Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PHo679JsRhLFlXsyHyaO0_Vngtk.roa
File: PHo679JsRhLFlXsyHyaO0_Vngtk.roa (raw, json)
Hash identifier: azIj1QKmuRiAnzIJz1sIzGRZV6y0DvANP/eyHrl19q8=
Subject key identifier: 3C:7A:3A:EF:D2:6C:46:12:C5:95:7B:32:1F:26:8E:D3:F5:67:82:D9
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E70B47B19878951DC4869387016D2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PHo679JsRhLFlXsyHyaO0_Vngtk.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213296
IP address blocks: 46.3.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 05:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:70:b4:7b:19:87:89:51:dc:48:69:38:70:16:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c7a3aefd26c4612c5957b321f268ed3f56782d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:33:af:f2:94:1d:8a:7f:5b:72:01:c3:d4:
39:cf:ae:8d:79:4f:c6:73:7e:46:90:e1:76:fa:a0:
5d:b4:d0:5a:8b:a8:d8:11:f6:af:01:3f:8f:a8:dc:
f9:f5:4b:a5:a2:bd:dd:09:a5:00:35:a5:66:a9:d6:
fd:ba:9f:af:0f:31:1a:be:2e:fe:6c:2e:d6:03:cc:
02:43:7a:d2:7b:d9:dc:c7:8f:22:50:81:b7:05:71:
3b:c8:df:c0:96:81:1b:b0:ac:c9:1f:aa:92:70:1a:
28:c5:05:f5:3a:3a:38:49:57:e1:b0:d4:23:1a:38:
4f:34:1b:81:c1:26:44:3f:01:10:b4:46:ac:05:d9:
e8:62:6d:ce:ca:df:a9:58:2d:f0:56:6f:47:f9:6e:
2e:55:33:10:5e:57:4f:63:a8:c7:c3:68:2b:bc:f8:
50:33:c0:6f:d9:1c:02:02:93:52:a6:eb:cf:8a:12:
98:69:42:f5:16:0c:1a:d8:fb:d3:29:4c:9d:e9:c3:
ea:ce:3e:a4:0b:35:49:8e:15:23:50:cd:f3:d6:9a:
57:88:f9:ab:73:01:bf:51:9f:f9:00:69:c0:6d:b1:
e4:8c:dd:3a:60:a8:0c:d3:a4:a7:99:96:b2:e1:bc:
6c:8f:75:58:63:db:c0:df:39:76:80:20:6c:82:35:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7A:3A:EF:D2:6C:46:12:C5:95:7B:32:1F:26:8E:D3:F5:67:82:D9
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/PHo679JsRhLFlXsyHyaO0_Vngtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.30.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a5:81:f9:34:42:08:b2:95:fa:1c:1a:e7:9b:00:cf:a2:a4:
da:d9:9b:33:35:da:34:9e:23:9d:2e:41:d0:cd:b6:1b:3c:72:
ca:c5:15:43:23:20:57:c3:9c:1f:f4:65:15:84:51:57:4a:f8:
38:43:e4:f1:af:1a:e0:4f:f5:70:78:75:7b:fa:b5:06:e3:36:
7a:ea:a6:b3:e3:ab:c9:92:c9:a1:f0:b2:31:40:4d:49:f0:e9:
ce:ca:cf:4e:cf:b1:b0:d9:77:d3:cf:ac:94:9c:76:fd:5b:d2:
be:71:b8:92:2a:c2:6c:4c:bc:6c:14:cc:06:a9:52:ca:16:0c:
0a:e1:61:43:74:52:2d:78:e6:a3:dc:29:e6:82:89:80:22:11:
a8:92:05:fc:f0:b3:b6:20:af:cb:bf:34:2d:8f:f9:8f:87:06:
c3:cb:72:d7:52:e6:8b:3d:27:4b:9f:4f:bc:3c:ee:cf:36:35:
2f:db:05:09:4e:1f:2a:b8:f0:96:c2:7c:14:a0:34:14:bc:41:
81:1d:a4:0e:00:02:a2:42:69:37:99:48:e6:19:98:52:98:55:
60:c3:1f:ae:0b:02:59:37:7f:b9:e6:38:5f:b6:41:ca:57:90:
35:c6:8b:69:5b:53:7d:50:32:dd:39:da:97:a0:29:af:80:2b:
38:87:23:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 10:19:40 2024 by rpki-client on console-ams.rpki-client.org