Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/46yZwWMXIpI0MZos4rhPOI5K_Pc.roa
File: 46yZwWMXIpI0MZos4rhPOI5K_Pc.roa (raw, json)
Hash identifier: NEBvEh9CuRzNisY7dtTz0X6DYCPBIDDi9r0tuCa2GsI=
Subject key identifier: E3:AC:99:C1:63:17:22:92:34:31:9A:2C:E2:B8:4F:38:8E:4A:FC:F7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEDA5FB08391E3F40F45346C8D61F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/46yZwWMXIpI0MZos4rhPOI5K_Pc.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48579
IP address blocks: 192.121.20.0/24 maxlen: 24
192.121.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ed:a5:fb:08:39:1e:3f:40:f4:53:46:c8:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3ac99c16317229234319a2ce2b84f388e4afcf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:b4:e4:b8:20:63:9e:b5:12:bf:60:d4:75:
3b:50:10:9a:49:d9:52:b5:85:27:a6:13:ee:e1:23:
2a:09:1d:9c:cc:54:06:d5:be:d6:c3:3c:6b:5e:ba:
5b:f0:9f:62:42:52:0f:72:fd:43:a0:66:cf:16:80:
d1:9a:ff:59:75:54:dd:d9:22:29:84:50:36:c8:07:
c6:07:fd:62:c4:32:8d:25:96:00:f0:d0:d5:73:2b:
4d:13:bd:91:a6:d2:cc:13:26:cc:10:29:79:42:56:
b4:5a:23:60:4a:7d:9c:70:1f:a9:06:6b:33:0c:78:
42:05:ac:d9:fa:3c:b7:64:71:df:1c:ff:ae:99:d1:
c2:3a:dc:19:5e:63:fd:16:fb:22:0a:f2:18:ec:0d:
ba:01:6c:ed:85:7a:d9:12:18:c4:9d:a6:62:a0:a0:
e9:c3:d7:98:8d:aa:1e:c3:a5:0c:c5:e3:0b:49:87:
2a:d7:0f:e9:73:a7:29:0d:85:1e:61:8b:5b:fc:91:
82:1b:8f:68:c0:22:d3:6b:21:79:67:06:bb:5e:43:
59:f5:50:4c:7b:96:b2:1d:9d:50:e6:12:87:50:84:
cc:00:02:b9:1f:94:ba:e1:fc:ed:64:23:26:d4:45:
b0:16:d9:6c:42:e9:f0:46:79:f9:59:59:b8:67:f6:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AC:99:C1:63:17:22:92:34:31:9A:2C:E2:B8:4F:38:8E:4A:FC:F7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/46yZwWMXIpI0MZos4rhPOI5K_Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.20.0/24
192.121.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5e:f7:25:2d:6b:d8:3f:14:c2:55:66:17:70:bf:1b:f4:76:
d2:1a:4d:f3:73:bc:a0:4d:c2:c5:30:44:2d:c8:b4:7b:e7:e7:
67:89:c3:1a:c8:5d:d0:49:cd:b4:97:5d:53:b2:77:f4:81:ed:
49:b6:74:09:0b:84:3b:f7:a6:e2:9e:93:06:84:e7:86:fb:d3:
7d:10:db:b0:ac:38:4d:db:33:49:cb:f0:c0:8d:27:44:f3:37:
2f:3e:79:fc:03:71:d4:72:d2:25:d4:bd:90:da:65:38:c3:03:
09:b9:72:97:98:a7:34:08:7f:33:9d:2e:d3:a1:17:f1:40:e2:
12:79:c3:d2:af:f3:67:90:43:bf:6e:f1:83:a3:c6:cd:70:19:
48:93:d5:33:79:61:ca:91:2b:be:6f:e6:e2:e9:a1:de:df:10:
2e:ea:0c:1e:3a:2d:a1:d2:85:28:7d:c1:22:cb:22:9b:aa:55:
ba:c6:71:24:b7:4c:5b:20:17:30:2e:f1:1a:bc:e3:89:0b:e4:
ea:65:13:02:20:f6:28:f2:3f:90:a3:69:43:b5:0d:67:aa:cc:
ab:ce:ea:c6:ad:a1:46:bd:ea:35:cd:bf:c5:f5:ae:7a:a0:84:
5c:aa:b3:04:5d:da:40:4b:90:3a:27:c6:8e:0d:25:a3:2b:92:
9e:67:74:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org