Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/p1iPgotS9n4XfJewhDoMRiB0M8E.roa
File: p1iPgotS9n4XfJewhDoMRiB0M8E.roa (raw, json)
Hash identifier: b7uUa191tjs208BE3YvKkEv+5bK3pkF9NnoBQo1FeME=
Subject key identifier: A7:58:8F:82:8B:52:F6:7E:17:7C:97:B0:84:3A:0C:46:20:74:33:C1
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 01856B934B01F4BCF1B13D5C39B6FDC91513
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/p1iPgotS9n4XfJewhDoMRiB0M8E.roa
Signing time: Sun 01 Jan 2023 04:24:53 +0000
ROA not before: Sun 01 Jan 2023 04:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.183.152.0/21 maxlen: 21
185.1.102.0/24 maxlen: 24
2001:7f8:bd::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:4b:01:f4:bc:f1:b1:3d:5c:39:b6:fd:c9:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jan 1 04:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7588f828b52f67e177c97b0843a0c46207433c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:8a:29:cc:cb:f6:fb:bb:ff:88:86:c6:1b:
7c:04:ad:8e:3f:ad:15:00:23:b2:a6:a6:a8:bc:05:
84:68:40:39:0b:45:80:f7:cd:c9:ef:c4:d5:06:3d:
60:ea:00:3e:1c:9b:d6:06:09:56:1c:b6:43:ed:68:
8e:bb:8b:b7:ec:cf:11:dd:d8:2a:87:00:92:ab:e9:
f7:1c:53:54:bd:00:be:8a:44:ca:e4:54:07:65:54:
71:6a:d9:fc:28:00:01:fc:98:2d:e2:5d:e0:f4:d3:
e4:e5:48:0f:38:7e:ea:09:aa:46:1c:41:63:41:98:
fb:3d:f9:30:29:8e:fd:fc:f6:d9:02:e5:34:cc:18:
36:12:8f:df:bc:11:c4:c9:e1:5f:14:f7:73:dc:92:
82:5a:ca:22:df:4e:3e:7c:b2:53:b7:61:f3:02:32:
07:98:95:9f:1c:22:24:b9:e1:32:34:2e:de:48:c1:
55:e0:0c:cd:3c:cf:92:ec:c0:c7:30:9c:0b:72:3d:
0a:2e:7c:d1:c6:39:dc:49:71:1f:81:4e:3a:31:e2:
5b:4e:8e:92:97:ee:a9:1f:8d:6c:d4:ca:f6:2b:2c:
79:a6:a5:7e:c0:55:d6:c3:f8:21:bd:28:ab:18:9c:
ee:92:53:ba:51:40:36:d5:e9:48:d1:82:2a:bb:32:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:8F:82:8B:52:F6:7E:17:7C:97:B0:84:3A:0C:46:20:74:33:C1
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/p1iPgotS9n4XfJewhDoMRiB0M8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.152.0/21
185.1.102.0/24
IPv6:
2001:7f8:bd::/48
Signature Algorithm: sha256WithRSAEncryption
58:57:5f:3d:ec:73:b9:ac:7d:a8:73:b1:8a:f3:22:3a:71:62:
05:78:27:79:c2:32:d6:82:07:8a:14:bd:37:34:38:19:73:bb:
ca:ec:20:97:e9:1f:cb:49:80:c3:07:6e:cf:48:71:82:f9:97:
6b:ea:09:eb:4d:d3:02:b2:f7:21:f9:fa:9d:7c:a7:96:ef:0d:
55:55:22:a5:09:78:72:5f:f7:76:df:3c:8c:f8:e2:e9:88:3e:
2a:26:73:68:7e:fa:c0:dd:70:b8:ac:cb:c5:58:5a:4f:23:57:
ea:c0:b3:fc:8e:30:ca:9d:82:43:a6:89:2c:64:11:5a:e2:52:
b5:d4:eb:03:13:90:47:47:df:09:e7:20:d3:20:18:4a:d6:d2:
33:87:fd:9b:c1:f4:1a:bc:73:e5:65:f5:ec:0f:c9:a9:6a:36:
32:e9:40:49:48:be:96:28:f2:bb:24:4d:2c:29:2d:ee:9a:72:
f5:75:f7:43:9f:a6:96:c7:73:72:05:35:e3:11:1b:ec:e1:3e:
67:7a:a4:66:a0:48:3d:ef:05:51:d4:5a:c4:a6:be:f8:34:4b:
0e:ed:01:df:9d:a9:68:ac:7f:ef:fc:b0:fd:76:21:50:3d:f8:
93:5f:4d:43:c6:60:cf:43:db:c4:58:da:ba:51:43:05:c5:92:
af:ba:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:42 2024 by rpki-client on console-fra.rpki-client.org