Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VvHC_LLaHUWdNH4PqjRaYs0P_Ao.roa
File: VvHC_LLaHUWdNH4PqjRaYs0P_Ao.roa (raw, json)
Hash identifier: BpmGWMueuKMKSRVns474t6ILQKJQgm0fIZftbP93+PQ=
Subject key identifier: 56:F1:C2:FC:B2:DA:1D:45:9D:34:7E:0F:AA:34:5A:62:CD:0F:FC:0A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F52EAE0931C9617E2B32E0BD76C4D9D1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VvHC_LLaHUWdNH4PqjRaYs0P_Ao.roa
Signing time: Mon 26 Jun 2023 00:50:57 +0000
ROA not before: Mon 26 Jun 2023 00:50:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1040
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f5:2e:ae:09:31:c9:61:7e:2b:32:e0:bd:76:c4:d9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 26 00:50:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56f1c2fcb2da1d459d347e0faa345a62cd0ffc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:c1:4d:c5:95:ae:f9:1f:77:d4:46:93:4e:
f7:60:bc:9f:af:a1:d7:6b:b1:97:52:d1:65:5e:8c:
fa:b1:04:75:1e:7a:4d:37:08:54:4a:cd:ab:a3:8c:
c4:b8:4a:8b:9d:62:f6:b5:02:d1:8d:b1:a2:57:34:
0e:08:97:01:d3:63:57:cc:21:97:1a:a7:1f:97:e6:
69:34:2b:af:ac:6c:fd:1c:e9:0f:c9:40:3d:fe:02:
9c:c0:d8:e1:39:a4:c9:16:11:cf:de:c2:98:d5:98:
7d:8f:9c:fc:e6:4d:1a:8e:fe:0a:11:5d:fa:cf:c6:
7b:9a:cf:69:d1:f9:5d:13:fa:19:a1:e4:2f:bd:6c:
d7:72:3e:25:61:6d:ec:5e:a2:b0:dd:bc:79:d1:67:
40:65:1e:3d:16:d0:6f:4b:37:81:79:01:af:aa:e6:
fb:26:50:98:21:d6:dc:2c:65:bb:23:ce:1d:74:bf:
5e:e1:35:cf:0a:87:c9:18:11:d2:4a:ed:c7:46:65:
3c:9b:f4:8b:7f:93:6b:6d:10:4e:43:9c:71:01:cf:
2d:86:11:fe:a0:12:f9:60:22:10:7e:c8:79:ca:3c:
11:2c:e2:8b:c8:fa:d7:27:92:55:a3:10:66:2b:11:
9d:c1:30:b4:07:59:92:1d:90:2c:07:c0:a5:c4:ef:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F1:C2:FC:B2:DA:1D:45:9D:34:7E:0F:AA:34:5A:62:CD:0F:FC:0A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VvHC_LLaHUWdNH4PqjRaYs0P_Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:25:8e:f2:82:15:57:65:a5:33:12:7c:02:41:2e:43:23:39:
54:c1:a5:4a:ad:29:0e:af:44:b1:58:e8:ca:43:d9:fc:dc:e8:
b0:47:f8:2f:29:42:2e:ba:1c:4b:4a:e5:79:7b:c8:67:a3:04:
61:fd:5e:99:9a:7c:ba:89:d4:18:34:5e:65:1c:65:ce:84:24:
8e:b2:39:6f:88:a6:5f:e1:7e:92:21:ce:00:fa:8c:d9:86:c9:
b0:85:eb:f8:0b:f6:cf:c6:13:7c:a8:af:32:08:51:80:9c:2b:
06:74:85:bb:02:1c:41:8a:d0:a0:a2:32:1a:91:01:50:48:c6:
45:fb:2f:43:5d:8a:90:22:88:a2:34:bc:f7:3b:1b:12:49:30:
c2:f9:be:ce:c8:e3:3e:34:63:3c:1b:c5:6c:ae:8e:6f:fb:7c:
5b:9f:f1:72:cb:3a:d7:ae:05:94:e9:ab:22:98:6b:ab:a7:c2:
35:d8:f3:07:34:d3:ac:d9:2e:34:68:66:a1:f3:bf:6d:5b:f9:
5a:bf:09:b5:94:b5:0a:95:a1:35:bb:ff:9d:f9:af:fe:f8:86:
2f:08:30:27:94:4e:7d:dd:14:5e:87:2c:78:2d:3f:77:e1:5f:
ff:b5:ee:32:60:e3:68:52:ee:b2:2a:39:21:ce:fe:10:eb:ff:
4b:19:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org