Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/rzBRk7TySxG6ERN-yEbJqr-h6EE.roa
File: rzBRk7TySxG6ERN-yEbJqr-h6EE.roa (raw, json)
Hash identifier: 8cAehfhxBexN7IPOkMMhwmcQkTGWNNYkqBdaG8z+MDw=
Subject key identifier: AF:30:51:93:B4:F2:4B:11:BA:11:13:7E:C8:46:C9:AA:BF:A1:E8:41
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01876BF2BA086F75E36752F2117F9507DD73
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/rzBRk7TySxG6ERN-yEbJqr-h6EE.roa
Signing time: Mon 10 Apr 2023 16:14:42 +0000
ROA not before: Mon 10 Apr 2023 16:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 46.162.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Apr 2023 06:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:f2:ba:08:6f:75:e3:67:52:f2:11:7f:95:07:dd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 10 16:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af305193b4f24b11ba11137ec846c9aabfa1e841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:f8:c8:ab:af:7f:d2:8e:74:e4:a7:9d:d3:
af:95:ce:14:23:10:8e:37:99:17:ff:3f:10:0d:b9:
5a:bb:f8:69:42:03:0e:4c:d5:a0:7c:2b:82:32:49:
b9:35:33:17:04:10:24:8a:48:08:a8:73:cc:21:ad:
db:14:f9:16:2f:fd:20:3f:70:ff:d5:a8:05:30:6e:
81:f6:9d:36:8a:94:f6:08:c4:ad:40:5b:94:b3:ef:
a7:29:ad:1d:b0:2a:a7:75:48:1b:f5:52:4d:47:38:
95:84:c2:39:e6:6d:f8:0d:cc:76:b1:5c:83:60:15:
8d:52:88:3b:82:11:84:51:3b:38:21:df:09:32:2e:
a2:20:e0:60:60:cd:17:42:40:c7:27:ab:ad:7f:0e:
17:6b:13:e4:0e:fb:fb:86:31:78:4f:90:41:bc:22:
aa:01:6d:72:55:b3:c0:a4:b7:9f:04:06:10:d2:9b:
95:01:2f:b5:7d:d6:5f:b7:94:0a:6b:84:62:50:2c:
93:74:a0:b1:7b:c1:0c:3b:56:8a:17:1a:77:ad:81:
c7:08:ce:ad:33:97:83:5d:15:a7:db:ac:77:b6:35:
48:ca:05:2b:fa:b6:82:85:ad:81:2c:9f:1e:8d:bf:
e4:74:c5:61:3b:b5:df:c9:33:5c:3f:b7:ed:95:04:
14:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:30:51:93:B4:F2:4B:11:BA:11:13:7E:C8:46:C9:AA:BF:A1:E8:41
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/rzBRk7TySxG6ERN-yEbJqr-h6EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.25.0/24
Signature Algorithm: sha256WithRSAEncryption
65:20:37:0d:0b:a2:2b:2c:c0:c6:b4:b2:65:2e:75:c6:c5:4f:
39:aa:39:06:6e:06:23:3a:e4:51:bd:ea:32:5e:24:04:55:59:
52:41:a7:8f:3f:0c:61:97:da:d4:02:db:61:76:05:78:6b:c1:
7e:3b:5c:65:07:a6:06:e1:34:a7:04:6b:ee:f5:94:d2:94:10:
70:99:cf:00:c5:d5:ee:88:95:de:3e:60:f2:7c:f1:a8:80:e6:
d4:41:86:c6:3a:73:a7:86:a3:32:2c:51:70:d9:76:c3:3d:61:
bd:a5:fd:21:b3:e5:50:c7:e1:fc:5e:06:70:34:e7:f9:65:d4:
a2:73:36:7e:49:23:c8:c1:87:57:25:04:ca:63:ac:e1:6c:9b:
c8:a1:4e:f9:b2:b1:e3:7d:2d:27:72:0e:3e:15:1a:4d:e8:d2:
cf:da:07:91:12:77:5a:00:25:e7:8e:b2:0e:d6:6d:8a:0f:cd:
40:2d:7e:49:6f:cb:f6:e4:cf:a2:00:b8:8c:73:83:3b:df:34:
ae:73:3a:66:cc:b5:11:9d:ea:9f:d3:7f:48:b6:db:47:50:be:
99:38:1a:9e:cd:2c:64:69:44:bf:a0:ad:ba:51:fd:51:2a:38:
6b:59:44:7f:02:d3:8e:41:47:a6:d1:ba:e9:7e:a2:5c:35:1c:
e3:e8:f4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org