Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TuajCUhx6Y1AtcTbNTuKnJSMKaI.roa
File: TuajCUhx6Y1AtcTbNTuKnJSMKaI.roa (raw, json)
Hash identifier: Mk/HXg9xtgquYgjouQLwjfBIS436zYv+dPZtmCVYUQk=
Subject key identifier: 4E:E6:A3:09:48:71:E9:8D:40:B5:C4:DB:35:3B:8A:9C:94:8C:29:A2
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01883466E7F691950176E0781B508EAB60C4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TuajCUhx6Y1AtcTbNTuKnJSMKaI.roa
Signing time: Fri 19 May 2023 14:25:39 +0000
ROA not before: Fri 19 May 2023 14:25:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 46.3.160.0/22 maxlen: 24
46.3.208.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:66:e7:f6:91:95:01:76:e0:78:1b:50:8e:ab:60:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 19 14:25:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee6a3094871e98d40b5c4db353b8a9c948c29a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:37:9b:c4:60:5d:26:2c:20:c9:bc:bb:c9:04:
e8:68:e0:1b:cf:ba:7f:74:31:5e:91:d6:af:9f:80:
ed:66:28:0f:52:75:48:b0:26:6a:87:37:c6:da:c3:
f2:61:55:07:57:35:68:06:7c:02:c3:26:68:1a:2d:
33:38:18:5a:4b:a3:52:af:97:88:91:e2:d7:5d:5f:
cd:b1:77:31:76:1a:47:6a:64:d4:95:15:ea:ff:f1:
89:26:61:85:af:b8:70:93:dc:aa:8b:47:67:a7:70:
ba:e8:4a:fd:0d:5c:ab:69:bc:97:60:dd:86:7e:6d:
60:b7:5a:7a:98:5c:77:33:1c:92:4c:ac:ce:0f:3c:
0f:c2:a7:6e:95:0b:c7:50:e7:01:f8:07:85:d5:d2:
47:7f:8f:d9:3b:64:5b:be:7f:38:58:b9:a6:d8:41:
24:0b:04:0f:39:c9:15:7f:45:05:84:05:c8:52:a2:
f8:87:fe:27:44:51:a6:7e:dc:d3:74:a4:3e:c6:a0:
fa:59:41:f6:a4:95:c2:2d:5d:e0:cc:ef:e8:c8:bc:
d9:2e:f3:ba:6c:f1:ad:83:70:8d:65:fa:c0:8a:00:
69:08:23:a1:9d:f6:95:46:b0:4c:d6:2c:bd:cc:89:
8f:c9:80:cc:9b:3c:a0:77:f0:0f:ac:23:f3:81:d7:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E6:A3:09:48:71:E9:8D:40:B5:C4:DB:35:3B:8A:9C:94:8C:29:A2
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TuajCUhx6Y1AtcTbNTuKnJSMKaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.160.0/22
46.3.208.0/21
Signature Algorithm: sha256WithRSAEncryption
30:f9:96:5d:a5:83:84:1a:7b:73:cf:1c:b4:f8:26:74:9e:a7:
79:1b:6d:38:1a:9f:5d:d3:ef:7f:89:af:46:36:8d:12:29:40:
f7:ce:04:33:97:2d:93:98:bd:ff:c5:18:79:d4:a3:1c:46:eb:
cd:14:7a:8a:c8:6a:70:06:57:81:0f:77:c2:97:40:83:a6:20:
ce:90:a9:e4:f9:e7:7f:fc:23:f6:e5:60:e6:38:ad:cd:4b:92:
90:cf:6a:7a:dd:26:02:71:9f:16:0d:07:18:4b:6e:56:df:55:
e9:20:01:4f:84:b8:c8:19:cf:48:b5:a5:7a:9b:56:7f:40:be:
69:c7:19:dc:49:b8:2e:79:96:11:ac:6b:f6:5d:18:0c:d7:c2:
b0:3a:ab:9b:83:01:b3:3e:e1:6f:27:86:83:6c:b1:24:68:07:
18:99:f3:dd:3e:51:3a:7f:39:f5:fc:82:88:fb:47:55:ec:97:
5e:aa:37:e7:b3:a1:9d:46:6b:db:f2:76:01:e2:26:94:02:09:
bd:13:ef:0c:81:ea:7e:1b:f6:88:32:c5:03:81:57:8f:57:e4:
f0:48:3d:51:b9:43:ad:33:9d:85:b6:dd:21:75:05:8d:d6:d2:
51:1f:b0:16:48:48:01:dc:60:e6:7f:98:71:e2:85:cd:66:8b:
59:a8:a2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org