Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nEwZ_BIAleopq51Aw7WZZ0yaeQs.roa
File: nEwZ_BIAleopq51Aw7WZZ0yaeQs.roa (raw, json)
Hash identifier: UxNvHJH2QXP+YMzvsW9drePVAb2hsp+l1s72yHPoFDs=
Subject key identifier: 9C:4C:19:FC:12:00:95:EA:29:AB:9D:40:C3:B5:99:67:4C:9A:79:0B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01882DB459F7A153D04851BFEE4E13CFD02E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nEwZ_BIAleopq51Aw7WZZ0yaeQs.roa
Signing time: Thu 18 May 2023 07:12:54 +0000
ROA not before: Thu 18 May 2023 07:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.16.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:b4:59:f7:a1:53:d0:48:51:bf:ee:4e:13:cf:d0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 18 07:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4c19fc120095ea29ab9d40c3b599674c9a790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:82:d3:70:75:6f:4d:4d:7a:e9:1f:e2:a4:
0e:7c:3c:2f:8a:8a:b9:4d:c0:dc:c7:72:1e:94:08:
23:c2:e7:da:70:bd:66:bb:34:25:63:e7:8a:1d:08:
7e:e5:bc:35:15:60:74:17:81:36:80:e5:d1:ee:d0:
5c:39:61:2c:6b:18:0e:2a:d2:ce:1c:2e:6d:85:e3:
ab:93:bf:53:b8:2e:c8:1d:90:68:a5:84:ab:fd:79:
22:3b:05:fc:ee:f5:d1:91:a6:c9:2e:5e:d0:21:98:
f9:70:54:ac:86:58:ad:de:a1:95:b4:f3:66:e1:f7:
5f:65:bc:b1:da:48:a7:d2:3f:71:95:db:d0:06:22:
a2:66:43:93:ab:c2:45:dd:40:7a:08:3f:ad:3d:1d:
da:6b:89:f7:08:9d:1d:b0:ea:8b:54:a8:a7:6e:9e:
89:54:0d:6f:9d:d0:61:2d:55:a1:aa:5b:49:66:8b:
1d:6f:ba:b2:88:d3:01:ce:c9:5c:22:b1:60:4c:51:
ed:2a:86:5b:9c:cf:64:d0:62:25:00:40:cd:74:cc:
cc:62:a5:c5:82:4b:68:65:84:00:bb:d3:04:0b:c6:
63:ca:1b:78:95:30:16:cd:8f:33:d9:c1:0d:8c:c2:
46:8e:1a:92:c3:be:52:7c:68:dd:ea:8b:88:d3:ae:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:19:FC:12:00:95:EA:29:AB:9D:40:C3:B5:99:67:4C:9A:79:0B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nEwZ_BIAleopq51Aw7WZZ0yaeQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.16.0/24
46.162.28.0/24
46.162.30.0/24
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
14:8a:06:4e:1d:f1:8b:e3:15:11:06:64:96:00:99:49:b7:91:
e3:ee:3c:6c:bc:92:ac:47:46:df:7b:b0:8c:2b:a5:58:48:f6:
37:9a:70:cf:a7:c6:83:cd:28:8d:48:84:18:3f:b2:71:87:b7:
99:cc:f3:01:58:c7:8c:61:84:6b:40:8b:6c:92:00:0d:e1:11:
f7:1b:73:7e:b6:ae:28:ec:24:81:65:ba:a0:65:7a:94:c7:96:
75:30:36:55:f9:80:3d:40:89:15:8d:2a:a7:3a:23:5f:1e:ea:
3b:38:81:c8:b5:81:27:c7:35:97:66:ca:66:04:a4:3d:76:e3:
04:18:c2:28:6c:cf:ce:7c:b4:d1:cc:14:91:a4:78:ce:9c:0a:
8a:77:7d:9a:5a:95:70:83:75:bc:7e:ba:83:e5:6d:e1:f9:05:
49:27:71:8c:63:b7:93:33:59:49:a0:df:42:30:7a:57:ef:21:
43:86:48:b7:7b:65:10:fe:81:ad:8c:d2:d1:59:4a:b4:5a:49:
1e:c0:6f:b1:52:a3:b0:97:e1:b9:6b:0d:fe:54:e8:2d:ae:c1:
82:9f:2d:ac:40:c7:35:ed:78:42:d2:f3:52:c2:64:4f:1e:b1:
57:e8:09:28:a9:34:21:c4:32:16:98:27:b8:96:52:bb:27:42:
82:9e:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org