Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oCcUBKkTHznb7UfUaEzsE8USWeI.roa
File: oCcUBKkTHznb7UfUaEzsE8USWeI.roa (raw, json)
Hash identifier: B2XNsetqKzSiZ/7mAXxD/0N7qgPvowe717zIrx0mTzI=
Subject key identifier: A0:27:14:04:A9:13:1F:39:DB:ED:47:D4:68:4C:EC:13:C5:12:59:E2
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188DE2A5610D8D2056BCEB2293F0CDEA80E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oCcUBKkTHznb7UfUaEzsE8USWeI.roa
Signing time: Wed 21 Jun 2023 13:34:56 +0000
ROA not before: Wed 21 Jun 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.162.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:2a:56:10:d8:d2:05:6b:ce:b2:29:3f:0c:de:a8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 21 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0271404a9131f39dbed47d4684cec13c51259e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:d3:e4:7c:81:53:74:fe:10:79:5b:dd:23:
dc:25:ac:b5:09:06:8f:0c:d5:3e:49:8c:41:a5:9c:
20:17:a2:4e:1e:ad:9c:36:6d:92:35:1d:01:51:5b:
db:2a:6b:aa:1a:ce:63:78:d4:6a:75:5c:aa:86:fa:
86:61:c6:16:92:b8:af:73:70:a4:11:ab:08:e4:41:
d0:8f:04:bd:9c:f9:b1:8c:13:7b:28:f2:3d:3d:d7:
91:10:b6:b2:a8:7e:d1:05:e1:3b:b9:5d:4e:3d:91:
cf:62:8b:b1:68:f6:89:c1:4e:4c:39:ba:05:11:33:
c0:b5:11:dd:7a:e5:5a:ac:ed:b5:fd:8e:7d:19:0c:
8b:40:62:19:24:11:62:37:f0:0b:42:00:21:4a:b1:
49:f9:bf:8e:dd:b4:56:14:9b:54:af:14:49:ad:ec:
75:9c:26:32:f5:0c:28:c0:65:fb:48:f9:02:23:11:
f0:41:c0:07:e6:3c:87:88:d9:64:43:5b:05:65:8b:
2a:41:38:a0:86:53:2f:39:81:67:3c:ca:64:09:2d:
62:eb:c8:00:7c:b6:29:19:e1:1c:73:51:c7:16:f7:
c0:e1:11:bc:dd:ec:82:15:43:2f:d0:25:8e:f4:a9:
8b:1e:6c:38:76:9b:d8:d9:10:6a:81:84:e9:b4:1b:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:14:04:A9:13:1F:39:DB:ED:47:D4:68:4C:EC:13:C5:12:59:E2
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/oCcUBKkTHznb7UfUaEzsE8USWeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8a:bd:e5:45:e9:6b:4f:c5:68:99:d9:38:01:f2:4c:32:3c:
01:32:73:d0:5e:29:21:17:42:37:6e:c8:f9:5c:93:d2:a6:a5:
54:07:5a:33:5e:cc:75:b2:e4:92:ea:b2:78:73:7e:35:af:c6:
66:35:e0:31:9d:91:f6:61:e9:3e:22:e6:5c:b6:a1:22:84:29:
32:8a:32:b6:4b:13:8a:c7:15:42:9d:39:1d:2a:f1:85:13:33:
14:da:87:b7:86:d9:c8:29:fe:23:55:c2:b6:6d:83:22:52:b0:
e5:b0:f7:fb:a3:62:90:f9:a1:60:b3:da:54:c5:28:eb:ae:cc:
a4:5e:25:0f:a5:00:49:85:78:4a:79:ab:82:ab:be:7c:c5:bd:
18:6a:56:11:12:aa:7d:c4:bf:fd:d2:95:0d:86:dc:e1:39:e1:
68:75:65:7e:a4:1b:a3:8f:89:c2:7d:3c:78:bf:0b:dc:f3:49:
b2:19:66:93:e8:75:2c:18:14:72:dd:fa:50:e7:b4:4a:19:3d:
3e:99:8c:69:55:11:0b:8a:90:a3:2e:ff:8a:61:22:e4:92:bc:
7d:f0:32:64:c0:e8:3b:72:c5:bf:aa:f4:75:18:6b:98:55:3a:
d8:a3:e6:4b:58:35:50:2c:ee:76:1c:4f:07:89:f6:9a:35:c2:
4a:eb:f9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org