Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mpv0j6U3R2hTDVkzFzyCiO95dWg.roa
File: mpv0j6U3R2hTDVkzFzyCiO95dWg.roa (raw, json)
Hash identifier: 9SYpLgNphvh2K4TBvvhxEXk/Bb6uGy5p0ud16SNNxzo=
Subject key identifier: 9A:9B:F4:8F:A5:37:47:68:53:0D:59:33:17:3C:82:88:EF:79:75:68
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01897C664F94E750D4D0BFBAD174C7E0A1B0
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mpv0j6U3R2hTDVkzFzyCiO95dWg.roa
Signing time: Sat 22 Jul 2023 07:00:27 +0000
ROA not before: Sat 22 Jul 2023 07:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.162.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 12:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:66:4f:94:e7:50:d4:d0:bf:ba:d1:74:c7:e0:a1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 22 07:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a9bf48fa5374768530d5933173c8288ef797568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:06:44:ab:82:ea:0a:ff:cc:d2:3d:5e:f3:
a4:8e:41:fc:a0:61:26:0e:fb:1d:db:b8:d3:f5:86:
71:90:7f:c3:da:5b:8e:3e:06:82:e5:6f:ad:d6:55:
e6:8e:c2:dd:a2:5a:c9:f7:10:ea:b9:e9:72:bd:cb:
1f:24:d6:1d:4a:2a:1a:4c:14:15:0f:5d:a4:86:a8:
63:7a:d5:7b:fb:2c:0f:8d:e8:54:f3:a7:dd:c3:bb:
f5:37:89:26:4d:10:bd:47:c5:3f:56:54:2d:c6:4f:
02:de:aa:cc:20:62:7f:e7:b9:17:d3:74:7a:e2:29:
51:6f:89:36:99:52:58:11:23:a4:68:73:e8:6f:3a:
48:c5:19:f8:52:07:15:23:03:3c:04:96:98:40:10:
64:f4:e1:9d:52:15:34:39:2a:7b:c0:17:3d:00:c4:
2c:a1:b9:86:b5:c1:6c:17:84:d5:b0:7a:01:f4:36:
dc:5b:72:7e:2a:fd:3f:aa:a1:1f:b3:82:c8:6b:a0:
b7:90:69:6a:7f:49:a2:64:6d:1c:0e:1a:7f:0b:e4:
20:5b:b9:36:9f:48:fc:51:33:ad:d5:2e:3b:62:46:
b3:3b:a2:ea:ca:f6:e8:1f:2f:4c:5e:4e:a7:59:0a:
2e:6f:98:90:02:f4:ed:d7:18:5a:cb:ba:e1:ec:bc:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:F4:8F:A5:37:47:68:53:0D:59:33:17:3C:82:88:EF:79:75:68
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/mpv0j6U3R2hTDVkzFzyCiO95dWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.22.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ba:f6:44:71:2c:34:ef:7a:78:00:94:81:3f:bd:1f:53:9e:
55:e1:d1:6b:69:54:dd:3a:b3:12:8d:46:5a:ba:16:c3:35:1f:
c7:57:f8:ba:09:cf:25:01:dc:f1:3c:b4:24:4b:c6:a9:7a:08:
b4:e8:6c:df:e6:89:0e:1d:1d:94:18:6a:c0:ad:5a:ca:b4:ba:
15:13:46:ad:17:48:52:e6:26:e6:21:a0:ec:06:1f:cf:e2:ae:
37:98:86:8c:2e:67:33:ce:60:64:aa:32:f6:c3:93:74:ec:0d:
94:b6:57:68:90:7d:ba:6d:70:2a:28:9b:6c:94:99:ae:6b:bb:
71:f2:73:e8:47:2e:84:5f:28:d7:f2:57:c3:8f:54:c9:8a:c1:
62:1a:49:10:19:6c:e1:d9:46:93:33:29:b8:5c:09:d6:69:6c:
bf:88:65:23:2f:e7:bb:a2:b8:6d:41:e9:6f:8f:ee:b1:45:c9:
b1:54:24:3e:26:9b:34:cc:68:de:5c:ab:b8:e2:a7:51:18:73:
a7:2d:6e:af:cd:bb:10:e6:d1:f6:94:97:43:d6:02:d5:7a:6d:
50:10:7d:06:e8:42:1c:f1:30:bb:c2:64:9e:bf:b2:71:3b:65:
3d:72:39:ba:c7:f6:d1:b4:2d:4e:9a:e4:bd:d0:40:58:fe:c9:
c9:33:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org