Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wI12IJMRzXtj8Gp-6l5VdWXMf3Q.roa
File: wI12IJMRzXtj8Gp-6l5VdWXMf3Q.roa (raw, json)
Hash identifier: 6gRIXkF1KHZjampLSEnnwCJDA13e0vKnUmTERzA6zDE=
Subject key identifier: C0:8D:76:20:93:11:CD:7B:63:F0:6A:7E:EA:5E:55:75:65:CC:7F:74
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187CC40F4761F73E8667A472BAD2A1ECD96
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wI12IJMRzXtj8Gp-6l5VdWXMf3Q.roa
Signing time: Sat 29 Apr 2023 09:03:41 +0000
ROA not before: Sat 29 Apr 2023 09:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.2.0/23 maxlen: 24
46.162.4.0/22 maxlen: 24
46.162.8.0/21 maxlen: 24
46.162.27.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 09:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:40:f4:76:1f:73:e8:66:7a:47:2b:ad:2a:1e:cd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 29 09:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c08d76209311cd7b63f06a7eea5e557565cc7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:88:44:e5:b5:3e:aa:85:f6:fe:4b:e0:ce:5d:
f5:21:12:c2:96:05:27:39:a0:3c:cb:ed:23:0d:ee:
16:59:bb:27:9d:13:30:73:bf:60:05:c7:4b:a0:7e:
9d:26:48:d8:fb:68:1f:54:29:dd:d3:64:f7:ad:36:
cc:01:30:b7:5c:9c:80:a4:26:8e:cf:fc:a5:d3:75:
7d:7a:56:99:26:0f:cd:81:87:1c:6e:78:11:24:16:
3f:55:26:e1:7e:f0:fc:b2:82:96:8a:ea:2b:ce:42:
6d:12:ed:af:e8:4d:16:47:33:23:39:ba:6a:9d:01:
80:2a:f7:a0:eb:34:90:d5:6a:02:4c:a3:36:42:5d:
3d:3e:89:02:cc:f2:dc:e8:a5:a7:c8:f2:e8:7c:db:
50:01:41:82:86:27:d7:32:62:3e:76:3e:32:cf:36:
48:c9:b6:26:c8:d5:96:5f:77:1a:c6:a2:49:a4:7d:
1a:11:3a:1e:9a:a1:30:b9:41:18:ef:17:47:94:0c:
4a:8f:25:2b:f8:d5:de:47:13:bc:84:c7:73:23:8f:
38:6c:0d:f2:70:3d:c6:df:2b:3e:3a:90:98:43:7d:
6b:44:86:1b:5e:6b:1c:16:1a:03:ff:f3:ab:69:46:
14:27:8a:d5:11:58:2a:af:01:91:89:af:8d:89:95:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8D:76:20:93:11:CD:7B:63:F0:6A:7E:EA:5E:55:75:65:CC:7F:74
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wI12IJMRzXtj8Gp-6l5VdWXMf3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0-46.162.15.255
46.162.27.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ba:23:e7:f8:c5:34:c6:8c:b2:61:e5:9f:13:89:72:38:ff:
0f:8d:2d:f4:91:75:2c:20:ce:e9:10:7b:7d:4e:ba:9b:52:28:
30:7b:8d:70:5a:7d:bb:4b:9f:e2:6e:38:5d:8f:c5:4b:39:9f:
f6:55:de:77:2c:2c:13:da:83:4e:d9:18:0c:ef:9b:73:8f:a5:
05:41:d4:7e:64:de:60:dc:87:e8:a2:92:da:b1:cc:53:6c:72:
cf:62:83:19:23:ff:f0:87:73:4a:69:cc:cb:13:0d:2b:45:f3:
47:6b:8e:34:89:c7:fb:1d:7f:74:34:57:66:b4:4a:27:81:76:
cb:d4:23:19:54:ff:ff:ad:2b:33:af:cf:25:81:e6:bf:3c:e1:
f3:9f:d4:b1:a9:93:65:3c:6b:0e:01:ed:5e:3f:4d:4c:02:81:
94:95:54:e5:00:cd:7d:fd:90:10:06:e6:87:20:a5:7d:12:ce:
22:d7:b3:fb:9f:51:1f:4e:9b:25:e6:5d:e7:aa:8b:2a:f5:42:
c4:1e:0c:0a:04:1b:33:39:0d:76:97:cd:18:25:54:5e:64:a9:
c3:d9:1a:3a:7b:f1:4a:29:b4:99:ab:9d:93:0b:33:fc:15:57:
16:16:ed:98:d2:8e:ac:ab:f0:73:6a:bf:90:3c:6e:e9:63:ae:
5f:7b:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org