Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XAecatF2eYjP_XNBHc_L-S7ebyU.roa
File: XAecatF2eYjP_XNBHc_L-S7ebyU.roa (raw, json)
Hash identifier: wD+rXvHVyC2ejgAVIGuUhXlMdCP7ESgG1kmI78Oonmw=
Subject key identifier: 5C:07:9C:6A:D1:76:79:88:CF:FD:73:41:1D:CF:CB:F9:2E:DE:6F:25
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719559ECC00554E02DCB88405A9E63D1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XAecatF2eYjP_XNBHc_L-S7ebyU.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38136
IP address blocks: 46.232.120.0/22 maxlen: 24
46.3.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:59:ec:c0:05:54:e0:2d:cb:88:40:5a:9e:63:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c079c6ad1767988cffd73411dcfcbf92ede6f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:12:d6:2f:e4:85:89:ac:40:95:4a:1e:43:
21:ca:24:1d:e9:77:71:70:cb:66:ab:c0:c4:99:87:
c2:c8:36:d6:ee:aa:7f:ac:c6:e6:d4:05:0b:6e:34:
27:d2:43:07:64:f6:ec:80:bd:fa:2f:df:7e:4a:fc:
46:66:ad:5f:85:12:56:97:4f:0b:02:cf:84:58:1c:
4a:5d:cb:5f:12:52:8d:84:77:7f:09:b8:c2:fe:1d:
36:60:bb:7c:f7:75:dd:fa:bd:20:24:59:a6:9a:42:
01:4c:e7:f1:16:a4:32:1e:62:36:5b:9f:a2:eb:fd:
87:bb:ce:6b:f4:6e:52:d6:c9:f5:7a:0d:06:37:da:
64:e4:15:8e:9d:e8:7d:50:5e:9c:96:a9:aa:cb:46:
23:23:07:19:3d:4d:57:09:43:8d:ba:ab:2b:57:7c:
08:2e:06:61:6c:61:ff:4f:30:0e:b4:44:45:b0:75:
f2:c1:22:ac:40:bf:e6:bf:7d:60:ac:29:3c:06:f1:
33:9e:60:0e:fc:9d:44:30:0c:31:8c:19:69:d4:ef:
f3:76:b7:de:d5:3c:c5:a5:36:2e:fb:ef:c8:1d:f7:
df:a5:43:0d:71:e8:a7:17:d2:48:10:1f:5d:f1:0f:
3d:75:b3:f6:79:0b:19:61:f9:db:91:f5:7d:c5:ad:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:9C:6A:D1:76:79:88:CF:FD:73:41:1D:CF:CB:F9:2E:DE:6F:25
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XAecatF2eYjP_XNBHc_L-S7ebyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
26:97:c8:33:ef:ae:50:6f:39:b1:86:13:e2:9f:2a:6b:b1:db:
c6:59:60:bd:e9:6f:bf:3b:34:71:06:23:f0:e5:5e:c5:8b:3d:
92:4f:59:f1:48:16:63:d6:6f:0a:18:c0:f6:18:f3:3f:20:9c:
04:e2:ce:28:66:eb:62:d3:84:16:ec:e5:df:5c:f5:2a:89:e7:
8a:e2:33:9c:24:a2:57:0c:5d:3e:eb:01:da:ce:e6:b6:9f:e7:
22:46:66:da:10:6a:b1:2f:49:ae:40:3f:b4:ce:b4:ba:86:31:
dd:26:73:b4:fd:02:a6:48:5c:d1:ee:9f:4c:a5:a4:70:6e:31:
ec:f1:5b:1a:2b:63:1b:c3:aa:d9:71:22:ae:12:0a:a5:c2:9c:
d6:27:74:f3:6b:0f:18:26:34:90:b7:3f:e7:55:cc:b2:4e:14:
af:db:bc:29:6f:2b:5e:b0:0b:1c:22:ea:95:00:59:4c:4e:b1:
47:ee:28:ad:45:be:d9:3c:96:71:50:d8:f5:70:de:1f:1f:f4:
59:44:9f:cf:6d:cb:8e:f0:3f:6f:78:93:37:c4:af:83:2d:ce:
88:f9:71:61:41:c8:ad:a0:23:25:e2:f9:ef:2b:4e:a6:b9:44:
67:a7:90:fc:cb:a0:b8:f9:42:12:b6:12:2d:cf:a3:2d:55:c3:
6e:a0:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org