Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bf62TOJxS2uIh0J8F3-RTMyZLGg.roa
File: bf62TOJxS2uIh0J8F3-RTMyZLGg.roa (raw, json)
Hash identifier: cEXc3IGgMjwbH20YX43pB+Yc5cY30zid1jvrIkLv2gw=
Subject key identifier: 6D:FE:B6:4C:E2:71:4B:6B:88:87:42:7C:17:7F:91:4C:CC:99:2C:68
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955B75AA026305E91E5AA2FC911711
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bf62TOJxS2uIh0J8F3-RTMyZLGg.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41255
IP address blocks: 46.232.120.0/22 maxlen: 24
46.3.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5b:75:aa:02:63:05:e9:1e:5a:a2:fc:91:17:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dfeb64ce2714b6b8887427c177f914ccc992c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:21:1f:90:cd:c1:43:7e:1a:8a:97:26:1c:
5f:d1:04:6e:98:ad:8e:eb:68:09:71:2d:91:3b:a3:
c8:ba:b4:26:86:1d:af:8c:a9:32:f1:f2:d5:1a:c5:
0f:28:cc:76:12:4e:0f:24:9a:b5:6a:4d:44:2a:4a:
6c:ac:09:25:d3:e4:11:77:19:de:49:58:21:14:45:
e6:30:cd:85:f1:87:ac:07:0b:78:f5:16:9f:64:bd:
37:64:3e:fb:5a:6a:0b:b8:41:72:56:d6:56:2c:49:
ed:06:9f:e6:a1:61:45:96:db:cf:75:5a:78:bf:ec:
9f:f1:56:42:cb:ab:de:c3:d7:ef:26:eb:a0:07:0e:
73:16:c9:b5:30:d4:8c:91:91:b8:ef:b7:aa:86:1d:
84:7d:d2:4f:96:5a:2d:a8:8c:ba:69:c8:61:36:e6:
79:84:99:c4:ac:20:87:bc:38:13:4c:ac:9a:be:14:
25:c2:0a:f9:5e:96:5b:52:6d:0d:73:64:23:91:86:
9c:67:1f:d0:03:31:98:b9:ac:a4:d5:ad:04:6f:6e:
ac:a7:9f:27:f8:8a:e1:c9:09:b2:ab:96:d5:24:c3:
54:57:93:d1:1f:bb:38:a6:6d:06:7b:35:15:19:a2:
f4:c2:6b:21:f2:ab:7e:e1:6f:f1:62:99:c0:e4:4e:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FE:B6:4C:E2:71:4B:6B:88:87:42:7C:17:7F:91:4C:CC:99:2C:68
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bf62TOJxS2uIh0J8F3-RTMyZLGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7f:3b:11:b0:ad:0c:aa:67:4b:e6:bf:74:28:29:9f:c0:84:
79:ba:18:f5:3e:22:b6:a6:4a:f4:d7:60:7f:01:b7:a8:f0:c1:
da:fb:7d:39:b6:2f:ba:35:10:26:3e:98:c3:75:f0:50:78:4a:
ce:c7:db:5b:d8:69:b3:00:1a:36:f6:5f:66:26:81:de:e2:c3:
e3:48:ce:7a:62:d9:eb:f8:b2:51:d7:76:34:b8:44:60:88:eb:
34:58:38:4e:39:eb:ff:35:08:ef:79:18:4a:8a:e6:63:b8:28:
10:86:c6:69:94:a4:43:d9:37:1b:c9:25:e7:ce:0f:a5:be:17:
3d:95:04:3e:8e:61:86:10:93:f2:2f:2a:95:e7:ca:48:0f:83:
f9:52:c6:73:de:f7:9e:ab:20:66:01:ef:84:a3:74:03:f2:e6:
ae:11:17:bd:6c:01:a1:cf:dc:83:74:74:fc:68:a8:d6:11:86:
d4:ce:c9:03:93:ea:7d:aa:8e:d3:61:b7:71:7b:86:ee:82:88:
f9:1a:ed:16:1c:41:8d:a8:4c:76:f6:d2:10:96:cf:3a:d7:a4:
9d:0f:57:93:6f:78:bf:50:09:cb:62:6f:25:17:2c:31:4a:16:
ad:a1:70:79:a7:3c:f9:04:26:8a:75:92:28:c8:41:80:e3:28:
e8:e7:87:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org