Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/bJiRP8I6gAZi8jqWMr9UtCV-F58.roa
File: bJiRP8I6gAZi8jqWMr9UtCV-F58.roa (raw, json)
Hash identifier: ljULI+4OAVNAp/TNPpmzVaSpzXcwnXcjkb34a96RGAQ=
Subject key identifier: 6C:98:91:3F:C2:3A:80:06:62:F2:3A:96:32:BF:54:B4:25:7E:17:9F
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018610C5ED058AA25CB204610D22A6CB5660
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/bJiRP8I6gAZi8jqWMr9UtCV-F58.roa
Signing time: Thu 02 Feb 2023 06:17:32 +0000
ROA not before: Thu 02 Feb 2023 06:17:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51200
IP address blocks: 46.29.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:c5:ed:05:8a:a2:5c:b2:04:61:0d:22:a6:cb:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Feb 2 06:17:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c98913fc23a800662f23a9632bf54b4257e179f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:8d:12:b4:95:2b:78:81:df:80:3f:1c:f4:
b8:99:1d:62:1b:11:92:48:8b:0d:ee:c9:c0:c1:86:
d3:7c:44:7b:65:69:36:b7:f6:3b:3a:80:74:c3:36:
b4:f2:24:99:0a:ee:f1:f0:20:37:04:7e:e7:c4:85:
37:65:7b:96:a3:0a:26:5b:e6:7d:0e:b7:ae:3b:e9:
e7:55:92:8e:53:a9:23:53:87:4f:e9:31:24:3e:d6:
a9:eb:09:e7:4c:2b:5a:96:c2:40:5c:cc:4e:17:97:
ee:ac:6e:75:61:15:2b:03:10:e5:3d:c3:83:38:74:
a5:35:0f:86:77:2e:27:4d:74:17:94:b8:ab:72:ce:
88:db:67:64:dc:43:c2:8a:c0:b9:99:e0:1c:97:4f:
a1:d1:bd:28:da:b7:8c:e1:3b:2b:17:e3:0c:65:4f:
0e:2e:26:04:6e:55:61:1a:61:73:5f:e0:00:a8:aa:
af:91:3f:98:02:b8:f7:2c:76:4f:bd:05:b2:30:7d:
34:dd:47:c2:e6:ae:3f:98:9b:a7:71:19:0b:9c:f4:
a8:d6:3f:f0:f3:a7:11:25:5b:7a:84:c8:74:94:be:
a1:6d:29:cf:d7:92:c9:c1:eb:5f:57:e8:99:31:8c:
19:51:00:7a:07:6e:06:d7:a8:17:da:65:91:b3:a0:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:98:91:3F:C2:3A:80:06:62:F2:3A:96:32:BF:54:B4:25:7E:17:9F
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/bJiRP8I6gAZi8jqWMr9UtCV-F58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.232.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3b:cb:e8:73:d7:28:cc:b0:99:67:c8:46:f5:d6:c3:58:48:
22:82:04:dd:8d:40:36:d2:8a:13:f2:79:27:28:81:83:7c:58:
2f:89:5b:b2:17:03:70:cd:38:2b:3c:70:de:1f:17:65:ec:67:
e3:14:58:b6:55:d5:3c:4c:6d:f9:b8:bb:54:2b:8d:5f:1c:10:
c0:86:a4:10:db:0d:75:84:44:75:aa:6b:dc:af:f9:9e:c7:03:
fc:aa:2c:88:22:83:7b:8c:d0:78:e0:8d:96:25:13:f6:f7:49:
9f:1a:d5:00:f4:37:d7:8c:0d:03:13:02:b4:7b:d7:78:bf:fc:
9f:61:1d:f2:b2:4d:bc:41:8c:67:a5:ab:28:76:e2:18:9e:df:
71:16:d7:2f:7e:53:40:ad:94:8b:47:b5:42:db:85:96:14:47:
25:f7:90:18:87:12:ac:46:1b:20:de:a6:50:4e:d2:8e:1a:03:
86:4f:7e:af:66:15:79:c1:15:2d:9d:ef:f0:4b:fd:56:7d:c6:
f5:87:0d:58:e5:2d:cc:f0:05:e7:bc:d2:34:88:3a:b6:05:33:
12:93:0c:8b:d6:d1:1c:bf:d3:bb:2b:94:75:b2:7c:5c:f6:22:
53:ec:64:37:fc:38:6a:1e:0b:1d:35:5e:cb:35:99:3b:a2:ff:
44:7b:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:39 2024 by rpki-client on console-ams.rpki-client.org