Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kABk79_Pmkc1UC3Ma6JoCIbuDTQ.roa
File: kABk79_Pmkc1UC3Ma6JoCIbuDTQ.roa (raw, json)
Hash identifier: ZSQUrjpol4aFmXTo/g3uFhRG4lLK2p/UvuT7ui4Cpw4=
Subject key identifier: 90:00:64:EF:DF:CF:9A:47:35:50:2D:CC:6B:A2:68:08:86:EE:0D:34
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187F00A149407FCE9B902FC321871A85EFC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kABk79_Pmkc1UC3Ma6JoCIbuDTQ.roa
Signing time: Sat 06 May 2023 07:50:05 +0000
ROA not before: Sat 06 May 2023 07:50:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 46.162.2.0/24 maxlen: 24
46.162.4.0/24 maxlen: 24
46.162.6.0/24 maxlen: 24
46.162.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 20:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:0a:14:94:07:fc:e9:b9:02:fc:32:18:71:a8:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 6 07:50:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=900064efdfcf9a4735502dcc6ba2680886ee0d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:19:db:05:83:b0:32:c6:36:93:57:15:10:b9:
cd:c8:e5:f5:81:90:61:81:d0:ef:c2:68:2e:81:e1:
93:8b:9e:9c:4f:d2:6c:8c:46:9c:7b:4a:5c:3b:c2:
aa:a7:4d:8f:2a:70:84:0a:37:36:ff:fc:6f:c3:23:
76:c7:e4:40:62:ac:73:01:e6:ea:88:78:30:7b:05:
27:39:ca:85:b8:0b:42:7a:6d:bb:07:88:70:58:34:
c1:63:a9:17:d4:4d:e5:01:54:d3:1b:92:22:05:fb:
45:df:4b:87:e4:f7:75:da:8f:63:dd:6a:f5:a1:53:
32:05:73:1d:e8:21:b4:43:12:64:cc:8e:46:57:3f:
97:14:06:dd:dc:e5:52:b7:ca:41:95:7d:b4:19:75:
01:f0:3e:de:f2:cf:82:f7:12:08:73:88:ed:03:30:
df:a4:f1:57:c2:6b:90:17:09:84:af:3a:a4:39:5d:
1d:a9:62:b7:20:da:f6:c5:12:1d:d5:bc:c3:73:15:
ca:e1:ad:3e:48:c0:8b:7e:ca:21:e2:22:cb:8b:0c:
e1:11:e7:d9:1c:93:00:48:2c:95:04:ff:17:34:1b:
60:40:3d:79:3f:15:72:4b:bc:0e:1c:92:ac:3c:34:
f8:04:49:66:c9:1b:ad:26:3b:9b:80:a4:4a:2b:51:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:00:64:EF:DF:CF:9A:47:35:50:2D:CC:6B:A2:68:08:86:EE:0D:34
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/kABk79_Pmkc1UC3Ma6JoCIbuDTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.2.0/24
46.162.4.0-46.162.6.255
Signature Algorithm: sha256WithRSAEncryption
76:6d:ae:fa:99:3b:95:bb:f0:09:94:5d:da:a2:c8:f1:7b:24:
d5:dd:37:5f:31:9f:dc:1c:5c:f5:1a:f7:0e:9a:3f:73:3c:0b:
30:6b:5b:60:ac:6c:26:25:54:a3:a7:bc:6a:a8:44:3c:ac:c1:
e5:3e:18:55:03:90:c5:99:1b:12:0c:28:4d:65:58:a8:2e:7f:
06:9a:94:67:d1:69:a7:e3:99:e1:7c:b3:be:d4:ff:5b:af:74:
84:da:2c:c9:e9:23:5e:c7:58:8f:9b:03:bc:ed:db:f1:5c:16:
d5:72:c8:b8:3b:72:fa:8a:91:59:06:54:eb:50:21:6d:6e:6c:
76:3e:12:04:47:85:d3:72:bc:90:ab:5b:cd:87:84:b8:9f:82:
6b:4d:81:e1:a5:72:b5:a0:d8:bd:fc:47:77:1e:02:58:a6:f5:
1a:23:72:bd:23:d2:a5:ee:0a:71:c9:77:58:94:50:d2:50:78:
df:1c:fc:78:20:16:2f:04:04:68:34:f9:0e:2b:8d:54:d2:9d:
c8:7a:44:c4:36:3d:ad:2c:6c:e2:46:f4:83:da:4a:9e:6d:29:
ba:94:ae:a0:3c:89:f3:7f:30:42:45:94:12:b5:f1:98:59:41:
9a:55:68:6d:01:db:83:e6:09:2a:30:05:76:7a:34:53:cb:9f:
ca:9e:f8:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org