Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vRzivLutx-jbizxZk0rdpkcKKAs.roa
File: vRzivLutx-jbizxZk0rdpkcKKAs.roa (raw, json)
Hash identifier: h/6wB2I5wSpft6oeZtao7+vHmupyCTqEYONBFMqURMI=
Subject key identifier: BD:1C:E2:BC:BB:AD:C7:E8:DB:8B:3C:59:93:4A:DD:A6:47:0A:28:0B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01861C41564BB0BA5E993935165E479FB565
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vRzivLutx-jbizxZk0rdpkcKKAs.roa
Signing time: Sat 04 Feb 2023 11:48:09 +0000
ROA not before: Sat 04 Feb 2023 11:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13347
IP address blocks: 46.162.32.0/22 maxlen: 24
46.162.36.0/24 maxlen: 24
46.162.38.0/23 maxlen: 24
46.162.40.0/22 maxlen: 24
46.162.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 06:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:41:56:4b:b0:ba:5e:99:39:35:16:5e:47:9f:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 4 11:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd1ce2bcbbadc7e8db8b3c59934adda6470a280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:33:27:3f:87:2b:6f:65:60:81:dd:1d:53:
02:5a:2d:9d:5c:63:cf:81:f7:3b:62:c9:04:91:fc:
15:7c:c6:3a:6e:ec:a6:a5:3d:a7:99:69:bb:8e:2a:
5c:6d:bd:e3:e8:84:56:fd:d2:e5:a2:f1:e4:4b:44:
a9:cb:39:61:ba:e6:ee:ae:cc:f7:12:62:c2:13:6e:
c6:dd:56:80:fa:83:b0:31:a7:0b:5d:16:5c:ed:02:
6d:4c:9c:e0:ad:84:dd:d0:75:bb:dc:59:44:65:d5:
96:25:ff:46:4d:bd:02:f0:8f:1f:ec:20:1c:0d:e4:
cb:d6:0b:09:6a:10:94:62:3d:45:3e:ee:71:f3:c1:
5e:48:77:1d:c5:40:61:6a:e9:a0:45:ae:b2:a5:90:
72:6c:50:5a:f8:62:32:d2:1e:64:10:7b:50:69:2b:
3d:a8:1a:67:f8:97:22:95:34:76:05:9b:32:ca:86:
b5:6c:98:12:2e:ef:f7:8b:23:1d:71:b3:fa:6e:af:
7b:14:e0:85:1d:bb:37:82:b7:63:9b:4a:f3:64:59:
24:19:1f:5d:36:57:8c:bf:bb:4f:ec:14:7a:de:6c:
03:c5:6f:42:b4:c2:65:e5:f5:ed:0a:c0:1b:2a:6c:
32:1d:cd:b4:b4:aa:6a:ac:6b:4d:5c:91:e6:16:12:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:E2:BC:BB:AD:C7:E8:DB:8B:3C:59:93:4A:DD:A6:47:0A:28:0B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vRzivLutx-jbizxZk0rdpkcKKAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0-46.162.36.255
46.162.38.0-46.162.47.255
Signature Algorithm: sha256WithRSAEncryption
12:59:01:c4:b0:f9:cb:03:b2:83:9d:37:45:18:c4:89:c6:4d:
ef:c0:5d:67:bd:5a:3f:73:4d:7e:15:d4:97:86:eb:de:e8:0a:
2a:a7:6b:b5:ff:96:d1:57:72:d2:bd:86:6b:19:65:67:2c:e3:
61:42:23:c2:84:93:d0:a1:be:5a:d5:76:fc:e4:e9:0b:aa:29:
e2:37:cd:b3:42:cd:65:ee:f6:a9:ad:de:ea:b9:a5:4e:69:b0:
b0:c4:9a:6d:3e:6c:0f:44:4d:e2:7d:65:64:ec:2c:f3:d5:f1:
f8:68:8a:7c:e7:9c:03:98:33:45:57:e4:70:34:14:6e:67:a5:
2e:88:84:5d:39:07:a0:34:49:71:92:3b:b3:13:7d:7d:7d:5f:
64:ee:10:2e:6e:57:80:74:5e:5c:95:ef:e0:59:82:ce:6d:e7:
88:81:96:0c:96:58:e8:b8:05:3d:3c:3c:a4:2f:59:59:67:f3:
f7:38:e9:fe:c1:08:37:c5:d8:42:97:6e:96:9d:80:00:53:6b:
da:e4:06:66:2c:0e:2f:3e:8d:32:8f:32:02:f6:a3:19:95:29:
74:ac:5b:d8:56:6d:32:09:3d:5b:2b:83:fe:f7:e5:32:5d:e0:
7c:28:6b:aa:ba:7f:d0:96:68:bf:c7:ba:77:ef:89:2f:98:4f:
30:52:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org