Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/j7Gy_VNngRHKqEy9zCZRPA7Y7L8.roa
File: j7Gy_VNngRHKqEy9zCZRPA7Y7L8.roa (raw, json)
Hash identifier: p6e58K9fy4PPwupdd2XRI5T4CzM58lY+UUZxKfPU6N4=
Subject key identifier: 8F:B1:B2:FD:53:67:81:11:CA:A8:4C:BD:CC:26:51:3C:0E:D8:EC:BF
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 01856BAEE3756C396193F6778A55FBC69874
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/j7Gy_VNngRHKqEy9zCZRPA7Y7L8.roa
Signing time: Sun 01 Jan 2023 04:55:01 +0000
ROA not before: Sun 01 Jan 2023 04:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57865
IP address blocks: 46.191.185.0/24 maxlen: 24
46.191.184.0/21 maxlen: 21
46.191.184.0/22 maxlen: 22
46.191.184.0/24 maxlen: 24
46.191.184.0/23 maxlen: 23
46.191.186.0/24 maxlen: 24
46.191.186.0/23 maxlen: 23
46.191.188.0/24 maxlen: 24
46.191.188.0/23 maxlen: 23
46.191.190.0/24 maxlen: 24
46.191.190.0/23 maxlen: 23
46.191.187.0/24 maxlen: 24
46.191.189.0/24 maxlen: 24
46.191.191.0/24 maxlen: 24
46.191.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 10 Jan 2023 12:24:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:e3:75:6c:39:61:93:f6:77:8a:55:fb:c6:98:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 1 04:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb1b2fd53678111caa84cbdcc26513c0ed8ecbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:c2:90:03:13:95:b6:ba:52:84:53:11:81:
cc:31:69:63:3d:f2:db:cc:06:26:61:01:86:52:c7:
56:1b:bd:63:37:0c:5e:06:94:72:30:98:b5:08:79:
54:78:cf:f1:1e:89:a7:28:3f:a7:b4:e6:86:9f:26:
ac:bf:bb:a0:fe:c7:6f:32:aa:46:62:1b:57:ff:f8:
b9:da:ec:9d:99:94:99:86:06:c3:ea:96:d7:30:ce:
1b:f0:28:f1:97:05:ec:a4:7c:07:d6:bb:74:e2:85:
7f:e2:5c:e6:20:4b:aa:1e:f3:bd:81:9f:92:1d:29:
cc:11:32:d9:33:cd:f0:a9:1f:26:00:b5:75:89:31:
63:e6:06:f3:49:0a:05:46:c8:b3:03:ac:48:90:0c:
6d:7a:ab:91:74:2d:aa:f3:ce:c3:8f:2e:a3:7b:30:
c2:fb:9c:18:78:c7:e7:77:d4:1d:ed:0d:8f:62:8e:
c9:dc:7b:2f:35:74:b4:9b:61:ab:88:16:00:0a:17:
c2:e7:39:e3:f9:d8:3c:14:4f:f5:bf:bc:7a:e4:cc:
5a:72:40:8b:38:20:dd:2f:29:93:21:ee:bd:d0:ef:
c3:fb:43:8c:78:8a:45:77:41:38:13:e0:84:7c:65:
68:a4:30:ab:9b:8e:46:cb:e3:58:1c:c9:47:4a:7f:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:B2:FD:53:67:81:11:CA:A8:4C:BD:CC:26:51:3C:0E:D8:EC:BF
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/j7Gy_VNngRHKqEy9zCZRPA7Y7L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:a6:5c:b5:6a:1e:a1:ed:13:c6:a8:58:fe:0a:17:23:56:98:
61:26:b2:68:7e:f6:2d:d7:e5:1e:04:21:a3:1e:6f:e9:9e:63:
8d:7c:d8:33:91:ed:41:f2:42:9f:4c:bd:23:b9:0f:77:97:e9:
11:83:e0:a5:d9:86:1d:93:24:44:dc:77:56:06:54:51:d5:91:
76:ae:ec:9f:08:11:aa:e3:62:0f:57:e4:af:26:c2:ff:26:ad:
d6:20:36:b2:25:93:d4:3d:9c:05:54:5c:1a:4f:80:f9:ad:bb:
4d:e2:c8:27:2b:b2:18:22:c1:0d:58:d1:4b:09:c5:1d:7f:3b:
f3:57:c5:9f:cc:92:c4:24:16:75:35:a4:4a:27:91:6a:f7:66:
44:88:e1:8f:17:46:a2:b6:26:48:70:67:eb:b5:e8:e4:83:2d:
f2:a2:10:49:0d:d2:8c:39:0f:0b:47:95:d8:fe:a2:2c:bd:d2:
ae:cb:97:6d:63:96:14:b0:54:a8:2d:5f:be:6f:7a:12:d9:ab:
75:fc:29:94:65:7d:43:e9:fe:6b:fb:6f:be:ec:a1:51:0c:11:
df:30:13:c4:d0:50:bf:40:f8:3e:61:2e:69:38:7c:c0:dd:40:
34:70:ed:07:b9:e5:b8:ec:1a:12:db:04:c6:f4:bb:75:57:66:
d9:70:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org