Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mFwpvHU1ScYPCDnw3whfHnAprC4.roa
File: mFwpvHU1ScYPCDnw3whfHnAprC4.roa (raw, json)
Hash identifier: qPwsykkMbenahwlphp0hLUlBz0mqHrwSQt5e/oV7oy8=
Subject key identifier: 98:5C:29:BC:75:35:49:C6:0F:08:39:F0:DF:08:5F:1E:70:29:AC:2E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571956164D7CAFD28D8066DB76771D725
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mFwpvHU1ScYPCDnw3whfHnAprC4.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 46.232.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:61:64:d7:ca:fd:28:d8:06:6d:b7:67:71:d7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=985c29bc753549c60f0839f0df085f1e7029ac2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:ba:df:b4:5c:de:8d:fc:2a:ac:26:fc:64:
4a:ab:42:82:e9:26:07:40:cf:24:08:ba:c6:f8:d2:
47:6f:2e:f9:44:7c:81:41:30:72:88:ce:b2:c0:a4:
56:fd:e2:8f:23:44:7f:ae:9b:af:8b:c6:3e:86:02:
cd:3a:49:be:70:1c:68:d9:fa:ef:e2:6b:56:a3:ee:
f6:4b:30:71:82:52:93:c6:85:e5:48:fa:db:60:d9:
c6:c8:3a:35:6e:5c:6e:1f:69:75:ad:b8:22:a3:23:
da:f9:04:8f:57:a9:75:2a:b4:5b:0b:b7:ee:5c:47:
89:3c:cd:e6:76:67:ba:4b:90:b0:45:1f:b4:7d:f3:
e8:5e:9a:50:1b:34:e7:6f:13:25:05:45:ed:ee:9c:
f4:43:c4:c1:ca:2f:c7:d9:a1:b5:2c:4d:1f:02:a8:
84:70:a3:f6:4c:42:72:bd:8e:d3:fa:6b:09:6f:63:
95:06:20:05:aa:74:3f:27:50:d5:de:e6:05:6f:82:
56:d6:02:d4:71:20:de:ef:4d:43:c0:5f:79:97:91:
3d:a5:c8:d3:42:d7:e7:9e:dd:f6:83:16:9f:4c:de:
73:5d:06:d7:a6:6a:d4:bc:bd:f0:a7:dd:87:d6:79:
81:40:fe:bb:42:79:39:a8:1b:e5:9d:a7:e6:c1:0e:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5C:29:BC:75:35:49:C6:0F:08:39:F0:DF:08:5F:1E:70:29:AC:2E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mFwpvHU1ScYPCDnw3whfHnAprC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/22
Signature Algorithm: sha256WithRSAEncryption
54:12:01:d0:62:de:5e:8f:c4:b9:02:8b:3e:f0:6d:5b:a5:ef:
10:28:a7:6b:22:6a:ab:49:e9:3a:15:2b:2c:ed:7b:87:6b:42:
64:44:a6:21:44:c8:1a:a5:f5:46:2d:92:99:e0:4d:0f:85:0a:
3a:32:74:64:79:98:2e:ee:53:60:53:fd:15:f3:cc:2e:47:18:
16:98:f1:2b:75:f1:ca:44:5b:fe:36:74:62:df:d6:ee:c6:5e:
52:92:32:f2:97:90:47:68:70:23:d3:10:af:97:f4:d7:ab:ac:
21:30:6a:ef:94:be:7e:4d:9b:a7:f6:2c:b6:d8:17:39:28:94:
71:ff:a4:91:71:61:a4:42:76:ca:ab:76:83:1e:bc:f8:1f:29:
d4:d7:a0:9d:53:fe:33:f0:ff:00:6c:de:d8:33:6d:0b:96:e8:
43:b5:93:b0:5f:db:b1:90:45:79:88:54:c2:65:27:e5:f4:59:
cf:c1:16:4a:8d:a9:1e:b5:7f:57:0d:fe:41:84:b0:06:ee:fb:
39:c6:18:3a:ef:14:e2:8d:18:61:dd:c2:bc:4c:f3:d4:6b:84:
1c:fa:86:e3:e2:4b:5e:05:b3:61:91:e5:ed:64:cb:1a:74:0d:
de:af:2e:d7:3a:31:05:13:4a:6c:0f:69:e4:9b:0e:81:a6:3c:
52:66:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org