Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-6SP6LuL__L4YdOKCMvQcL8gSME.roa
File: 1-6SP6LuL__L4YdOKCMvQcL8gSME.roa (raw, json)
Hash identifier: 2ZhYXPv1QqajvwDVRlUCTZwLihcLMrg/62Gfy/zTEFc=
Subject key identifier: FB:A4:8F:E8:BB:8B:FF:F2:F8:61:D3:8A:08:CB:D0:70:BF:20:48:C1
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4E2EDC81ACA7D13D0AA1937B7C0DC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-6SP6LuL__L4YdOKCMvQcL8gSME.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25185
IP address blocks: 46.47.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e2:ed:c8:1a:ca:7d:13:d0:aa:19:37:b7:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fba48fe8bb8bfff2f861d38a08cbd070bf2048c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:e9:9d:09:5f:bc:75:b4:8d:97:26:9c:af:
8e:41:87:3f:b7:0d:45:96:63:55:12:1d:90:31:de:
52:ff:02:14:97:1b:37:f1:6a:14:cc:3c:0c:94:81:
30:20:92:95:a1:42:92:c9:f0:cf:36:85:1f:30:1d:
83:e5:a0:4d:0a:90:59:34:32:06:15:70:a6:9c:00:
20:33:68:66:7b:d1:08:d9:15:74:7c:53:6d:4c:f8:
ff:17:ed:38:2c:85:94:27:df:ea:6f:d9:fd:bc:66:
63:29:6d:47:75:2b:ce:b9:62:c8:f9:56:49:c7:19:
c3:66:c7:52:dd:7c:03:53:d7:aa:cb:61:43:31:ff:
8e:f4:88:e7:83:6b:7c:d8:6a:50:9e:54:53:5c:b4:
00:c4:f1:9c:a6:9b:6f:50:bb:22:0e:db:2c:30:1a:
62:21:12:b3:46:6e:62:43:5c:6c:95:8c:a9:71:54:
d3:d7:13:05:33:ad:8d:19:0b:73:92:b2:f4:f4:d9:
e9:18:7f:79:7d:cc:3a:c7:17:f2:01:bd:21:bd:22:
c2:e7:83:89:0c:4b:71:4d:a5:9e:b3:65:fb:16:c4:
a1:c1:d3:ee:0b:38:15:5f:e0:25:9d:24:4c:e9:1e:
00:a5:bf:aa:c5:38:8d:ee:7f:7b:71:b7:69:ec:ba:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A4:8F:E8:BB:8B:FF:F2:F8:61:D3:8A:08:CB:D0:70:BF:20:48:C1
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-6SP6LuL__L4YdOKCMvQcL8gSME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.47.245.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5d:df:cb:bf:e9:be:6d:67:cf:21:a0:2b:fd:48:10:1f:8a:
7c:69:6c:27:fb:85:ed:89:9a:9b:9c:de:14:cd:6c:ed:6c:a4:
75:c0:54:17:f0:c9:61:e6:3a:2d:c3:ca:dc:c7:6b:5e:e1:6f:
74:d2:7e:6c:68:e7:dc:23:9a:30:10:f6:2f:d4:bc:f0:87:ca:
0a:b2:06:bb:b1:03:51:97:fa:24:66:29:a4:68:3b:1d:f4:ec:
43:ac:13:e3:8f:b1:76:6e:05:a6:b2:04:8c:b9:4b:02:80:39:
0d:f9:2c:9b:83:ae:0d:71:ac:4d:32:7f:17:0a:d9:47:6f:1a:
2a:84:c6:87:e6:1a:53:f7:e3:be:7a:c8:ac:49:36:1a:ed:23:
89:75:b2:cf:ee:d4:a0:28:64:72:d8:25:e9:96:43:09:2d:00:
a2:e4:da:19:d8:0b:3a:b9:50:ed:3e:3f:de:a7:40:92:b3:79:
cb:9f:3b:97:49:1f:68:9c:1c:b3:74:16:58:ba:8f:d4:eb:08:
b3:f1:db:34:46:ea:51:03:80:f7:35:01:3f:91:19:ad:9e:e4:
49:9e:03:18:db:3c:b2:1f:2a:48:8c:56:2f:73:82:c7:b7:22:
05:20:af:16:40:bd:ea:c7:cb:11:86:06:a9:6e:10:f5:e4:0d:
e4:28:94:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:33 2024 by rpki-client on console-ams.rpki-client.org