Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/x-c2FKMU15YJFM2w4x_7qNKUaOw.roa
File: x-c2FKMU15YJFM2w4x_7qNKUaOw.roa (raw, json)
Hash identifier: uTqLfssynuOZOSY4yGXNDS4mxBJJlV+ZIeLB61wuFBc=
Subject key identifier: C7:E7:36:14:A3:14:D7:96:09:14:CD:B0:E3:1F:FB:A8:D2:94:68:EC
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188B0692FBFADB358B9C42A9BEF19D238AA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/x-c2FKMU15YJFM2w4x_7qNKUaOw.roa
Signing time: Mon 12 Jun 2023 16:21:03 +0000
ROA not before: Mon 12 Jun 2023 16:21:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.162.16.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
46.162.30.0/24 maxlen: 24
46.162.37.0/24 maxlen: 24
46.162.63.0/24 maxlen: 24
46.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jul 2023 19:04:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:69:2f:bf:ad:b3:58:b9:c4:2a:9b:ef:19:d2:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 12 16:21:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e73614a314d7960914cdb0e31ffba8d29468ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:fe:25:19:7d:cd:2b:f4:9f:dd:e0:43:32:
33:b3:c5:2b:cb:33:a9:ac:ca:8b:63:ed:fb:ad:a7:
5b:43:8f:22:c6:1d:e7:86:77:74:5b:fc:17:1f:36:
cc:20:fe:15:6f:d5:5b:10:76:9e:25:e4:cf:98:6a:
cf:a4:95:0d:f3:32:ae:4a:86:d7:06:1d:5d:1c:bb:
15:c2:a9:b6:95:30:7f:df:7a:b2:72:2a:85:06:fd:
89:2f:4e:32:14:c1:8e:a8:3d:e3:62:14:f8:14:a9:
81:d1:c8:17:19:19:e3:a3:e4:64:43:91:0e:87:3f:
18:d9:27:cb:af:7c:1d:4c:14:4b:1e:b7:9c:a0:2e:
89:89:4e:0f:e9:0f:3a:11:80:fe:99:a1:83:82:ab:
14:7b:30:45:55:b8:a9:54:91:f6:d8:9b:7f:17:dd:
be:99:d0:db:1c:26:43:59:e5:7a:76:ad:7d:a2:d4:
e9:ee:94:34:07:3f:36:43:4d:69:d0:ae:90:0e:48:
8a:99:e7:78:31:88:de:f4:bd:03:45:90:4d:80:25:
3e:6e:f2:d0:dd:54:86:99:92:9b:56:ce:2b:2a:71:
76:98:03:65:14:11:2a:49:aa:0e:aa:1b:ba:98:8c:
aa:8c:02:b8:e2:0e:7d:24:cc:de:44:c8:83:5b:71:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:36:14:A3:14:D7:96:09:14:CD:B0:E3:1F:FB:A8:D2:94:68:EC
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/x-c2FKMU15YJFM2w4x_7qNKUaOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.16.0/24
46.162.28.0/24
46.162.30.0/24
46.162.37.0/24
46.162.62.0/23
Signature Algorithm: sha256WithRSAEncryption
57:f8:cc:c8:09:67:8c:dc:57:19:73:54:96:a7:86:f1:e7:eb:
95:e4:2b:f8:bf:81:24:86:bd:5f:46:03:ac:1d:e8:da:9f:a9:
fc:69:17:7e:d8:ed:b6:ad:9b:e9:36:0d:e6:e0:b1:b8:34:27:
02:e1:d2:59:1c:53:36:15:3a:69:b2:c7:bd:93:79:94:55:8b:
3b:2e:fe:29:77:7d:b4:4e:85:c3:22:b6:22:a3:c8:aa:af:0e:
c6:ec:cf:bd:ff:46:9b:ea:f4:2f:78:bb:1f:d9:65:75:db:98:
80:49:ad:13:f1:1a:0a:fb:aa:45:0c:c1:6a:ef:e2:f6:6a:d3:
18:a5:b4:68:e9:79:98:09:75:5b:a9:fb:0c:dc:20:df:66:fa:
ed:f2:61:db:ed:23:32:de:0b:d4:7b:88:1d:e3:77:93:7c:93:
d2:84:0b:93:44:14:cd:d2:72:3a:16:fd:8c:11:64:3f:3c:4b:
9b:7f:3c:a3:22:08:f3:30:56:39:9d:2a:50:aa:44:0c:dc:81:
7e:3f:04:13:1b:a0:92:04:5c:cf:4b:cc:53:c6:44:5b:bd:b8:
3a:f9:31:ed:16:6c:ac:9b:e5:6a:30:87:1e:e2:7f:12:d5:7c:
81:a8:f9:db:9c:25:74:8a:85:a8:1d:f4:ef:ed:9c:b1:48:7a:
d1:c4:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org