Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mlbCmY9ZJK87w6JJlyPJ1CIHt4Q.roa
File: mlbCmY9ZJK87w6JJlyPJ1CIHt4Q.roa (raw, json)
Hash identifier: TWUk6hUq+Mya+Ncj7PffL4ZD5I5FpG9v0sYPUxArq08=
Subject key identifier: 9A:56:C2:99:8F:59:24:AF:3B:C3:A2:49:97:23:C9:D4:22:07:B7:84
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01862D51516623278660E9080F9589F64E92
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mlbCmY9ZJK87w6JJlyPJ1CIHt4Q.roa
Signing time: Tue 07 Feb 2023 19:19:09 +0000
ROA not before: Tue 07 Feb 2023 19:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 46.162.50.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 08:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:51:51:66:23:27:86:60:e9:08:0f:95:89:f6:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 7 19:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a56c2998f5924af3bc3a2499723c9d42207b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:94:c3:46:f5:38:37:6d:52:59:0f:f2:d0:
11:34:2d:5c:bc:32:ed:35:c6:fb:88:f6:83:54:8b:
63:11:00:64:b5:f5:30:12:8a:7e:1d:d9:14:28:9f:
62:62:0f:ac:15:95:61:6f:42:37:cc:f7:1e:01:2a:
06:ec:f2:6f:45:ca:9d:9c:d4:95:01:f2:82:66:59:
01:bb:70:d4:f7:2c:2f:ea:82:51:5f:e9:6f:83:e1:
4e:26:c3:c5:3c:84:3e:ba:89:cd:1b:0c:e6:c0:f2:
4a:c4:8b:a1:e5:01:60:2d:b4:95:34:c3:2f:35:f8:
15:5e:1d:b8:b8:58:34:2b:b2:55:d9:72:37:57:b2:
a2:7f:73:a3:61:71:85:f0:3a:e0:49:8b:db:02:0d:
df:c1:84:ba:c5:3e:05:af:ab:c3:ab:0a:15:3b:84:
29:26:31:b9:04:30:21:fc:73:d7:b2:b6:a2:cf:1e:
5d:2a:5e:dc:a0:10:05:2f:46:6c:3c:87:cc:e7:31:
1c:6a:87:96:78:d8:de:0c:2d:64:42:7b:fb:c5:81:
47:b6:81:f5:f6:ad:9c:85:f0:5e:f3:00:c8:12:6f:
6c:48:d6:99:60:5e:38:94:81:b5:74:88:6d:0b:28:
a6:d3:27:f3:23:c0:44:7b:f6:2a:49:ed:84:23:df:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:56:C2:99:8F:59:24:AF:3B:C3:A2:49:97:23:C9:D4:22:07:B7:84
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mlbCmY9ZJK87w6JJlyPJ1CIHt4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.50.0/24
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d2:a3:b7:91:5a:8a:32:5a:2b:e4:1a:c7:6b:88:44:06:f8:
51:d3:4a:6e:fa:78:eb:13:d4:c3:12:31:56:83:79:d0:d6:15:
0c:0e:7a:06:a5:d8:15:0b:61:e8:02:b3:3b:37:2b:ab:63:d9:
e9:b5:f4:d7:d1:99:18:85:0f:e2:77:8e:ba:61:0b:bb:75:11:
f7:a5:aa:ff:e7:89:b1:be:34:87:ae:c6:ba:75:ab:c9:4a:18:
9c:84:0f:d2:c3:af:77:c8:c2:5e:c0:65:38:f8:82:0f:8b:a2:
d8:e9:f3:30:1a:7e:a1:20:96:a1:29:5c:a3:36:36:22:ef:c6:
cf:cb:fc:71:7b:0a:8d:44:82:93:db:92:c7:d8:80:1a:76:15:
de:78:52:b9:c2:96:7b:e4:8a:54:cb:55:c8:9f:7d:45:14:dd:
ea:09:85:e7:04:48:20:76:65:0b:81:4c:94:0f:1c:9e:3c:de:
be:e9:d9:eb:b3:3f:be:27:35:bf:2a:3f:d6:fc:ad:d6:6a:d5:
62:f3:fc:96:61:e3:6f:85:44:ec:44:99:b3:dd:8f:a5:a5:6f:
6a:66:9f:1e:bc:0a:e6:4b:06:8d:93:f4:a2:d2:ba:71:55:6b:
5e:c7:83:2a:be:56:61:c2:b5:f3:64:04:59:d5:2d:15:33:0d:
91:d3:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org