Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vhBIDdiFHqJU_poFraqPoR9Uqu0.roa
File: vhBIDdiFHqJU_poFraqPoR9Uqu0.roa (raw, json)
Hash identifier: pvsV+oxz5rFwlODxv7QBfuPfZK4+r3uq4ncyZgk/fDU=
Subject key identifier: BE:10:48:0D:D8:85:1E:A2:54:FE:9A:05:AD:AA:8F:A1:1F:54:AA:ED
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189EDB0DF20960EBD853203F08E49D83269
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vhBIDdiFHqJU_poFraqPoR9Uqu0.roa
Signing time: Sun 13 Aug 2023 06:58:58 +0000
ROA not before: Sun 13 Aug 2023 06:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 12:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:b0:df:20:96:0e:bd:85:32:03:f0:8e:49:d8:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 13 06:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be10480dd8851ea254fe9a05adaa8fa11f54aaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:49:6b:d2:27:37:6a:0f:45:de:38:31:15:
8f:af:b1:25:3b:a4:af:75:98:0b:f8:c9:cd:82:90:
d3:e5:c3:e5:da:31:b0:b1:2a:20:1b:14:8f:ec:cc:
3d:76:c9:f6:a0:14:72:40:4a:8e:1a:8b:3b:75:06:
55:9b:2a:68:ed:9d:8d:d7:83:8b:0f:04:f9:c0:cf:
ff:ea:6d:64:fa:80:22:e1:aa:69:9a:6d:b0:65:38:
6b:0b:b0:11:17:e7:37:2b:bd:80:7b:2d:2d:d9:75:
1f:74:ed:1f:79:f3:67:52:12:74:0c:09:72:b5:b4:
ed:81:0f:d4:67:74:a8:ab:fc:dd:95:93:5a:02:d7:
d4:58:00:01:d4:da:b1:c0:89:5a:59:96:66:67:ad:
84:04:1d:a3:7c:c7:77:8e:6b:cd:8a:0a:e0:69:59:
25:6f:a3:f2:80:45:43:9f:88:c0:52:46:f0:f2:48:
3c:6a:2f:13:7c:a7:13:cb:da:bc:07:15:c2:22:85:
1f:3e:55:31:02:ae:78:83:36:51:d4:d7:96:0a:3c:
09:2d:12:9c:be:38:e5:5a:27:9c:11:81:0a:c2:44:
6f:2c:60:d7:af:4f:63:f5:38:31:80:5c:b5:49:6a:
2c:1c:2a:82:16:f8:28:7f:19:5d:ea:45:51:c8:f3:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:48:0D:D8:85:1E:A2:54:FE:9A:05:AD:AA:8F:A1:1F:54:AA:ED
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/vhBIDdiFHqJU_poFraqPoR9Uqu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.13.0-46.162.14.255
46.162.20.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fd:eb:ae:05:5e:33:51:ff:96:6c:68:26:ea:64:ff:b2:57:
39:ac:3a:5b:57:ce:90:88:7c:54:7c:dc:91:4c:fa:4c:68:ec:
70:bc:21:d3:1d:9f:14:81:fd:47:82:47:4c:e7:0d:d2:80:e2:
9b:ac:62:64:ed:d8:7c:c0:37:9c:9e:1e:0d:34:ff:d8:9d:10:
15:58:73:93:a2:24:7b:3c:73:3d:c3:8c:ff:8a:36:45:97:40:
c9:f4:d2:5b:88:5a:f2:07:4d:b3:a2:4c:1b:73:f1:bb:d5:c5:
d6:26:ca:00:01:6e:12:0e:ce:8b:d8:2d:55:32:63:7e:c0:8f:
66:da:5d:60:d2:9b:c4:36:0c:94:2e:ea:92:60:13:a7:a2:08:
36:05:3b:95:e2:e6:9b:71:a8:24:fc:c6:2a:dc:72:11:8c:44:
d2:3e:87:81:6d:fc:a5:a5:32:14:01:1e:02:58:f3:4b:80:a7:
0c:d9:eb:4f:a0:3d:85:d6:03:e6:d9:6f:85:2c:01:7f:32:51:
1f:f7:ee:14:5d:39:25:49:9b:f4:de:db:98:0e:13:ab:bd:44:
09:44:7e:94:11:19:0b:a8:13:8c:50:66:1e:29:29:d1:40:09:
29:a3:7e:55:18:67:76:f6:7c:6e:6e:e9:40:e4:4b:2b:7c:d3:
0a:14:4e:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org