Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/t9qnBZdA5bWBTFh3wA193fCPXt4.roa
File: t9qnBZdA5bWBTFh3wA193fCPXt4.roa (raw, json)
Hash identifier: 8RrYLkRg2Yq8OMtgrhW1q55FDALPo4pY6pQHxZ97yJU=
Subject key identifier: B7:DA:A7:05:97:40:E5:B5:81:4C:58:77:C0:0D:7D:DD:F0:8F:5E:DE
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 0187AE19398256C17198E325DB397B505CEA
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/t9qnBZdA5bWBTFh3wA193fCPXt4.roa
Signing time: Sun 23 Apr 2023 12:31:41 +0000
ROA not before: Sun 23 Apr 2023 12:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 46.243.16.128/25 maxlen: 25
46.243.16.0/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:19:39:82:56:c1:71:98:e3:25:db:39:7b:50:5c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Apr 23 12:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7daa7059740e5b5814c5877c00d7dddf08f5ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:ce:91:a3:ca:83:d3:e6:d5:60:66:05:ad:
1d:10:63:be:14:93:ff:c4:1e:7e:e3:07:e9:86:64:
3f:b5:ae:e1:ef:9e:27:32:0a:ca:7f:9e:7e:f9:f6:
c1:0b:c8:07:de:16:3c:85:4e:b3:84:41:d4:44:bd:
8b:08:d6:7d:93:8c:fe:d7:0d:f7:75:90:5a:4f:ee:
d5:42:3a:81:3e:b9:ef:00:0f:7f:30:12:81:6c:f7:
87:a3:c4:10:45:f3:65:be:92:41:d9:0a:ff:85:cc:
4d:02:c7:2d:b6:24:fd:d1:e7:92:49:bd:45:7b:1d:
46:23:a8:96:f5:c7:7e:f3:f5:40:12:cc:6e:26:9b:
b5:d7:39:ab:1b:b2:bc:01:c3:3a:c8:0b:85:75:a4:
60:0c:51:1f:35:d1:73:3b:37:b5:bf:48:2d:47:91:
da:a6:56:24:db:4e:db:35:3b:b2:c0:b5:8f:66:67:
12:a2:2a:a3:0a:ce:1d:6d:f5:16:bf:84:69:ec:ff:
ec:28:a8:81:2a:fd:97:04:64:a4:0f:16:64:a4:36:
19:1b:f8:1c:5e:d9:5f:4c:82:45:c7:92:b9:ce:d6:
e9:7b:20:44:9f:df:08:3a:a3:d3:c8:0f:9a:ad:c3:
5d:f3:3f:48:9e:f8:86:15:f4:42:fc:4f:3f:b2:19:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:A7:05:97:40:E5:B5:81:4C:58:77:C0:0D:7D:DD:F0:8F:5E:DE
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/t9qnBZdA5bWBTFh3wA193fCPXt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:87:36:c6:b6:02:1c:3f:94:f6:62:17:e6:18:de:ed:78:5f:
57:53:89:b1:23:13:bf:3a:4f:1e:82:6c:d9:84:40:a4:ee:68:
b9:ae:c3:50:e0:41:ff:18:27:c7:fc:5e:16:17:8c:5a:df:77:
9f:eb:5d:c5:e6:02:b2:e1:94:ed:47:07:fc:a8:3b:e1:29:af:
8b:81:c1:0f:7e:df:ce:36:52:13:46:70:42:49:ff:55:79:32:
63:86:09:ae:01:c8:24:ee:7e:69:2f:9f:66:a6:ce:22:a9:11:
c0:d2:45:35:5f:6f:25:aa:8b:d1:db:cb:a9:78:81:76:17:7e:
b2:c0:e9:f0:a4:73:84:bd:0b:f9:e3:b2:ac:49:33:41:d6:41:
c2:b8:e3:30:9f:13:91:66:28:43:d2:e6:f4:07:2f:06:f7:5c:
f6:e5:9b:b1:74:c1:28:1b:53:4b:6f:06:b6:87:81:31:04:f1:
33:28:e8:eb:72:6e:f0:2e:2c:53:0f:66:60:66:05:50:24:77:
7a:38:e0:69:a3:02:3a:3d:c1:36:36:07:9f:ce:41:2b:82:68:
1b:5f:56:62:f3:69:ac:65:b7:e8:c1:1f:6e:3a:a7:19:2e:2a:
1c:7f:a7:1b:53:d7:26:d1:12:2f:2a:ba:1c:65:34:8d:2f:2e:
21:2c:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:32 2024 by rpki-client on console-ams.rpki-client.org