Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/y4y7EIaOP9FqKFRct49qeGoT1VU.roa
File: y4y7EIaOP9FqKFRct49qeGoT1VU.roa (raw, json)
Hash identifier: YWJpMsfFhzx3TQtJUSaGToHmUNaFosq6oMC/iPTL/3g=
Subject key identifier: CB:8C:BB:10:86:8E:3F:D1:6A:28:54:5C:B7:8F:6A:78:6A:13:D5:55
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0186599306A82D75A9C90AB1055A222A26D1
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/y4y7EIaOP9FqKFRct49qeGoT1VU.roa
Signing time: Thu 16 Feb 2023 09:34:12 +0000
ROA not before: Thu 16 Feb 2023 09:34:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208498
IP address blocks: 46.162.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 08:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:93:06:a8:2d:75:a9:c9:0a:b1:05:5a:22:2a:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 16 09:34:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb8cbb10868e3fd16a28545cb78f6a786a13d555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:c2:3a:a0:84:ba:7e:ee:5f:c5:3f:bf:64:
95:63:39:25:b2:d5:be:98:48:8f:f7:83:d3:90:a5:
71:b5:36:1d:64:b5:f6:1c:fc:50:73:04:71:d7:c3:
fc:df:f2:66:f1:54:6e:4b:19:4b:87:0b:a3:c1:15:
b6:d0:9a:a4:e7:10:45:90:e8:07:35:2e:1f:dc:2c:
f1:33:ee:62:0b:be:93:01:d3:85:a9:32:9c:ce:c8:
cd:46:09:30:3b:79:53:a9:aa:cd:6f:e8:f0:1d:ea:
72:51:ce:57:32:11:fb:f9:c1:a3:25:f7:4d:aa:2c:
7e:a8:0f:f7:b9:59:cc:08:ca:c2:87:8c:6f:ac:5e:
b9:59:a3:fa:81:23:1f:95:7b:20:35:b5:f3:6a:76:
2f:9f:c8:c9:6f:d0:e8:53:26:1c:2e:48:87:7e:39:
83:4a:42:ad:dc:88:cf:25:8f:d7:26:3d:ae:48:aa:
42:11:d3:db:18:38:7f:8b:7a:52:58:01:fe:0e:b6:
4c:d7:50:6c:70:5d:95:8d:20:01:54:3e:9e:86:c6:
70:3f:dc:b1:48:46:7c:0f:2c:8d:03:3c:c3:db:6d:
ce:41:8a:31:1e:96:b7:57:3d:40:52:10:29:c0:f8:
fa:06:33:eb:1c:05:09:d5:ee:a7:54:94:d6:60:29:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:BB:10:86:8E:3F:D1:6A:28:54:5C:B7:8F:6A:78:6A:13:D5:55
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/y4y7EIaOP9FqKFRct49qeGoT1VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
63:98:73:13:04:75:7e:55:c5:5f:a4:b2:c2:b7:86:c3:db:11:
f1:f9:4c:7d:28:d1:5c:09:15:37:27:34:7f:9a:9d:26:dd:9e:
63:70:87:cd:90:e9:f2:d1:8b:92:cd:80:f7:3c:e4:0e:07:e4:
f0:52:de:4d:d6:8f:d0:e6:a6:de:0e:51:fd:a2:9e:db:92:7c:
b3:28:1e:76:80:19:6b:d6:c5:2a:08:69:32:91:cd:e8:94:42:
9b:9f:ad:9c:25:02:2c:fc:cf:db:93:e0:c2:de:8b:57:39:81:
7c:5d:b8:12:9f:9e:39:35:4a:36:c9:b0:b3:64:17:91:9d:68:
cc:8f:4e:6d:2c:1e:12:fb:40:f6:cb:fc:46:f6:76:cd:9e:1b:
60:04:5e:be:cd:28:1e:e8:53:82:68:9a:83:ac:76:51:e3:9c:
8b:49:b3:87:fb:6a:85:1c:70:6b:7d:2c:3e:8b:c9:da:cb:f8:
59:e2:a1:67:c9:b3:ea:18:c7:7a:05:3c:d0:f0:ca:3e:95:28:
ac:4e:5c:29:c7:fe:77:95:af:a6:8f:1b:86:74:21:56:89:b6:
00:31:dd:00:63:59:44:8b:d8:ff:74:a8:67:de:10:a4:2c:e3:
07:e5:ee:73:5d:2e:fe:95:cb:74:10:d4:86:fb:85:67:bc:c0:
d8:35:79:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org