Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wty36O-J0lbWtfJzh5iqPvxuOVs.roa
File: wty36O-J0lbWtfJzh5iqPvxuOVs.roa (raw, json)
Hash identifier: K4nGSe+y397I9x5huYR4JwxygEY0UE5TMa5m8lsn+DY=
Subject key identifier: C2:DC:B7:E8:EF:89:D2:56:D6:B5:F2:73:87:98:AA:3E:FC:6E:39:5B
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01880FE953C52F785A569D505E76FBA88B4D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wty36O-J0lbWtfJzh5iqPvxuOVs.roa
Signing time: Fri 12 May 2023 12:22:09 +0000
ROA not before: Fri 12 May 2023 12:22:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.12.0/22 maxlen: 24
46.162.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 15:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:e9:53:c5:2f:78:5a:56:9d:50:5e:76:fb:a8:8b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 12:22:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dcb7e8ef89d256d6b5f2738798aa3efc6e395b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:56:f4:76:ae:b2:7f:4b:b3:7d:6f:c9:49:
89:ee:7b:24:be:50:f9:81:56:63:c7:58:90:8e:99:
7e:16:ec:0f:7c:78:25:57:41:de:a8:a4:d6:bd:14:
a8:3d:dd:2a:a2:1f:01:5b:a9:dd:83:34:9d:59:c1:
ec:dc:a8:5d:dc:be:10:5d:e2:4e:a7:08:7d:bb:d1:
fc:d8:e5:c4:95:35:82:ef:f8:c9:ab:00:5f:44:3f:
39:98:e9:7a:16:4a:3b:de:af:96:c4:8f:0a:3c:91:
75:a0:34:0d:1b:05:89:bd:4c:da:e9:1f:b6:28:e3:
0a:ac:6c:96:ac:df:6a:3e:b3:3b:3b:81:ce:18:b1:
d7:28:9f:40:97:fe:d7:16:b3:0a:8f:c5:e7:c8:e5:
81:4b:72:da:4c:6e:ea:82:2a:67:a5:78:aa:18:bb:
39:c0:bf:40:ac:76:ed:99:88:5b:c5:1f:de:87:a8:
69:f6:24:e2:ba:15:c2:48:1a:06:31:e9:e3:93:3f:
d1:b9:b8:97:ef:ff:6e:99:35:52:5c:af:05:8f:2a:
4a:05:d5:ab:59:04:ff:80:19:e7:79:04:84:be:52:
4f:34:dc:ea:cc:b4:4c:b0:fe:4e:40:e0:c1:f8:48:
10:0a:01:be:1c:ac:52:82:5a:cc:25:80:1d:e1:c1:
0a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:B7:E8:EF:89:D2:56:D6:B5:F2:73:87:98:AA:3E:FC:6E:39:5B
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/wty36O-J0lbWtfJzh5iqPvxuOVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.12.0/22
46.162.26.0/24
Signature Algorithm: sha256WithRSAEncryption
85:22:c1:bc:3f:6f:cb:cc:11:72:fe:22:07:2f:4b:82:1c:f2:
4f:54:cc:2b:40:54:fe:86:64:1d:5d:74:3e:16:cc:80:fc:40:
64:16:79:6a:27:99:fa:8e:20:28:83:f4:13:00:f5:92:26:8e:
b3:94:f5:4f:0e:5e:5d:94:62:75:c3:8a:31:b9:3e:88:f2:7a:
c1:b5:66:bc:65:c4:1d:22:ce:28:cc:23:ec:86:0d:71:5e:e8:
7e:58:db:5c:93:6a:5d:fb:b4:e4:f4:a5:50:16:c0:f7:7b:14:
2e:38:1f:89:f5:9a:13:fa:f8:f9:da:9b:5c:8e:d2:89:2b:30:
9a:d7:db:2e:e2:77:2b:7c:5d:37:ab:7f:54:2b:4f:bb:f1:28:
c9:46:40:43:ca:d7:5e:7c:7e:c6:a9:4b:33:71:4f:1f:9a:23:
bb:80:a9:6c:07:b3:53:3c:cd:7a:77:12:c2:35:f7:d1:9e:94:
11:51:5e:b0:2d:af:81:de:61:f7:53:41:a9:24:49:33:a5:6c:
0f:a5:64:56:3e:cc:3c:f6:97:f0:c5:cf:a5:b1:02:81:18:71:
5c:9b:f0:05:cb:77:bd:dc:b6:a1:23:76:aa:9b:e9:cf:dc:eb:
e1:87:ad:0f:ff:eb:11:38:a1:f0:b1:e3:81:81:cb:90:51:1d:
b3:61:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org