Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sFQbE8o-gA_att1JU1lyaoYzjOA.roa
File: sFQbE8o-gA_att1JU1lyaoYzjOA.roa (raw, json)
Hash identifier: +golMYtxYkz/HWEuUZ5dbsWQOs0Cimds0SF8ByYid8w=
Subject key identifier: B0:54:1B:13:CA:3E:80:0F:DA:B6:DD:49:53:59:72:6A:86:33:8C:E0
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01860DBD8FE977CA1BFEA26060224696F187
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sFQbE8o-gA_att1JU1lyaoYzjOA.roa
Signing time: Wed 01 Feb 2023 16:09:32 +0000
ROA not before: Wed 01 Feb 2023 16:09:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/19 maxlen: 19
46.162.0.0/18 maxlen: 18
193.111.156.0/22 maxlen: 22
46.162.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 02 Feb 2023 09:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:bd:8f:e9:77:ca:1b:fe:a2:60:60:22:46:96:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 1 16:09:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0541b13ca3e800fdab6dd495359726a86338ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:59:db:9c:e4:0b:97:48:99:eb:8c:1e:d2:
b5:ad:34:72:66:41:a1:42:29:d7:ae:d2:c7:4c:78:
bc:52:05:a3:c6:c7:68:25:b0:2b:fc:78:8d:a3:2c:
5a:1c:89:93:ea:0a:94:fa:e5:f0:0b:05:4c:06:2d:
a8:83:7e:1f:7e:c8:02:f3:eb:a6:f7:2d:e0:6b:ec:
2d:6f:51:cd:6a:af:3b:25:f5:3f:03:4b:c4:cc:25:
90:43:f2:42:8e:28:07:9f:81:c6:4d:2d:5d:ec:f8:
8a:b7:ad:70:07:21:ba:75:e5:f9:6a:3f:82:59:cc:
16:58:85:54:29:85:6c:5b:0d:a0:75:50:77:7b:0b:
22:84:a9:3a:c7:79:5c:d1:96:fd:02:f5:3c:61:7c:
06:c1:ec:5f:78:03:8a:57:fd:b7:ba:5e:65:f4:21:
3a:3c:55:a2:d7:8a:7d:77:0c:7a:1e:21:6a:0c:61:
87:87:36:cc:c6:95:23:47:59:ac:ba:51:b2:06:da:
58:9f:f0:cc:b3:39:89:09:14:d4:13:60:68:b3:6d:
80:0b:2b:02:6b:09:1f:bd:cc:97:25:37:83:17:a0:
06:bf:e9:99:c8:c7:ce:c8:be:09:43:37:a4:47:62:
17:8e:f9:0f:4c:43:d5:56:79:4b:c0:7f:13:45:74:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:54:1B:13:CA:3E:80:0F:DA:B6:DD:49:53:59:72:6A:86:33:8C:E0
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/sFQbE8o-gA_att1JU1lyaoYzjOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:c6:2f:e7:c5:01:22:e4:6c:61:81:40:1a:25:04:ea:87:ed:
1d:ea:1f:50:7c:e8:bb:98:79:9b:10:99:d9:ef:c5:68:ab:84:
53:1b:22:b3:77:f1:af:18:83:7f:65:2f:65:3a:7c:a6:83:af:
5a:ae:4e:78:c5:42:f2:5a:d8:6a:7b:80:0d:7b:2a:df:d4:1a:
83:59:4b:67:1f:05:53:20:fd:a7:30:8a:18:97:f9:f0:0f:37:
99:e7:22:98:8f:b8:68:3e:ce:a8:50:a9:77:05:e0:df:97:00:
7f:0d:88:7f:68:5e:25:ab:8f:65:d6:1c:69:d1:33:1c:6a:25:
78:68:b1:84:0a:c9:26:2b:e5:58:b1:23:0a:27:3a:2b:b4:a8:
44:ff:e0:88:1d:9b:10:3a:bc:e3:db:6d:eb:ed:95:90:a2:4a:
d7:1d:2c:a4:1e:c6:69:fc:a8:b6:af:66:3b:31:64:ff:62:f0:
cd:27:5e:3a:8d:32:1b:37:b6:00:f0:ec:da:a1:6a:d2:9e:d8:
8a:a5:b2:c5:95:b0:a1:79:62:00:ca:6e:b5:86:f4:58:8b:89:
5d:10:1b:91:5c:43:a7:48:08:6c:df:65:73:97:d4:6f:9e:e1:
50:77:27:75:35:9d:69:c4:b2:16:35:1d:e9:11:b8:a3:77:36:
17:23:c5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org