jqBs.roa
Signing time: Thu 20 Apr 2023 20:03:41 +0000
ROA not before: Thu 20 Apr 2023 20:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 46.162.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:43:f7:cc:37:5a:a3:3e:2a:56:0a:d2:d4:1f:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 20:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89a7c2d6d08cef1751469fac73bd20829fa3a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:4b:20:91:e2:95:27:3b:ab:40:87:56:4f:
f1:0a:3a:a7:31:0c:b1:e8:1c:c7:b1:f5:54:78:e5:
a2:79:8c:57:bf:47:90:d1:e4:f1:d1:f6:cf:18:48:
42:b2:7c:e5:07:7b:56:fa:40:e4:13:a0:d9:c8:e3:
a2:79:9f:f8:81:6d:4b:9d:5a:e7:30:eb:d5:39:64:
6f:59:97:31:de:9e:cb:cf:98:2c:63:5e:71:ed:22:
59:d4:34:ea:0c:02:6b:8c:1b:a0:d4:ab:d8:3c:7a:
5b:2f:4d:79:c1:06:71:aa:63:77:70:c5:2a:4c:d3:
ab:87:d8:44:32:e6:5c:22:ba:98:19:39:a2:1b:13:
71:e9:9c:14:ff:49:35:44:aa:ae:a7:5e:b5:71:7e:
ff:21:b6:40:1e:ac:73:5f:95:33:8c:7b:76:01:c3:
e3:ec:d6:13:0e:b6:bc:e7:25:c2:15:96:a4:0a:23:
ca:70:32:64:5a:04:0e:c2:c4:3d:da:2f:ce:be:8a:
43:d0:f4:3c:5e:2e:2e:f7:f4:b3:ca:9c:ec:75:73:
3d:75:f1:a2:a1:6e:e5:3c:68:26:cb:f4:05:4a:aa:
0b:ef:9e:0d:bd:01:47:75:df:15:8b:96:f1:7b:2f:
c8:ee:49:b5:d5:c6:10:30:2f:80:33:81:87:f1:74:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A7:C2:D6:D0:8C:EF:17:51:46:9F:AC:73:BD:20:82:9F:A3:A8:1B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/iafC1tCM7xdRRp-sc70ggp-jqBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f0:7d:76:e7:59:0e:ca:26:21:45:b8:eb:42:56:71:e6:7b:
14:b1:de:61:35:5e:83:db:3e:50:37:79:e6:4b:f5:61:7e:7d:
85:bc:6c:68:f5:d0:cc:c3:5a:00:96:93:f1:67:b4:3e:96:c7:
9b:84:16:32:7d:77:bf:84:1f:7b:0b:2c:d3:0a:42:e2:43:0a:
0a:4c:3f:92:d7:43:36:0c:cf:e7:70:37:37:1f:ee:ba:8c:61:
6b:6c:b9:f4:4c:e1:e3:41:76:41:62:6b:18:e9:da:20:23:c3:
2a:d6:56:f9:49:99:bf:36:fd:2f:14:ce:92:38:97:92:84:c0:
48:b3:21:89:26:43:b2:27:fe:55:03:dd:d4:81:35:9d:64:18:
30:df:94:e0:6e:76:ed:7a:6f:8f:4d:9b:b2:03:dc:52:17:1d:
b6:fe:92:a9:90:3c:6d:58:5a:2a:0b:c7:8f:31:0d:aa:aa:90:
b0:73:78:44:3e:d0:2a:6d:90:c8:13:95:ec:e6:6b:4e:d4:75:
82:87:a5:38:8f:08:06:3b:ab:4c:d5:02:85:b9:5f:41:f8:20:
72:df:1b:77:54:25:2a:14:d7:74:84:69:83:88:4c:f8:69:b6:
66:fb:40:1b:3d:93:37:b4:e7:4b:2c:2b:d0:56:e4:8b:ed:9a:
84:cf:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:22 2023 by rpki-client on console-ams.rpki-client.org