Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fl2N7YQ4J1bT6aKlNb1cEOUnIE4.roa
File: fl2N7YQ4J1bT6aKlNb1cEOUnIE4.roa (raw, json)
Hash identifier: tAVFhfWaIDPreE9AY/xhroMooTqRidyl4XKHa2BhsUQ=
Subject key identifier: 7E:5D:8D:ED:84:38:27:56:D3:E9:A2:A5:35:BD:5C:10:E5:27:20:4E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A4BDACAC089BBDBA7D7173F98D6204236
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fl2N7YQ4J1bT6aKlNb1cEOUnIE4.roa
Signing time: Thu 31 Aug 2023 13:49:04 +0000
ROA not before: Thu 31 Aug 2023 13:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209218
IP address blocks: 46.232.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4b:da:ca:c0:89:bb:db:a7:d7:17:3f:98:d6:20:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 31 13:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e5d8ded84382756d3e9a2a535bd5c10e527204e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:b9:e9:07:d0:73:46:19:ac:d4:fb:b7:e3:
b0:ed:12:1a:13:e7:ca:e8:b9:c3:d7:cf:21:3a:72:
12:54:42:55:93:c0:f4:30:44:f7:42:1a:5d:18:37:
55:3f:3d:d7:34:4e:3a:38:92:ca:c2:bd:b2:59:5c:
f5:d9:14:6f:c8:8e:21:42:a6:22:4f:a2:3b:31:3b:
89:4b:a5:5e:0d:f7:9a:9f:9e:ef:39:45:57:05:11:
2d:8e:1d:3f:52:fe:24:a9:f2:e8:5e:1e:41:b1:b0:
e6:5d:4b:7c:1e:2a:c6:a3:0c:70:af:7b:9d:e4:b6:
5a:93:b7:e9:3c:fc:62:91:73:65:f2:43:e5:51:62:
1f:d6:d3:02:9b:2d:2b:ac:73:c3:9d:54:14:0e:f7:
22:e2:22:cb:a7:54:04:e5:55:06:7c:e6:95:9f:8c:
7a:25:a9:8a:b7:04:be:5d:2c:f2:3f:7d:44:e0:14:
87:d9:87:f3:fc:52:6c:5e:49:03:59:43:0a:f4:7b:
b8:bf:a2:21:58:04:7d:e2:7b:53:63:bb:3c:aa:79:
90:04:b8:72:7f:a2:7d:4c:8d:c9:7f:13:36:01:39:
ac:6b:ad:16:dc:aa:93:1e:df:c3:2f:5b:97:d1:27:
c9:9d:f4:53:47:f4:7a:87:18:5d:b1:72:18:95:4b:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5D:8D:ED:84:38:27:56:D3:E9:A2:A5:35:BD:5C:10:E5:27:20:4E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fl2N7YQ4J1bT6aKlNb1cEOUnIE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4a:13:91:e4:ac:5f:37:1c:fd:94:cc:de:07:bd:30:42:51:
8d:c1:72:e9:56:27:9c:48:32:31:6b:bd:e6:22:59:5f:04:51:
63:06:89:6e:6c:22:01:16:59:64:dc:25:d8:f6:9a:cf:09:fe:
81:f0:8b:14:20:9f:ab:e3:6a:1b:08:fc:fc:76:bf:53:c4:16:
00:36:87:ba:df:2a:00:db:67:2c:42:60:82:80:9d:fc:16:01:
10:4f:09:71:5d:2b:0c:b6:25:9f:89:75:ae:31:ca:88:39:bf:
4b:99:dc:31:9a:b8:25:a0:6a:89:8d:60:18:79:f7:67:ce:6f:
48:8b:b9:56:01:a3:5d:81:2b:c6:55:6d:37:4c:b2:d5:80:88:
fb:d4:d3:c2:af:02:75:ee:ad:cb:a8:b0:c0:44:0c:94:d0:98:
87:db:83:22:62:27:1b:6e:b8:62:56:e3:1d:e4:02:f5:90:d0:
79:cf:ba:f9:e0:d5:12:2a:5f:d5:11:8b:24:d5:7a:23:43:c5:
fe:c3:a8:59:5c:32:1b:b9:5d:09:8e:38:e6:2f:79:5f:77:f0:
92:08:73:b9:bf:51:d0:77:59:dd:3e:8d:57:d1:fa:34:fa:c0:
cd:f8:9f:b0:30:6d:24:a9:45:ac:8b:67:08:7a:fe:56:4d:fa:
20:ef:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org