Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ky2jjw7CpiVay97lFbLg8o7p9ks.roa
File: ky2jjw7CpiVay97lFbLg8o7p9ks.roa (raw, json)
Hash identifier: 5ec/N/hfcXwytCUTYs39RoDg7RhmDSd0S7G5cZU4SAQ=
Subject key identifier: 93:2D:A3:8F:0E:C2:A6:25:5A:CB:DE:E5:15:B2:E0:F2:8E:E9:F6:4B
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0189DEBEE31740A512CFD464917F07E46265
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ky2jjw7CpiVay97lFbLg8o7p9ks.roa
Signing time: Thu 10 Aug 2023 09:19:59 +0000
ROA not before: Thu 10 Aug 2023 09:19:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 46.254.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:be:e3:17:40:a5:12:cf:d4:64:91:7f:07:e4:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 10 09:19:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=932da38f0ec2a6255acbdee515b2e0f28ee9f64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:f2:78:ab:75:06:8a:d6:d1:6d:8f:98:1b:
18:8a:a5:f6:95:1f:45:33:fe:47:33:a4:b6:8a:be:
69:69:9e:8a:ff:b3:03:88:96:d7:2e:d4:ba:f8:90:
9b:de:d0:86:8f:94:15:7b:ee:32:d4:2e:d5:f9:0d:
4b:a4:e0:e8:54:7b:83:53:8c:88:78:96:85:ec:8a:
95:9e:fa:79:32:53:8c:79:e1:ec:8d:a3:ce:ff:db:
e2:7d:9a:64:c9:60:0b:69:9e:e7:69:a8:80:9a:49:
f3:40:4e:65:56:ce:c3:e5:af:10:a6:8a:15:b8:00:
1a:01:d3:3b:a3:93:23:7d:83:2d:cc:db:d2:31:35:
a6:cf:6a:df:67:f7:8f:4b:ab:8e:f0:d7:81:25:fa:
4c:55:3f:af:fe:eb:1f:6c:82:3b:96:94:a0:6f:32:
ce:1d:31:dc:a1:83:e7:e3:d9:cc:36:09:a4:5c:90:
c5:2a:d8:e2:86:fe:1d:d8:75:bc:2a:f9:58:bc:ee:
eb:32:24:56:d3:ff:ba:5f:20:89:e6:c4:2d:34:4e:
37:b7:c3:6e:66:07:f4:64:6a:56:80:ab:b6:db:9a:
cd:fd:eb:0e:cf:a4:43:df:86:02:79:1f:45:d4:85:
bd:16:3d:10:74:ee:18:d0:f7:73:e7:89:bc:b2:8c:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:A3:8F:0E:C2:A6:25:5A:CB:DE:E5:15:B2:E0:F2:8E:E9:F6:4B
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/ky2jjw7CpiVay97lFbLg8o7p9ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.106.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:24:a8:35:ea:7d:52:2c:99:87:0b:59:09:f3:34:4f:72:55:
bf:b7:76:c7:10:3e:83:2a:4d:4c:d1:b6:67:ee:b1:1a:fe:57:
83:e5:3a:17:cb:03:61:39:12:0f:c1:34:6b:6c:c0:02:ef:b9:
4a:c6:ed:ba:1d:4b:88:23:58:8b:0c:0e:1d:32:a3:7a:96:9b:
6f:03:1c:0c:ee:49:eb:74:53:b8:0d:df:9d:02:95:42:7a:b6:
39:e4:de:1f:b2:75:11:0c:af:c9:ef:27:f1:4d:7a:17:35:7e:
a8:fe:7d:56:3f:2e:dc:1c:db:21:f8:ee:0a:19:94:8e:a5:fd:
26:ef:fd:fb:66:74:10:7e:6e:75:36:37:d3:48:eb:f5:4b:84:
ea:48:dc:83:70:fa:b2:66:a7:d6:76:4c:40:71:64:72:13:f8:
b9:b2:0d:69:a0:51:a7:cd:a5:51:11:b5:2f:45:27:b4:16:3b:
75:fb:d0:48:61:24:6a:03:ad:76:46:f0:b7:86:6a:bd:71:4e:
60:7e:7c:e9:6d:7d:32:f3:5c:7b:f7:60:ec:2d:87:4a:05:c8:
1f:85:03:e1:7b:16:32:ac:93:fd:16:2b:27:32:1b:33:c8:b1:
34:c6:01:d3:5f:54:5c:01:13:29:48:cd:19:97:b2:66:71:f2:
3b:83:4c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:04 2024 by rpki-client on console-fra.rpki-client.org