Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/lEiblbCj61xzqNw7MEWC9FGSyKE.roa
File: lEiblbCj61xzqNw7MEWC9FGSyKE.roa (raw, json)
Hash identifier: KPGtS/UuYUXFp42nZZNXYBX/bkAy5HcdTcyPVaRfVDg=
Subject key identifier: 94:48:9B:95:B0:A3:EB:5C:73:A8:DC:3B:30:45:82:F4:51:92:C8:A1
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0185A06659DF9D249FDF8B37AB0CBAC4B3FB
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/lEiblbCj61xzqNw7MEWC9FGSyKE.roa
Signing time: Wed 11 Jan 2023 10:35:40 +0000
ROA not before: Wed 11 Jan 2023 10:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57865
IP address blocks: 46.191.184.0/22 maxlen: 22
46.191.188.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:66:59:df:9d:24:9f:df:8b:37:ab:0c:ba:c4:b3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 11 10:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94489b95b0a3eb5c73a8dc3b304582f45192c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:87:d9:d3:5a:1c:7b:c5:42:46:69:f9:29:
0d:e4:80:2d:3d:f2:d4:8c:e5:2f:ae:64:f1:4f:33:
5b:31:5a:c8:22:b3:67:29:2d:a2:92:41:f4:3c:cc:
52:93:2e:5a:c2:43:48:89:a2:6d:7d:1e:0f:0e:1d:
52:f5:98:62:6d:10:01:18:26:d9:cc:67:04:3a:ca:
52:12:7e:41:2b:11:e6:04:f9:21:94:d0:5c:fe:33:
5d:12:21:63:bf:1b:5a:ca:37:27:91:63:f9:f4:c2:
db:a4:9a:ae:2a:7a:68:5a:30:eb:2e:b3:16:fd:91:
77:3b:fd:db:bf:1e:0f:9f:d7:ca:19:06:6b:92:a0:
fc:4b:c7:ac:f9:81:02:80:71:7b:40:5c:79:c7:f8:
46:73:97:f4:f8:c6:87:c2:31:1b:94:f5:97:c4:ce:
5e:a4:bb:db:69:6f:a0:f7:a2:70:2b:fd:c3:4a:09:
85:c7:3a:10:4e:dd:bb:d2:32:85:09:89:ab:29:13:
60:4f:d2:ed:f9:f7:37:5d:c7:c6:43:f2:cb:8c:2b:
b5:3c:18:9c:38:8b:78:8e:c4:3e:72:4c:fb:05:34:
a9:88:84:b6:df:31:e5:52:a3:0f:b2:e2:6a:42:5b:
e8:77:eb:39:13:a6:9d:43:d8:67:c9:02:dd:00:71:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:48:9B:95:B0:A3:EB:5C:73:A8:DC:3B:30:45:82:F4:51:92:C8:A1
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/lEiblbCj61xzqNw7MEWC9FGSyKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.184.0/21
Signature Algorithm: sha256WithRSAEncryption
81:0c:e6:3a:11:93:88:61:20:26:1b:5b:a7:ca:69:6f:eb:c9:
b6:bc:b5:27:e2:e5:1e:17:c7:6b:a5:b5:7b:6f:4d:f7:25:5b:
89:d4:ff:9e:cc:56:56:b9:55:d3:95:11:24:95:d5:e3:b1:bc:
52:95:be:00:ff:ee:47:46:12:f1:e3:72:b3:a1:7b:84:b1:e6:
0f:34:c5:35:87:bb:94:a3:11:a0:68:da:90:ce:2c:1c:9d:5d:
16:7e:6c:a3:b1:3b:40:e7:94:4e:5b:4e:08:5e:8a:c7:3f:4b:
b8:81:87:33:62:45:1e:aa:17:fe:76:02:ca:4c:61:f0:b3:b0:
68:b6:4d:ca:2a:87:85:76:6a:75:ac:9b:73:08:b1:55:7d:ec:
88:6d:2a:e7:24:e1:40:17:e0:86:3c:3c:54:db:50:b8:ad:38:
23:8b:94:72:e8:76:b5:27:19:f6:ee:b2:e7:a8:0e:90:dc:dd:
1c:8c:80:06:94:bd:39:45:e9:93:b3:01:38:1b:b5:66:23:54:
49:bb:6b:69:ec:12:0c:54:59:02:7c:37:83:90:0b:7c:41:32:
a6:9a:00:15:72:80:51:41:72:dc:92:e3:73:d1:7c:48:36:bf:
e5:9d:3c:f2:b0:5f:0c:ce:b2:b5:ac:02:4c:ea:e0:f9:b2:76:
db:1a:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org