Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/etFQA9WCh8WXgw_Eh5EmWhQFh8w.roa
File: etFQA9WCh8WXgw_Eh5EmWhQFh8w.roa (raw, json)
Hash identifier: wG04DAQCJVgvhveuyrC+FHj7YuQXr1BHX5fmmJgMyyI=
Subject key identifier: 7A:D1:50:03:D5:82:87:C5:97:83:0F:C4:87:91:26:5A:14:05:87:CC
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01889F5BE69F72325F1D318C3B60FC3A1DB8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/etFQA9WCh8WXgw_Eh5EmWhQFh8w.roa
Signing time: Fri 09 Jun 2023 08:53:00 +0000
ROA not before: Fri 09 Jun 2023 08:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 46.232.37.0/24 maxlen: 24
46.232.32.0/24 maxlen: 24
46.232.36.0/24 maxlen: 24
46.232.34.0/24 maxlen: 24
46.232.38.0/24 maxlen: 24
46.232.35.0/24 maxlen: 24
46.232.33.0/24 maxlen: 24
46.232.39.0/24 maxlen: 24
46.232.43.0/24 maxlen: 24
46.232.41.0/24 maxlen: 24
46.232.44.0/24 maxlen: 24
46.232.42.0/24 maxlen: 24
46.232.40.0/24 maxlen: 24
46.232.45.0/24 maxlen: 24
46.232.47.0/24 maxlen: 24
46.232.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:5b:e6:9f:72:32:5f:1d:31:8c:3b:60:fc:3a:1d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 9 08:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ad15003d58287c597830fc48791265a140587cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:35:a8:95:3c:23:c7:8d:50:48:d3:ee:eb:
79:d5:e7:db:43:71:ff:c3:2a:0b:cb:0d:c1:f8:48:
98:6a:d0:f9:a3:6c:c6:2f:dc:70:a4:1b:af:0e:9a:
81:ff:30:f9:fb:44:cb:f1:8e:f6:e5:d9:32:2b:2d:
56:58:3e:10:bd:60:38:17:d5:3b:cd:2e:4f:61:fb:
a0:4b:f9:e4:d7:ae:0b:f2:7f:1d:e4:79:f0:12:45:
c8:95:09:96:6d:4a:75:2a:ba:f5:b8:ef:6b:02:ad:
a8:e5:b0:fe:02:4e:e7:96:c2:3a:08:77:dc:a3:b7:
4c:ed:1b:f6:45:f9:48:0f:4f:63:07:1d:06:65:8b:
94:63:7f:99:13:53:2a:4d:27:13:b3:bb:37:0c:94:
ec:80:30:ac:d2:02:66:f2:88:6e:5f:3a:54:1d:3f:
67:e3:5e:60:95:b5:04:c6:30:0b:5b:52:51:f3:9b:
da:ef:74:b4:68:10:60:ef:04:fd:4a:6e:37:2f:ab:
92:ec:c8:7c:85:06:e6:a3:0b:31:7d:f6:99:e1:1d:
f5:f6:3d:52:35:02:24:c3:42:d7:0f:e8:18:c8:67:
ae:8e:19:a7:6f:59:fd:52:31:02:b9:af:a6:83:8d:
3c:61:cb:36:81:1b:cb:73:51:5a:81:93:f9:b9:1c:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D1:50:03:D5:82:87:C5:97:83:0F:C4:87:91:26:5A:14:05:87:CC
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/etFQA9WCh8WXgw_Eh5EmWhQFh8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:cd:af:20:a8:c5:56:16:d6:68:b6:52:26:cf:08:cd:f8:4f:
59:f0:18:9e:ea:9a:c6:4f:8e:67:7a:fc:ef:09:86:ca:06:74:
f1:51:b3:17:12:b1:bc:72:a6:92:b6:44:08:ca:8b:2e:27:1e:
8d:79:9d:df:92:3b:79:01:42:39:c4:94:e5:5a:26:b4:87:e0:
f3:4e:1c:9b:9d:50:d2:69:f5:01:af:7d:28:00:b4:95:6f:28:
1b:25:c8:65:96:11:c7:68:54:d6:1f:c2:86:fa:fb:4c:2c:4c:
f9:7c:91:d6:e8:ee:41:8c:ed:11:7a:c3:35:86:bd:cd:d3:2c:
23:47:b9:80:c9:9f:af:6e:fa:94:0b:01:7f:8b:54:b3:b0:7f:
c5:9d:0d:62:7f:07:dd:61:26:be:03:d5:cc:5a:62:2f:41:c8:
dc:be:3d:4a:b3:4e:bb:b5:43:a9:f0:96:8e:09:77:06:97:e4:
45:78:33:e5:31:fe:54:b6:8b:56:ba:a4:16:99:5c:60:df:bd:
a9:04:9c:4e:e6:0b:56:f3:a9:00:8b:2a:dc:d6:15:a1:df:2e:
6f:6c:75:12:6e:19:b8:5c:95:16:05:dc:48:e5:cd:7f:96:a5:
bb:46:5d:f7:9a:71:ba:ce:80:95:18:c6:25:b2:ad:d7:bd:a1:
56:06:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org