Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/TIFv7BFlHRGFVY2jptNHXPPPzMo.roa
File: TIFv7BFlHRGFVY2jptNHXPPPzMo.roa (raw, json)
Hash identifier: DYjLAy0MrMl3JZC8dyoILx4ydCsZkWIyyN8YQ2jPt4Q=
Subject key identifier: 4C:81:6F:EC:11:65:1D:11:85:55:8D:A3:A6:D3:47:5C:F3:CF:CC:CA
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 0185708CC174A94EC754EEAEC750A9AC917C
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/TIFv7BFlHRGFVY2jptNHXPPPzMo.roa
Signing time: Mon 02 Jan 2023 03:35:50 +0000
ROA not before: Mon 02 Jan 2023 03:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57000
IP address blocks: 46.149.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:c1:74:a9:4e:c7:54:ee:ae:c7:50:a9:ac:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: Jan 2 03:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c816fec11651d1185558da3a6d3475cf3cfccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:2b:8b:51:60:62:15:c4:c7:d1:bc:8f:a3:
69:29:35:d2:ce:e6:18:b9:f0:2e:d0:c1:64:74:4e:
cc:47:73:67:cd:f3:3f:e2:8f:37:8e:fc:7b:aa:24:
dd:dc:62:ac:d6:54:1e:0a:34:19:9b:ec:79:be:28:
e9:d3:b7:b0:2a:c5:9e:5d:69:7a:d8:48:a0:af:46:
0a:8d:0e:98:09:76:e9:9e:85:25:ac:92:46:bc:f5:
af:49:fe:93:91:c8:cd:61:dd:b2:e2:a6:5d:7c:ac:
9c:ae:58:9f:08:b9:b1:b7:f0:75:cf:a2:f2:b9:d9:
8d:37:be:60:80:4d:36:5a:45:f0:4f:7c:8b:78:3b:
4e:f7:38:44:84:36:ff:ac:1a:4e:d5:4e:04:c2:d3:
77:e2:2a:f9:ae:5e:0d:03:14:fb:86:a4:f5:a7:20:
6f:a6:8b:c4:8a:3c:6b:36:68:5f:9a:18:ff:bb:81:
b8:44:bc:32:9e:02:54:c3:d5:91:1f:a1:ef:7f:3f:
51:78:25:01:20:5b:18:88:08:65:27:c6:0c:7a:61:
4b:a1:4e:68:2f:af:ed:e0:76:15:14:76:2b:f3:8f:
d4:87:85:53:bb:5f:a1:72:c9:75:53:20:f1:32:0f:
5a:ff:e1:43:93:42:1f:27:5e:05:47:71:ec:93:22:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:6F:EC:11:65:1D:11:85:55:8D:A3:A6:D3:47:5C:F3:CF:CC:CA
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/TIFv7BFlHRGFVY2jptNHXPPPzMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:61:38:b3:c3:66:a3:72:7c:eb:f4:3f:5e:f9:72:00:b3:8a:
58:54:2b:46:36:d3:8b:40:77:ca:0d:eb:8f:20:f0:bf:e4:16:
5e:31:15:eb:b3:04:e4:05:52:46:86:64:ff:b5:ac:61:5c:53:
f2:31:a8:64:68:e4:4f:b8:5c:2a:07:f5:81:4b:7d:c8:0b:30:
82:04:5d:a3:20:bb:65:60:bc:69:77:fa:03:71:31:3a:1e:dd:
5e:5a:a4:09:a9:39:96:40:c8:a2:43:9e:e6:02:d7:a3:5b:7b:
06:86:2b:2e:37:88:41:e7:82:22:e9:e3:ef:d1:ac:b6:b3:ca:
91:05:37:d8:3b:62:a6:f6:b9:28:dc:1a:76:4e:82:50:67:7e:
e0:c6:c8:ea:b6:74:29:6e:a4:f0:4c:59:c0:5d:a1:9e:fe:f4:
2c:af:4b:6b:66:89:1e:9f:18:79:bb:c2:a6:5f:91:f0:4e:46:
1f:37:7e:60:71:db:b9:e9:f6:9c:fc:6d:48:e4:48:04:85:12:
e0:2e:3a:00:ea:bb:37:bd:32:57:2a:c5:06:4a:31:0e:81:90:
d7:84:ab:23:c7:8a:ce:eb:77:b0:3d:21:07:4d:71:5a:7c:b7:
c1:72:09:45:ce:97:58:cf:71:93:9c:d8:40:70:ce:e3:32:d3:
ab:a5:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:28 2024 by rpki-client on console-ams.rpki-client.org