Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/l8IA2CJDr8y-jotfGO95Y6OTobY.roa
File: l8IA2CJDr8y-jotfGO95Y6OTobY.roa (raw, json)
Hash identifier: LEjY2cWGUlqBKjThKoH/PIkrXbLM7PcMxe+9RZjeK7Q=
Subject key identifier: 97:C2:00:D8:22:43:AF:CC:BE:8E:8B:5F:18:EF:79:63:A3:93:A1:B6
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018A181997CB4AC3B3A9D31842CC752D3A4E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/l8IA2CJDr8y-jotfGO95Y6OTobY.roa
Signing time: Mon 21 Aug 2023 12:37:25 +0000
ROA not before: Mon 21 Aug 2023 12:37:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 09:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:19:97:cb:4a:c3:b3:a9:d3:18:42:cc:75:2d:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 21 12:37:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97c200d82243afccbe8e8b5f18ef7963a393a1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:b2:ba:ae:46:ce:2b:14:52:da:25:b4:96:
c1:7f:04:12:90:ec:79:54:77:b4:32:e9:3e:af:dd:
c7:49:b2:68:68:c0:fb:27:3d:46:b0:2b:1a:c0:f1:
f9:0b:cb:53:c1:e1:c5:69:fd:60:96:07:08:8b:b7:
42:fb:57:78:bb:a0:5a:71:11:df:cc:07:81:0f:12:
ae:9a:44:78:a3:5b:6d:83:8f:ba:f4:18:61:be:5a:
20:22:50:80:7e:ee:f5:ef:6c:5c:23:f0:ad:af:37:
2a:ae:8f:bf:b4:a1:8c:99:46:eb:0b:a0:7e:41:6a:
8d:d7:8b:70:6e:f1:73:c2:b3:58:fe:28:0d:17:42:
a2:68:6f:ba:a6:94:32:2a:14:fd:50:12:8b:29:88:
6a:87:15:96:35:e4:91:d1:ac:bd:44:d2:48:71:0a:
94:15:5a:c5:32:35:33:bf:96:c6:87:e7:88:5c:95:
0c:e7:8f:1a:f1:cf:f8:c5:2d:1d:30:48:4f:fd:34:
a6:83:e7:2b:50:ae:97:c1:83:78:8b:22:ed:78:0d:
7e:a6:c0:83:cd:a0:cc:31:dd:4f:ab:5a:fe:8a:2d:
7f:26:ff:3b:fb:55:4f:79:d4:43:76:fe:42:a2:14:
d0:85:1e:5c:de:c9:af:b2:c3:ba:2b:85:a3:00:01:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:00:D8:22:43:AF:CC:BE:8E:8B:5F:18:EF:79:63:A3:93:A1:B6
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/l8IA2CJDr8y-jotfGO95Y6OTobY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.13.0-46.162.14.255
Signature Algorithm: sha256WithRSAEncryption
67:dc:bd:4b:36:82:ea:0a:7a:25:7b:eb:e6:48:72:92:83:d6:
0a:ca:62:58:84:b0:50:ab:52:c7:5e:1b:88:9e:9e:1f:21:54:
43:c5:9a:66:84:9d:ac:5d:1c:99:bc:4f:62:b9:57:0c:8c:2f:
42:f2:d5:ea:e5:50:22:51:fc:12:61:f9:60:45:63:54:cd:5e:
63:cd:4c:b0:57:4a:25:90:0d:29:68:12:8b:68:d5:8b:47:f2:
f9:2b:e9:1c:c5:ee:94:7a:f2:14:86:c5:3e:ed:13:5f:93:82:
cd:00:7b:d8:07:17:dc:43:57:18:7b:78:e5:aa:8a:a1:e4:1e:
e5:6d:0f:15:8b:4b:8c:6c:3d:79:4a:c9:c6:18:12:de:bc:f2:
8f:7e:58:c7:22:bd:05:e9:23:6e:d1:1d:56:08:0d:74:11:bf:
7e:ed:25:f3:b7:86:27:af:4a:4a:7b:5f:fa:f7:e0:23:24:ee:
be:a5:93:6f:7f:86:62:c3:0a:fe:a3:83:fc:fd:3a:39:c7:76:
62:f4:00:d6:f0:c4:8d:bb:36:6c:65:76:1c:01:cd:df:f5:22:
db:68:88:46:ef:44:17:8e:65:e5:ab:63:00:75:42:d3:e3:1e:
34:eb:9b:95:fa:b7:1b:e7:09:b0:19:bf:a4:38:38:58:0e:82:
69:37:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org