Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xZoTKDcPlN2YURBhFc2ITjbCepo.roa
File: xZoTKDcPlN2YURBhFc2ITjbCepo.roa (raw, json)
Hash identifier: fczbGyTtiI5WItyLAj4mMC+NIO+QswZD1Hog2mO1ajQ=
Subject key identifier: C5:9A:13:28:37:0F:94:DD:98:51:10:61:15:CD:88:4E:36:C2:7A:9A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188A6FCE6F64E6037ADAE66D9891DCEE26B
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xZoTKDcPlN2YURBhFc2ITjbCepo.roa
Signing time: Sat 10 Jun 2023 20:26:12 +0000
ROA not before: Sat 10 Jun 2023 20:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.51.0/24 maxlen: 24
46.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 16:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a6:fc:e6:f6:4e:60:37:ad:ae:66:d9:89:1d:ce:e2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 10 20:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c59a1328370f94dd9851106115cd884e36c27a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:13:95:40:21:1c:dc:84:ce:6e:18:e1:10:
ea:0a:2c:3a:40:da:ae:10:52:0a:ce:07:2d:d7:98:
c1:32:7b:ca:b5:a3:a5:d6:db:46:fe:ac:21:e2:eb:
dd:f9:cf:10:26:01:31:b6:fe:bd:fb:d3:86:41:00:
c5:0c:ff:ef:08:90:dc:2d:6b:27:f9:a9:e8:07:6f:
64:e4:42:49:01:31:88:a9:f4:7a:30:d5:b5:f9:8a:
2f:1f:7a:3a:8a:11:24:4c:78:a0:18:df:de:47:be:
63:e1:e2:c8:c5:06:09:66:0f:e8:72:56:ad:bf:7c:
4c:f5:fa:d6:e5:be:90:72:61:4f:81:f6:1e:51:8b:
c4:ce:19:46:76:9a:37:48:09:e4:8b:80:34:6a:b5:
a4:e9:d1:07:09:9f:db:aa:df:a3:c0:2a:ff:bd:47:
1b:40:53:1f:d4:f4:ce:0a:96:86:fd:dc:d5:1f:92:
f8:32:34:fa:26:5b:54:ea:cf:17:e7:a8:97:5e:4b:
d3:bf:82:ea:05:11:ed:2b:e1:cd:6d:1b:b6:d2:90:
86:0c:8f:1f:ea:d2:80:45:9c:5c:e6:c5:ae:32:54:
b4:c6:97:41:19:4f:62:ba:88:9f:3a:d2:bf:9a:a0:
d3:02:3e:c7:12:00:4b:c2:4c:3a:65:45:ba:21:1d:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9A:13:28:37:0F:94:DD:98:51:10:61:15:CD:88:4E:36:C2:7A:9A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xZoTKDcPlN2YURBhFc2ITjbCepo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.51.0/24
46.162.62.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5d:51:ef:b5:5b:e7:f9:a1:94:b2:d6:b0:5f:05:a7:de:a6:
50:fa:39:f4:e2:1a:f4:7e:22:79:70:ad:13:bf:57:7c:8c:75:
82:aa:48:d4:e3:76:77:02:61:22:8d:c1:e2:bf:6c:8f:1a:85:
20:b0:74:78:19:1f:30:83:35:2f:b5:b5:8d:a2:1b:b0:b7:45:
93:d4:92:fa:35:8a:af:aa:89:89:fa:2d:78:47:95:cc:03:bd:
1b:38:6b:59:aa:40:f6:dc:3e:3f:82:0b:db:f2:1b:52:43:6a:
a4:52:e4:1f:04:7b:dd:a8:68:7a:1f:65:9e:99:fe:a0:38:33:
35:ab:50:7d:83:be:24:f4:db:1d:6e:35:ca:38:4d:18:14:9a:
76:ba:d3:f0:09:a9:da:2d:74:86:73:58:b4:8e:28:cd:ba:42:
ed:f0:51:48:05:c1:b0:15:29:bf:5d:71:1a:fd:17:cb:f9:43:
a0:fb:ea:80:22:e6:e4:99:0f:12:93:c2:77:34:87:78:90:b3:
2c:8f:d5:6d:39:82:d2:64:87:6f:c6:e5:0f:70:21:44:73:6a:
e5:a3:8f:70:bd:26:73:f0:37:a0:08:ec:bb:d9:c9:77:a9:68:
f6:1c:dd:3b:d7:5f:0b:38:e7:6a:17:fb:56:cd:8c:e9:29:7a:
c5:f6:0d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org