Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1YAxfIWc-FVi5cKJgYJeRtGsPcQ.roa
File: 1YAxfIWc-FVi5cKJgYJeRtGsPcQ.roa (raw, json)
Hash identifier: jYh6XNzxmi8vKEnh7HcW1YPNwfmIa66VhxO1CMOOAG4=
Subject key identifier: D5:80:31:7C:85:9C:F8:55:62:E5:C2:89:81:82:5E:46:D1:AC:3D:C4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955463D30563A07DF399FE9A359139
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1YAxfIWc-FVi5cKJgYJeRtGsPcQ.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1001
IP address blocks: 46.3.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:54:63:d3:05:63:a0:7d:f3:99:fe:9a:35:91:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d580317c859cf85562e5c28981825e46d1ac3dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:e6:ce:76:a1:d0:8a:9e:0f:9d:55:5e:83:
9c:dd:16:c1:ce:ec:79:45:8e:1c:bf:61:07:06:51:
df:2e:30:c3:a6:d5:9c:71:1a:31:05:a8:54:b0:e4:
d4:42:b6:2e:53:73:e2:53:46:c0:72:97:76:e1:4b:
e9:88:3c:ab:2b:c8:ce:05:e0:f7:e4:a1:74:2f:9f:
63:73:e8:02:97:a9:c4:d1:cd:45:fa:ca:d9:d5:73:
2a:41:af:30:cd:ee:c6:ef:47:eb:7e:e5:69:4e:dd:
7b:be:37:26:0d:11:4f:29:17:36:66:52:dc:6c:29:
25:8d:80:21:c0:9b:89:09:53:5c:bf:5b:8a:fe:6d:
46:82:bb:92:cd:c8:f5:b3:92:ac:b3:7e:89:25:c3:
82:68:cd:e9:87:14:bb:55:f3:bd:c0:82:06:eb:3b:
ad:23:bd:ab:de:1c:26:f2:ef:18:9b:ac:59:d3:54:
25:7c:f4:1b:83:75:9f:68:4b:b0:a7:c2:fb:5a:86:
2d:78:61:0f:7c:a9:30:5d:2b:ac:c2:a8:9e:72:9b:
48:17:dc:83:f5:e3:7f:93:2f:dd:ea:5d:05:73:73:
97:d4:13:f7:81:2f:db:77:c8:5a:cb:83:1b:af:30:
6f:f6:52:0e:a8:af:3e:df:cc:b4:34:f2:cb:46:d0:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:31:7C:85:9C:F8:55:62:E5:C2:89:81:82:5E:46:D1:AC:3D:C4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1YAxfIWc-FVi5cKJgYJeRtGsPcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:5c:b0:ad:bf:63:b2:46:9c:2c:ca:91:ab:c8:d5:30:8e:e7:
85:7a:fd:5b:12:d5:4b:40:cb:e2:a4:fb:8e:e7:67:01:24:8a:
fe:f0:74:98:ce:a4:ff:12:4f:9b:66:dc:87:58:d7:ce:a6:52:
3f:17:91:44:49:39:3c:b9:61:ed:03:cd:a0:00:13:c3:0b:9f:
32:f9:21:75:07:f2:17:45:6a:8e:a5:db:d6:14:72:df:32:85:
fb:da:84:b7:8a:38:97:aa:95:4b:89:7e:27:2e:57:5e:53:56:
b4:a8:4d:15:59:4d:43:62:f3:53:d7:8c:77:f7:fd:bd:41:ea:
c8:ac:cb:70:a5:43:d9:77:c3:6a:d3:79:f6:15:22:a3:3d:eb:
ec:b7:8b:17:f2:0e:96:42:6b:d5:71:a9:5d:13:1f:7b:8f:a5:
31:8d:2c:32:83:78:1d:d3:6c:4a:33:7b:b9:15:a0:42:bf:f6:
fc:f3:42:8f:0e:2a:a0:70:1f:d4:43:da:cc:d7:3e:42:58:51:
91:5f:bd:f1:cc:68:65:52:e9:e5:bb:25:68:b7:18:54:65:25:
91:31:63:fe:5b:a5:18:f9:77:f6:f6:3e:4e:fc:89:38:6f:4f:
ca:2a:bf:c6:3d:c6:07:b8:ba:6d:09:b9:27:ad:d0:00:c8:7d:
2c:9a:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org