Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/lZa9oI7peWOZlZotMmUd0SO_uZA.roa
File: lZa9oI7peWOZlZotMmUd0SO_uZA.roa (raw, json)
Hash identifier: evkNF4qQypWCZefTqimr8Ct6JFRfMTQeqtTb/AeHeEM=
Subject key identifier: 95:96:BD:A0:8E:E9:79:63:99:95:9A:2D:32:65:1D:D1:23:BF:B9:90
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018771D2BA293B95A3D63CD17B8EB107B3B2
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/lZa9oI7peWOZlZotMmUd0SO_uZA.roa
Signing time: Tue 11 Apr 2023 19:37:28 +0000
ROA not before: Tue 11 Apr 2023 19:37:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.28.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 20:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:d2:ba:29:3b:95:a3:d6:3c:d1:7b:8e:b1:07:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 11 19:37:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9596bda08ee9796399959a2d32651dd123bfb990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4d:9e:7d:f2:32:5d:0c:12:67:3b:b7:9e:3d:
95:07:b2:f9:76:24:72:04:72:f0:cb:3d:52:04:03:
5c:c6:4f:0f:51:f5:04:b8:92:4f:d7:3b:f8:3a:b0:
a6:c1:50:70:fc:9d:ce:35:28:59:c7:09:c5:6e:b2:
4a:3a:99:4e:31:b2:00:7a:8b:91:8b:b2:81:8c:64:
aa:f2:fc:da:c3:97:80:9c:96:79:b0:1a:94:8e:06:
81:3e:02:61:36:8f:6f:93:b0:2a:8d:79:66:6f:86:
23:85:7c:5f:a5:26:7e:33:d0:e2:54:3d:7b:a9:cb:
fe:1c:57:d7:c6:c1:4c:b6:40:3b:14:f4:9b:a2:0d:
2e:0c:2e:8e:ea:7b:d0:20:b6:b0:99:e3:c2:ae:ca:
5e:91:24:8a:3a:62:15:ff:6b:0d:95:fe:44:fc:b3:
05:da:55:46:36:64:33:b7:c7:aa:2e:2d:85:15:07:
7e:d8:df:8b:41:c5:a5:f1:4a:52:8e:94:e6:82:14:
64:a8:72:dc:bc:a8:0b:b6:44:73:ad:91:82:2b:12:
00:c9:38:06:05:94:5a:81:46:fb:32:60:97:1a:55:
4f:27:5d:5c:60:b0:a7:da:98:86:de:79:19:49:60:
36:51:15:f0:5d:5b:34:83:33:ae:4c:0b:bc:89:87:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:BD:A0:8E:E9:79:63:99:95:9A:2D:32:65:1D:D1:23:BF:B9:90
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/lZa9oI7peWOZlZotMmUd0SO_uZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.26.0/24
46.162.28.0/24
46.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8c:98:61:07:a4:8f:9d:6b:a6:c3:8a:7d:86:ea:c9:ed:59:
73:a5:fc:e8:46:7a:73:be:12:b0:16:32:08:5b:43:7f:00:7c:
58:18:fe:b4:27:dd:be:1e:4c:35:ed:79:00:86:5c:6e:e1:68:
41:6c:a4:d5:81:6c:fa:73:b3:e4:b9:0d:17:2b:45:55:cf:57:
34:52:89:64:e3:a4:0a:3d:04:f0:08:f1:b5:59:63:da:38:51:
0e:91:69:52:1b:6c:43:aa:76:76:53:ad:91:80:78:e8:b7:ef:
27:03:59:4c:7a:71:b6:ba:aa:2b:87:4a:2b:4b:12:54:83:a4:
2f:ec:45:82:dd:b6:4f:b6:46:03:1a:4d:ab:47:d7:10:89:13:
bf:eb:a8:52:01:11:a0:1f:32:e9:64:b1:ab:20:92:17:5f:03:
a3:82:8e:83:50:42:93:76:34:eb:f4:2a:1b:49:dd:81:81:c8:
f2:ce:5b:8b:e4:3f:ed:85:52:c4:ed:b8:f9:4f:9b:7a:d0:5d:
88:0b:7f:08:47:dc:d0:6b:5f:4b:b2:74:20:ce:2e:df:c1:9c:
98:c4:3d:13:57:30:3b:f1:e2:a5:42:29:95:45:81:49:34:ec:
ca:e0:03:26:b9:f3:65:57:ce:7e:8e:51:aa:95:de:7b:92:5f:
c9:e5:08:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org