Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qI7JRKcpORFnKczV6gzxbotvQag.roa
File: qI7JRKcpORFnKczV6gzxbotvQag.roa (raw, json)
Hash identifier: yIZSG7d29HtD01NwQ+3at2+nfFry5KzkLfobzrL4E1c=
Subject key identifier: A8:8E:C9:44:A7:29:39:11:67:29:CC:D5:EA:0C:F1:6E:8B:6F:41:A8
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018617F7A026D618F445D9C8A6F60D78D483
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qI7JRKcpORFnKczV6gzxbotvQag.roa
Signing time: Fri 03 Feb 2023 15:49:09 +0000
ROA not before: Fri 03 Feb 2023 15:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 46.162.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:f7:a0:26:d6:18:f4:45:d9:c8:a6:f6:0d:78:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 3 15:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88ec944a72939116729ccd5ea0cf16e8b6f41a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d3:38:60:29:2d:ce:55:4c:cc:cd:a7:52:25:
9f:08:ba:aa:ef:19:84:a5:fb:ec:68:8a:cf:8d:0b:
ae:8a:e2:ba:a8:e4:79:45:03:5f:46:7d:f6:97:4d:
d8:ca:73:ce:de:ed:ce:0d:37:93:91:c4:ef:b5:63:
65:67:dc:11:68:0b:e9:6c:e5:b9:bd:3d:60:c3:c7:
40:a3:7f:f4:df:5a:a6:ac:a7:20:8d:e8:97:19:29:
d7:e8:ea:cc:5e:6b:05:c9:ec:68:bf:b0:34:66:ad:
9a:fd:83:88:85:e1:12:ba:d9:35:d8:51:2f:b5:c5:
7d:1b:ed:36:c8:65:b9:9a:8c:6a:05:f5:71:38:66:
9a:0f:93:6a:49:c0:35:48:b3:9d:0b:a9:89:9e:44:
27:be:80:3e:1f:7a:b1:27:92:a4:08:95:63:66:d1:
97:b2:5b:0a:c8:e1:50:56:60:58:ad:13:35:9e:3e:
9d:85:93:a5:5b:4a:cb:8c:ef:7a:98:8e:8b:6d:91:
81:ef:66:ac:07:60:93:75:f1:83:b7:f0:d4:83:70:
51:f5:58:5d:4d:8e:2a:68:c6:ca:5f:2f:39:51:e7:
a5:df:5d:64:30:fd:56:56:ce:42:34:fa:15:29:c2:
33:48:2d:e4:b0:b6:12:d7:28:7a:e0:24:7e:a2:bc:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:C9:44:A7:29:39:11:67:29:CC:D5:EA:0C:F1:6E:8B:6F:41:A8
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qI7JRKcpORFnKczV6gzxbotvQag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.37.0/24
Signature Algorithm: sha256WithRSAEncryption
57:85:f8:ed:2e:cf:7d:5f:ce:fd:78:d3:18:17:97:5a:27:01:
f3:e6:f1:44:dd:4a:63:7f:7e:74:22:2d:01:34:e9:fb:31:75:
f7:0d:35:f6:9a:d9:e9:59:2b:a3:44:ea:c1:0a:7e:18:76:b0:
e6:59:01:c5:6a:a1:26:e9:f9:f1:4f:d6:a0:2f:53:27:54:22:
fa:e1:a9:0b:92:6a:b1:16:e6:35:35:5f:3e:93:f3:02:39:e5:
b4:0c:0f:a6:0d:4a:5b:e6:d9:8e:f6:01:c8:a4:aa:69:c4:2c:
64:a6:d1:5c:41:b7:ef:26:96:b2:db:55:57:3c:1b:59:ff:89:
4e:99:4e:50:10:18:92:0b:65:83:e5:c4:e1:ad:ba:64:4f:92:
38:40:7d:41:c7:af:ea:ef:90:d7:30:e2:c0:b4:23:cb:67:fc:
37:b3:ad:c9:c4:b0:1e:0b:fc:c0:5a:c9:b0:ec:9d:36:10:72:
3b:b1:11:14:1f:c4:80:32:2b:92:15:74:fa:b6:f9:a6:e9:c2:
e8:aa:00:ba:9a:b1:29:cb:82:4d:85:2c:2c:f1:ea:66:1b:e1:
26:2a:07:83:82:02:ec:fb:8a:7f:fd:43:d9:ad:1a:11:89:be:
8d:97:78:fd:36:54:5a:70:20:ea:ef:31:8f:a3:f1:95:41:c1:
43:62:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org