Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/msBEKb_6FjwLZURfNvIIYrdPNQc.roa
File: msBEKb_6FjwLZURfNvIIYrdPNQc.roa (raw, json)
Hash identifier: wdCdiHBp+9VSjJ34Q1aFFWz6GTlscsHGNDBD1MTg12I=
Subject key identifier: 9A:C0:44:29:BF:FA:16:3C:0B:65:44:5F:36:F2:08:62:B7:4F:35:07
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189C7522D723ACBC54A83AEA28F42887FEC
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/msBEKb_6FjwLZURfNvIIYrdPNQc.roa
Signing time: Sat 05 Aug 2023 20:09:58 +0000
ROA not before: Sat 05 Aug 2023 20:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 46.162.2.0/24 maxlen: 24
46.162.4.0/24 maxlen: 24
46.162.5.0/24 maxlen: 24
46.162.6.0/24 maxlen: 24
46.162.36.0/24 maxlen: 24
46.162.38.0/23 maxlen: 24
46.162.40.0/22 maxlen: 24
46.162.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 13:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:52:2d:72:3a:cb:c5:4a:83:ae:a2:8f:42:88:7f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 5 20:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ac04429bffa163c0b65445f36f20862b74f3507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:0e:8f:51:e9:c2:6f:d5:c5:6e:20:d6:08:
98:6b:38:3b:4c:1b:73:7d:de:5b:01:3f:42:08:31:
6c:22:47:e1:cc:15:16:d9:a8:d5:c7:09:7e:f8:ab:
96:cf:ed:4a:86:ab:82:82:32:ac:8a:de:75:b1:3f:
4e:db:12:05:0a:ed:40:bb:6b:88:16:86:72:6e:29:
89:2d:5a:6d:93:17:8d:46:97:6d:ef:5c:8e:ff:73:
35:bb:d8:d5:df:72:c4:af:b8:98:92:ea:13:98:d7:
11:92:58:e4:e2:64:7a:24:a5:b4:73:8f:4e:e6:1f:
e1:9d:b1:55:82:83:18:3c:ad:48:3c:ec:73:0f:a0:
f8:a9:56:4b:26:85:1f:63:ed:67:6c:93:9e:7d:ed:
a3:e2:3c:da:e6:a8:a2:24:2f:50:d6:2a:70:dc:56:
53:c1:1f:58:10:46:49:a6:00:ac:b9:a0:42:a9:cf:
b9:cb:bf:46:10:03:6e:8c:b4:75:af:75:36:f6:b5:
00:66:70:cd:7b:80:18:80:9a:a8:90:8c:13:b5:09:
0b:e6:08:08:1c:42:fb:36:a9:32:48:db:68:6f:d8:
ac:6e:fb:71:11:50:92:2e:fa:8b:2f:73:fd:5a:4d:
a4:47:2b:3d:7b:0a:5d:c4:92:c5:b6:78:83:8a:ae:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:44:29:BF:FA:16:3C:0B:65:44:5F:36:F2:08:62:B7:4F:35:07
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/msBEKb_6FjwLZURfNvIIYrdPNQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.2.0/24
46.162.4.0-46.162.6.255
46.162.36.0/24
46.162.38.0-46.162.47.255
Signature Algorithm: sha256WithRSAEncryption
0e:da:fe:e0:95:54:66:07:a2:77:ce:2a:d1:d3:ad:56:a3:76:
7e:60:7b:07:1c:53:d7:38:8f:0c:04:c4:32:4c:8c:5d:c0:ac:
18:b8:20:0a:1b:6e:1d:c1:f4:ab:d4:04:33:2d:19:f2:1c:65:
60:e7:8a:78:77:a2:53:32:53:20:f1:bf:e4:ad:d9:28:8a:fb:
4b:4d:da:ca:d9:ef:a7:64:f1:d4:5a:8e:aa:e2:80:d3:5f:a8:
ce:fe:d0:47:da:8e:b5:59:46:a5:0a:87:1b:31:d9:f4:a3:6e:
e0:e9:68:0c:43:b0:d8:27:98:dd:a9:c4:c9:94:0d:0d:65:62:
52:78:c8:4e:69:90:0d:b2:d6:6f:3b:f6:56:b9:6c:07:4a:fe:
4f:aa:f8:f1:0f:bd:d7:e7:09:79:82:46:46:28:9f:73:7d:8e:
ac:61:80:4f:56:47:05:62:ec:c0:87:0e:77:d5:55:76:f3:bb:
81:f2:4c:02:3c:f9:52:34:68:0d:d4:7a:d3:e3:09:19:ce:67:
62:ba:da:83:bb:c7:f0:f6:17:e5:d2:1b:e4:77:8c:54:5d:c2:
fd:00:62:95:c3:3b:5c:2c:51:d1:12:d6:94:01:b7:fc:c9:e1:
41:ec:3e:ec:0c:91:fc:b8:27:60:26:67:4f:f9:fe:b4:46:55:
8a:65:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org