Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/7mdjlVbgNe0V_CN6ngjsjjvOnGg.roa
File: 7mdjlVbgNe0V_CN6ngjsjjvOnGg.roa (raw, json)
Hash identifier: aZ6C57/l6tHtJt8OjucvAHQ5bJxk0My8Q/+N6IN/pRc=
Subject key identifier: EE:67:63:95:56:E0:35:ED:15:FC:23:7A:9E:08:EC:8E:3B:CE:9C:68
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 018572C38078161DF4AD6F60FD3D65EFA777
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/7mdjlVbgNe0V_CN6ngjsjjvOnGg.roa
Signing time: Mon 02 Jan 2023 13:54:53 +0000
ROA not before: Mon 02 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56364
IP address blocks: 46.173.208.0/22 maxlen: 22
46.173.208.0/24 maxlen: 24
46.173.221.0/24 maxlen: 24
46.173.222.0/24 maxlen: 24
46.173.220.0/22 maxlen: 22
46.173.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:80:78:16:1d:f4:ad:6f:60:fd:3d:65:ef:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Jan 2 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee67639556e035ed15fc237a9e08ec8e3bce9c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:3b:34:f6:91:12:43:f9:9e:8f:14:5d:df:
db:b4:86:6e:ff:c3:df:6d:6c:b0:58:40:60:6c:22:
e6:22:a9:11:4e:f7:df:6b:8a:1b:a7:b6:7f:41:7b:
03:12:32:f1:c1:f9:fd:b3:c2:4f:d8:66:0e:d4:47:
53:48:4a:0f:ac:74:4d:ae:83:00:82:ad:ad:57:99:
c1:59:2d:69:21:1c:10:7c:1b:5f:df:fe:a4:43:a3:
c7:61:7a:b5:27:6a:db:32:b8:32:a7:e6:38:5c:fd:
f5:af:cb:13:e8:c4:f2:e9:5b:a9:57:4d:7f:f9:b1:
d6:62:b7:c7:99:49:e6:0f:2f:47:b8:e7:5a:50:c0:
12:df:b1:c6:3a:f2:31:2b:be:88:72:6a:37:dc:50:
92:ec:2c:32:f4:8d:39:1c:42:2b:de:92:c0:27:5d:
b1:bb:45:43:61:b0:3d:4d:a1:23:98:4c:66:b5:79:
b1:25:8e:2e:1b:46:a6:60:0e:c9:d4:f1:fb:47:34:
37:8e:96:8b:27:a7:d2:40:b9:51:27:dc:f0:72:8d:
2a:a8:91:e3:90:a9:7a:6c:b3:ba:dd:7d:f6:8e:fb:
fc:91:46:89:5e:f9:b0:44:13:ad:41:71:1d:85:8e:
ac:81:41:f6:62:36:29:be:00:13:31:70:cd:38:e4:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:67:63:95:56:E0:35:ED:15:FC:23:7A:9E:08:EC:8E:3B:CE:9C:68
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/7mdjlVbgNe0V_CN6ngjsjjvOnGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.208.0/22
46.173.220.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2f:47:61:68:59:45:3c:44:6f:c6:0d:23:91:f8:e7:5a:38:
9d:59:87:5c:19:d2:61:e7:a0:b5:6b:fb:b4:2a:f3:b0:7e:bb:
36:aa:e7:ff:e8:7d:30:f5:58:95:a4:61:31:b0:85:fa:4e:83:
9a:13:b3:a8:85:1d:41:d5:fc:e3:60:28:39:5a:c3:41:1f:38:
60:0b:3e:e0:e2:33:d9:f7:d5:54:e8:e7:4a:1e:86:29:e2:fb:
fe:08:7b:d1:42:36:87:21:12:16:e9:27:e2:20:15:43:4b:ee:
75:00:c1:5a:10:7c:65:d3:ae:74:8e:b4:87:7f:dc:60:bd:ed:
46:a9:4f:6c:ce:ef:60:8b:09:f3:22:23:00:88:e6:8e:dd:ec:
60:83:cc:cb:b5:2a:80:0b:e9:6a:fe:b9:0d:b9:4a:34:68:71:
a5:5f:c2:43:2f:69:83:8c:75:36:04:95:f5:c6:f2:35:a2:03:
32:1b:d1:f7:af:9d:0f:a2:5d:da:27:25:cc:04:59:9d:c0:6f:
49:ea:9a:85:f4:c3:81:8b:ff:1b:b8:18:ea:45:ef:cf:00:e4:
f7:cf:43:5e:c3:5b:dc:13:ba:a7:4d:aa:19:72:23:88:c6:80:
0e:a0:17:b9:12:95:61:6f:db:62:6e:28:58:38:42:f7:38:15:
e5:9e:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:06 2024 by rpki-client on console-ams.rpki-client.org