Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/r53ddEanGDBdUqV4jhI6hcsratU.roa
File: r53ddEanGDBdUqV4jhI6hcsratU.roa (raw, json)
Hash identifier: vuq4wV4aIbOFTXAV/Cw68C5O7XQViLsFbV/pdNYuf4Y=
Subject key identifier: AF:9D:DD:74:46:A7:18:30:5D:52:A5:78:8E:12:3A:85:CB:2B:6A:D5
Certificate issuer: /CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Certificate serial: 018587A65239D98E0CEA75C76C21B1F7B9D0
Authority key identifier: B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/r53ddEanGDBdUqV4jhI6hcsratU.roa
Signing time: Fri 06 Jan 2023 15:15:02 +0000
ROA not before: Fri 06 Jan 2023 15:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201783
IP address blocks: 46.19.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:a6:52:39:d9:8e:0c:ea:75:c7:6c:21:b1:f7:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90dfc2a651b5efab2c0cd59322d6d3b55906563
Validity
Not Before: Jan 6 15:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af9ddd7446a718305d52a5788e123a85cb2b6ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:4a:d8:db:4e:78:40:68:21:41:e2:6e:d6:
fd:e9:8a:a1:f5:10:be:47:02:d2:48:58:aa:70:e1:
e1:16:d5:38:4c:cb:42:b2:e5:69:00:a5:7e:90:f9:
99:b9:d3:b2:ca:a7:41:ce:26:a8:ec:d1:a0:60:c3:
3b:f2:d0:0a:3f:9a:16:9e:05:ad:7f:fb:8a:f4:64:
ab:bb:c3:ba:bd:ef:fe:ed:b4:db:c2:2d:34:50:5c:
ff:6d:cb:73:ca:66:41:69:e9:2e:51:a0:f3:b8:35:
38:fe:25:f0:79:9d:a9:8d:22:a0:94:4e:ef:0e:44:
40:12:61:a9:71:0b:67:54:22:22:c0:4f:58:52:57:
b8:c4:1a:c8:c5:7a:5d:df:f1:9c:ea:dc:9b:cc:52:
b9:87:00:51:f0:c2:1f:d0:96:45:80:ac:b2:6e:65:
6c:fc:c1:f0:5f:71:52:65:1b:0e:a7:50:67:09:f2:
3f:24:03:e0:88:1b:c5:a2:32:a6:39:45:6b:32:82:
00:27:22:31:51:d2:d1:40:a1:14:74:fc:e1:22:5a:
9f:d0:01:1a:dd:17:53:fa:0c:9e:89:eb:3d:21:b2:
fb:91:c9:5c:b6:39:04:c2:a3:2a:bb:3b:1c:d2:01:
ad:9a:d3:f8:33:26:c0:82:18:7e:96:96:ae:bf:51:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9D:DD:74:46:A7:18:30:5D:52:A5:78:8E:12:3A:85:CB:2B:6A:D5
X509v3 Authority Key Identifier:
keyid:B9:0D:FC:2A:65:1B:5E:FA:B2:C0:CD:59:32:2D:6D:3B:55:90:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ38KmUbXvqywM1ZMi1tO1WQZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/r53ddEanGDBdUqV4jhI6hcsratU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/847bc8-f7e6-43e0-a5cf-d3e16a163dd3/1/uQ38KmUbXvqywM1ZMi1tO1WQZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:75:6e:fa:f2:5e:48:7b:62:3e:c9:f0:be:67:7e:16:9f:db:
16:c3:f8:74:37:2a:46:04:be:af:3a:fe:a9:02:51:02:c1:e1:
2e:f3:25:68:31:df:55:db:b0:ea:e2:8f:54:83:0c:e8:c5:37:
98:1c:43:2d:f1:f7:5b:fc:1a:63:21:4f:bf:7f:79:ae:cb:09:
e6:2c:25:8e:89:a3:cf:1c:ca:87:00:10:57:cd:44:a4:60:18:
36:5e:af:7c:fa:1c:34:3b:9e:dc:47:0c:76:35:8c:43:d1:3d:
75:8d:fb:a7:e3:95:98:07:e8:27:a1:55:69:1f:3b:de:ed:ef:
39:fb:ff:99:22:e5:4c:16:74:60:40:92:32:43:36:af:77:83:
d1:6f:75:68:f7:28:bf:14:2e:be:9b:5d:ae:f9:02:7c:b7:33:
e4:b5:de:22:25:dc:25:50:5f:12:8a:47:30:f4:59:48:fe:ab:
f4:38:a9:f0:c7:89:31:de:e7:58:7a:5f:f2:8e:fe:b2:4a:98:
a0:8d:45:e8:cb:d7:2c:09:53:f8:33:83:f8:bd:a4:01:5a:72:
d1:d5:55:d0:76:56:b3:a6:fa:61:4d:8d:76:99:3e:75:d8:25:
71:c8:84:95:b8:92:c0:e5:5c:85:ad:99:2a:62:80:25:ae:86:
10:00:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org