Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ozzA6kpCviG2ubJJrtxy2_ArWCI.roa
File: ozzA6kpCviG2ubJJrtxy2_ArWCI.roa (raw, json)
Hash identifier: Gxi5mSmJ+Y0dzq1pOyLyEgxyiaWmcfR/iqSZNKz71OI=
Subject key identifier: A3:3C:C0:EA:4A:42:BE:21:B6:B9:B2:49:AE:DC:72:DB:F0:2B:58:22
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01881EF5DEF62EA3066C82C015208DE1BAC0
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ozzA6kpCviG2ubJJrtxy2_ArWCI.roa
Signing time: Mon 15 May 2023 10:30:09 +0000
ROA not before: Mon 15 May 2023 10:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 46.3.160.0/22 maxlen: 24
46.3.208.0/21 maxlen: 24
46.3.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:f5:de:f6:2e:a3:06:6c:82:c0:15:20:8d:e1:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 15 10:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a33cc0ea4a42be21b6b9b249aedc72dbf02b5822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:22:e8:7b:16:6c:b6:6a:c6:10:b2:6e:0c:
75:05:02:90:95:c6:4f:34:28:0d:5c:a0:da:22:73:
a2:bd:76:ec:be:af:d7:3d:2f:77:1d:65:1f:a8:36:
47:0d:f9:0a:e9:d4:c2:9b:94:99:e5:56:17:f1:6c:
6a:c4:19:17:f7:41:cc:21:e2:5c:7c:db:6b:20:ab:
f3:2e:f1:ae:1a:25:0f:a1:a2:d1:ab:e1:a8:b3:82:
27:05:1f:bd:47:1b:0e:d4:a4:5d:97:40:00:75:60:
fc:89:11:6d:4e:54:fc:27:df:38:4a:44:45:fa:79:
11:8b:db:c5:d6:af:6f:41:8b:78:c4:bc:72:6e:37:
aa:0c:83:21:1b:1b:fa:b9:80:f2:b1:41:f8:de:50:
17:e8:f5:24:00:f6:50:bf:ae:ce:14:7b:c8:bb:36:
9f:9a:f7:5e:53:f9:70:78:d2:91:b3:6d:a1:9a:f6:
23:ec:e6:cf:81:cf:b5:e8:6c:14:4a:b6:e9:21:87:
3f:79:b6:d7:14:39:b3:da:16:ba:9a:12:b9:59:01:
84:15:59:17:ae:53:d3:a0:d8:4b:89:28:89:07:54:
9c:26:0e:b7:9b:99:f9:7f:21:f6:67:9a:d1:40:3a:
a9:28:1f:3c:5a:20:67:0f:29:e9:d7:5c:3c:0f:20:
f1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3C:C0:EA:4A:42:BE:21:B6:B9:B2:49:AE:DC:72:DB:F0:2B:58:22
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ozzA6kpCviG2ubJJrtxy2_ArWCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.160.0/22
46.3.208.0/21
46.3.224.0/22
Signature Algorithm: sha256WithRSAEncryption
52:86:24:0f:7e:7d:e4:31:e4:40:18:e3:c8:e5:c6:e7:12:cd:
17:9b:78:7c:8e:f7:8c:00:34:de:c3:ae:ba:81:c8:66:af:9b:
b2:43:57:58:97:75:1e:b5:a1:f2:cf:19:3d:cb:cb:55:1e:51:
06:b2:13:96:0a:5d:b6:c3:d4:7c:32:4a:d7:ef:02:7c:fb:e1:
16:86:c6:16:3d:9d:bc:c4:ce:ec:f5:5b:75:f1:90:fb:20:5f:
10:c3:5a:0b:93:65:d4:84:74:f9:ad:79:3c:c2:ab:86:cb:d5:
64:0e:90:f6:c2:0d:6f:1b:61:9b:b8:26:55:65:a5:66:e5:f4:
26:81:3f:67:3e:11:3d:2d:9b:fa:ea:c6:b3:06:c8:6f:1a:b0:
13:2a:70:71:2f:8c:1c:e6:3a:34:b2:2e:67:62:f4:73:dc:65:
1b:ee:43:1f:92:e5:bb:3e:15:99:11:40:3f:34:1f:45:31:3e:
c5:f0:00:26:81:86:e6:e1:79:4e:f7:14:8b:54:37:b0:f2:b0:
2e:1f:e9:cb:06:84:43:6d:75:34:fb:3b:de:59:27:96:81:fd:
1a:9a:83:da:8b:96:00:60:44:09:b6:86:44:54:f4:c1:ca:74:
6c:9f:a7:9e:b7:a8:88:c7:25:0c:7a:9e:79:02:26:be:b6:c3:
06:1e:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org