Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yBuxbjRWyaFwemW4hY71KekvAz4.roa
File: yBuxbjRWyaFwemW4hY71KekvAz4.roa (raw, json)
Hash identifier: 8lzBd69AZh+wP8oBoWlSfygT/wd4NyQgGAr0XEvyjYg=
Subject key identifier: C8:1B:B1:6E:34:56:C9:A1:70:7A:65:B8:85:8E:F5:29:E9:2F:03:3E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01877E8427197500DEFAD363DBE3BB0214FA
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yBuxbjRWyaFwemW4hY71KekvAz4.roa
Signing time: Fri 14 Apr 2023 06:46:42 +0000
ROA not before: Fri 14 Apr 2023 06:46:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.27.0/24 maxlen: 24
46.162.25.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:84:27:19:75:00:de:fa:d3:63:db:e3:bb:02:14:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 14 06:46:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c81bb16e3456c9a1707a65b8858ef529e92f033e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:57:b4:1e:a9:81:b9:1f:46:cf:89:6f:8f:
8b:b4:84:64:6e:a3:b4:4e:bf:91:c2:dd:7e:e6:fe:
89:7c:b4:2d:5a:e2:53:9b:72:33:d9:1a:58:19:20:
3c:d0:9f:64:4d:71:84:5e:68:b0:c4:11:3d:99:3f:
16:d6:1b:ee:be:29:90:1c:51:72:a7:28:09:90:05:
18:3f:cc:9b:3f:59:d2:3a:d0:e6:3f:39:67:6f:ff:
bf:4d:0d:7e:ff:a7:34:3a:f3:7a:88:e0:1e:9c:2b:
fc:4d:2b:5c:b7:6a:5c:45:05:29:69:4d:14:fc:e7:
e3:83:8a:83:4e:7b:88:15:90:40:eb:a9:f2:54:13:
40:c7:0a:47:ea:f3:49:ec:f2:c0:b6:5c:b6:c1:e6:
c6:a1:9c:fb:8d:86:ed:5a:97:83:7a:5f:c7:00:59:
20:48:ca:d0:b7:3a:21:5b:a6:ee:00:ec:2c:2a:0e:
b0:1c:43:ee:36:ac:8d:02:04:67:a0:e6:b3:2d:f8:
e6:11:ae:2e:a6:c5:23:72:12:25:0a:54:7e:70:cb:
86:6a:90:e4:34:f3:66:ff:3e:28:4d:7d:de:39:32:
31:86:8c:75:57:21:bd:65:00:12:41:79:09:03:26:
d4:f0:89:4f:b2:67:6b:32:94:ea:04:32:e0:76:59:
0a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:B1:6E:34:56:C9:A1:70:7A:65:B8:85:8E:F5:29:E9:2F:03:3E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yBuxbjRWyaFwemW4hY71KekvAz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.25.0/24
46.162.27.0/24
46.162.48.0/24
46.162.50.0/24
46.162.54.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c0:55:45:b5:49:13:a1:07:ea:da:18:44:63:f9:ff:44:62:
f4:28:91:00:6e:1b:bc:dc:5d:dd:59:56:db:1f:fb:22:7b:e4:
08:70:49:34:d2:ae:4c:62:82:e9:2f:d1:13:84:62:ad:6e:5e:
62:e5:5f:17:ff:32:c4:3c:15:d1:78:37:a6:60:44:c6:fa:1f:
3c:09:39:40:7f:75:51:ce:39:93:82:c3:72:3c:ad:83:31:56:
32:00:24:14:d7:25:7e:1d:fe:06:1d:bd:f8:fe:b1:a5:37:44:
5a:b2:2c:74:90:2e:6c:70:14:32:9d:51:9c:d9:f2:c9:b1:34:
e7:01:60:9c:a6:29:58:62:fa:2d:39:b8:50:0e:68:16:ff:b7:
7b:21:fc:e1:ed:1d:9e:f6:14:a9:58:60:d7:17:63:21:2e:22:
af:5c:f1:f7:ab:b9:e2:14:bd:58:94:b6:67:18:3b:0d:e1:ce:
92:7f:3f:d9:78:77:f8:8c:73:29:e5:e5:59:cc:5b:e1:25:a9:
64:0a:41:07:2a:09:df:0a:d6:b3:8e:02:8b:92:df:d0:8c:9f:
53:f5:66:41:d7:3c:42:ab:a3:bd:95:8b:5b:c8:97:02:05:fc:
ed:dc:1b:cc:aa:32:e2:79:44:17:ac:f8:fe:09:11:73:57:c0:
18:fd:86:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org