Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/o6qSIZwvGl21ABujhmSBD7XJbNQ.roa
File: o6qSIZwvGl21ABujhmSBD7XJbNQ.roa (raw, json)
Hash identifier: puy+iRAxlB7KXUxYNS5kBDXJJ/CN6zrp5A2WIQgP7As=
Subject key identifier: A3:AA:92:21:9C:2F:1A:5D:B5:00:1B:A3:86:64:81:0F:B5:C9:6C:D4
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018752C94437F4233368E95C52221A8F8542
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/o6qSIZwvGl21ABujhmSBD7XJbNQ.roa
Signing time: Wed 05 Apr 2023 18:58:54 +0000
ROA not before: Wed 05 Apr 2023 18:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 06:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:c9:44:37:f4:23:33:68:e9:5c:52:22:1a:8f:85:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 5 18:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3aa92219c2f1a5db5001ba38664810fb5c96cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:e8:4f:61:45:51:f5:04:05:ad:fa:63:95:
d0:c7:c1:8d:45:5d:b2:d8:e1:18:2a:ff:d7:43:c8:
3f:eb:b8:4e:88:2b:d4:91:04:06:83:0d:fb:f9:c5:
b6:dd:fb:cc:45:a9:06:04:4c:fe:ff:9c:c7:03:0c:
2b:9e:1d:2b:0f:62:39:5b:4e:21:3d:db:bb:9c:ef:
15:9b:b6:51:ad:a3:90:98:8e:35:e5:ad:e7:0a:65:
31:fd:93:48:ba:83:08:dc:c7:8f:35:2e:1e:21:62:
ad:f6:da:f5:a4:7d:d3:75:5d:32:b8:81:de:46:ad:
1b:d5:46:75:58:ce:eb:26:32:55:01:da:4c:e1:20:
7f:77:2c:d1:86:27:05:76:1f:a7:e2:1c:00:ab:f2:
92:30:11:95:e5:f1:79:f5:27:58:bc:50:86:b8:52:
47:05:46:86:78:be:5e:f7:3e:09:bc:d8:73:bc:c1:
66:e3:e4:b0:a1:9a:89:3f:1f:e7:99:4b:ef:eb:1d:
3e:f2:4f:36:14:cf:a6:be:68:31:b5:e5:e0:9d:76:
3b:25:c4:98:a0:cc:92:0d:4c:3e:3e:f1:84:70:10:
f6:3c:f4:e4:2c:b5:c1:63:f7:75:30:70:14:a9:88:
7a:f5:fc:09:c2:4f:e9:1f:c8:49:68:bc:40:da:3d:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:92:21:9C:2F:1A:5D:B5:00:1B:A3:86:64:81:0F:B5:C9:6C:D4
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/o6qSIZwvGl21ABujhmSBD7XJbNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:32:03:90:e5:32:a5:51:f8:08:ef:02:e0:92:a7:c7:b1:78:
8f:68:8c:40:c1:1c:e5:eb:72:d7:20:4d:50:a8:8a:dc:8f:60:
2e:b4:dd:a3:ac:e9:47:45:5d:f3:c0:33:fa:99:e6:7c:4b:f7:
5a:da:03:25:da:20:c0:0a:f5:80:38:48:45:7a:ed:3e:5f:1e:
af:9b:ff:91:2c:c3:bd:a9:8a:32:be:40:36:cc:23:08:8a:db:
9d:8c:bc:9b:08:fd:b9:03:d4:bb:c9:43:b8:31:c9:10:f4:11:
a2:11:07:bd:91:80:3c:b5:30:36:28:42:7e:fa:3e:f8:8f:51:
cd:be:9c:8b:a7:36:55:82:71:c4:4b:0c:75:ab:ea:33:76:33:
16:ed:16:8d:11:a2:71:fd:04:60:cd:29:e0:12:37:89:8c:89:
8d:48:ee:dc:00:d9:ce:7e:4f:cf:04:20:b8:67:f1:eb:97:b1:
82:99:de:b2:b0:c7:45:63:7f:f3:80:f8:0a:4a:42:f5:6f:d7:
0d:db:b3:ed:b6:b3:43:00:18:22:08:e4:01:8f:a6:b2:e7:78:
90:5c:82:7b:d5:8a:59:7c:6c:e3:03:96:e1:7f:79:57:89:8f:
93:99:ac:7d:04:d2:79:f0:f6:d5:9e:cc:a9:66:db:0c:c6:15:
34:20:39:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org