Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9hUFrumaESnjFiLjt4qXNRCXE6Q.roa
File: 9hUFrumaESnjFiLjt4qXNRCXE6Q.roa (raw, json)
Hash identifier: jf8m9CTiaYytJSAEaz+yilIrOx6l/Gv29w4bIPMPPrU=
Subject key identifier: F6:15:05:AE:E9:9A:11:29:E3:16:22:E3:B7:8A:97:35:10:97:13:A4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719556A4277171F2701F18AB3A3FE326
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9hUFrumaESnjFiLjt4qXNRCXE6Q.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 46.232.72.0/21 maxlen: 21
46.232.80.0/20 maxlen: 20
46.232.96.0/20 maxlen: 20
46.232.20.0/22 maxlen: 22
46.232.24.0/21 maxlen: 21
46.232.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:56:a4:27:71:71:f2:70:1f:18:ab:3a:3f:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61505aee99a1129e31622e3b78a9735109713a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:d8:88:cd:8b:8b:b9:e4:80:15:81:2a:92:
f9:fa:1c:20:96:39:64:91:23:c9:49:ad:c9:b7:37:
38:d7:59:fc:08:32:a8:00:ca:65:c7:91:eb:3f:87:
19:a2:b7:32:b0:62:46:0e:30:16:2c:d6:a6:b6:20:
f4:73:37:de:24:ad:7d:39:f8:01:52:dd:04:03:6d:
f9:73:f8:ba:88:05:23:f1:e7:44:83:0d:bc:d0:c6:
7b:05:7f:45:12:f1:53:0e:b8:20:64:96:db:86:22:
6e:db:b5:c8:9b:73:8b:b6:a1:d0:f1:12:b4:af:bb:
43:27:a0:80:ec:92:7a:e6:78:af:dc:60:18:33:89:
73:77:8b:7f:b9:57:4b:44:3a:45:6c:4a:9d:ca:c1:
5a:b4:3e:34:dc:02:a2:18:b5:b4:55:8a:cd:56:4e:
47:44:53:35:d1:94:c5:e5:8e:16:3e:79:a1:df:f0:
08:a9:f7:7d:60:61:da:39:0c:be:2c:1e:c8:87:ba:
68:f8:31:e8:ed:e1:5c:39:f2:30:12:4c:29:24:eb:
02:d9:32:d2:db:1c:8d:fa:3e:fa:a8:a5:63:89:5b:
66:38:c1:c2:98:d3:fc:20:7a:70:34:48:b6:0e:51:
7f:5c:15:5d:0e:20:ea:e1:0c:84:da:d9:f0:71:9a:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:05:AE:E9:9A:11:29:E3:16:22:E3:B7:8A:97:35:10:97:13:A4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9hUFrumaESnjFiLjt4qXNRCXE6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0-46.232.47.255
46.232.72.0-46.232.111.255
Signature Algorithm: sha256WithRSAEncryption
40:6c:b0:39:96:57:39:01:0b:c8:91:53:05:b0:8c:9e:54:37:
3a:8e:fb:7b:63:99:15:6a:bd:da:6b:40:34:aa:cb:1a:09:93:
21:97:ec:f1:98:76:ff:ce:55:68:a2:5e:28:7e:7a:08:66:0b:
57:50:5f:b4:54:12:bd:44:ab:58:9f:7c:af:31:ef:b5:0e:07:
0d:c9:e8:dc:f1:61:ba:f0:53:45:88:55:25:e5:9f:0c:a0:e6:
a7:59:7b:5c:ec:ca:e6:bb:08:4b:df:e9:ee:1d:26:b3:86:d1:
11:4c:39:6c:0e:21:f4:d5:b6:48:bd:ed:8f:97:4a:f5:ab:cc:
b0:56:9b:2b:29:73:f1:a6:14:17:7f:e3:b5:bb:d4:98:3b:1c:
86:4c:e4:c3:78:b7:30:ae:63:fe:b1:e5:32:ea:d7:fe:52:82:
dd:36:48:85:d4:7e:d4:2d:bd:84:80:42:b2:8d:a5:72:52:cc:
f4:48:8c:a0:67:05:5f:dd:0c:37:c8:eb:91:18:60:12:36:f8:
b0:c3:d0:d5:e5:26:87:95:d2:ee:7d:30:c5:79:eb:4a:65:26:
8b:d6:63:94:c7:ce:b3:84:84:cb:f7:37:35:8c:d5:02:9f:65:
d3:d0:63:8c:f7:30:01:71:fc:09:68:53:14:7b:82:67:75:f0:
6d:b3:a5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org