Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/nE3_Cnia4bTp0cYmME0x7eVb33I.roa
File: nE3_Cnia4bTp0cYmME0x7eVb33I.roa (raw, json)
Hash identifier: qKoMGShSQe4JCaurzbUvRP0W6pml+2FQjEzMUAfA83A=
Subject key identifier: 9C:4D:FF:0A:78:9A:E1:B4:E9:D1:C6:26:30:4D:31:ED:E5:5B:DF:72
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 018E0371B9C1C3908F53F25BFD67568CAB0E
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/nE3_Cnia4bTp0cYmME0x7eVb33I.roa
Signing time: Sun 03 Mar 2024 08:32:48 +0000
ROA not before: Sun 03 Mar 2024 08:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 46.143.172.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 03 Mar 2024 13:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:03:71:b9:c1:c3:90:8f:53:f2:5b:fd:67:56:8c:ab:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Mar 3 08:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c4dff0a789ae1b4e9d1c626304d31ede55bdf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:da:ae:cd:b2:0a:73:7d:3d:b4:8c:5b:b6:
77:a8:5c:7b:ea:76:b6:c7:e8:a3:a3:2e:5a:f5:5e:
8a:83:2f:ea:ec:04:97:65:d8:9e:c9:3b:f5:e7:8c:
d1:ab:50:98:61:8f:d0:b2:33:16:76:0c:6f:b1:ec:
79:2e:9a:07:3c:b8:61:79:bc:e1:6b:c6:18:a4:79:
7a:b9:3b:4e:ab:5f:65:18:16:cc:9e:68:2c:d1:e8:
a8:32:fd:7c:aa:02:da:e0:5c:db:e5:53:1c:83:38:
a6:11:85:02:f2:f5:00:07:b4:fd:c7:2e:5b:85:dd:
0b:fa:b5:d8:dd:63:e3:bb:24:3e:9a:7d:d5:88:1b:
4e:4b:cc:0b:ba:ed:8d:f8:0b:dc:c8:c9:24:14:89:
53:e0:f6:30:f2:18:74:85:d8:a4:f2:87:82:5a:13:
16:08:f2:11:6b:73:ce:90:80:4f:f7:84:28:1e:a9:
ff:60:cf:f3:79:38:f5:eb:70:68:51:9e:c6:0e:50:
25:12:e6:9b:6e:93:81:e5:7f:ca:d2:43:aa:5f:56:
f0:11:9f:17:2b:a3:8f:6c:93:36:19:65:7b:06:21:
eb:b1:20:d0:f0:0e:8b:df:85:ba:7e:8e:bb:c7:e9:
af:00:27:7e:e9:47:7d:99:42:0b:20:f5:b1:be:86:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:FF:0A:78:9A:E1:B4:E9:D1:C6:26:30:4D:31:ED:E5:5B:DF:72
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/nE3_Cnia4bTp0cYmME0x7eVb33I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.172.0/22
Signature Algorithm: sha256WithRSAEncryption
79:0a:c2:8e:12:84:ef:e8:07:2b:94:f5:6a:da:11:c1:49:82:
c4:c1:97:0c:2e:48:8b:fc:0f:13:36:fd:4c:d3:af:47:56:65:
e5:f0:92:dc:db:eb:28:92:52:26:e0:ab:40:6a:fd:08:49:34:
c7:a5:61:fa:51:38:3f:44:53:80:54:e0:e2:a3:00:9f:a0:ce:
6c:62:60:9c:5b:88:44:35:c7:71:be:6f:13:97:36:ef:20:41:
bb:d1:8e:69:cf:c8:d7:f0:22:18:e7:dd:5c:2c:f2:59:3a:6c:
4c:e2:32:ab:96:da:03:ae:f1:c3:71:d2:a8:70:d6:cc:bf:81:
69:b7:a6:4d:2b:d4:8f:9a:b7:a8:0b:13:ee:22:b6:9a:9c:21:
95:c2:d6:59:35:db:89:f1:2c:97:4e:ad:8a:c1:5f:d5:40:34:
c5:7a:bf:51:c6:52:67:9d:04:ad:12:4a:9c:59:7d:4c:44:87:
86:49:15:23:e8:f9:9f:f3:16:be:b1:65:06:a3:c6:02:f4:2f:
19:b6:17:1b:8c:18:7b:03:d6:1e:ae:2b:7e:87:1b:69:13:58:
88:52:73:b3:ee:c5:3d:e6:90:a5:27:7f:8d:75:e1:49:0b:b5:
1a:f1:78:56:41:20:6c:41:56:6d:8f:e2:b9:c9:91:88:b0:d7:
44:36:21:dd
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 3 14:07:01 2024 by rpki-client on console-fra.rpki-client.org