Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pANxLL9irt3dbTZYIHDBt7fnyls.roa
File: pANxLL9irt3dbTZYIHDBt7fnyls.roa (raw, json)
Hash identifier: v4oyadftYSKGSIVSiGveJHwtIVRAZPYk4NtJtOTmqd4=
Subject key identifier: A4:03:71:2C:BF:62:AE:DD:DD:6D:36:58:20:70:C1:B7:B7:E7:CA:5B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018828A2B9BE8CF2B2A2D36502136A271AD6
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pANxLL9irt3dbTZYIHDBt7fnyls.roa
Signing time: Wed 17 May 2023 07:35:32 +0000
ROA not before: Wed 17 May 2023 07:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213296
IP address blocks: 46.3.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:a2:b9:be:8c:f2:b2:a2:d3:65:02:13:6a:27:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 17 07:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a403712cbf62aedddd6d36582070c1b7b7e7ca5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:cb:26:8f:cc:2f:94:73:9d:84:70:1a:a3:
b7:0f:5b:61:33:7d:ee:82:b3:02:75:f5:22:2a:d9:
f6:9c:f3:96:f1:bb:58:20:12:92:c4:99:63:2a:76:
fd:97:db:30:dd:b5:0a:64:63:2e:fe:ee:80:ec:71:
0f:d0:e3:e4:c1:ce:1f:de:75:ef:50:93:1d:b9:0c:
91:9e:73:8b:fd:3c:f6:a4:4c:07:76:08:5b:1b:1d:
14:1b:4e:3b:6e:7a:fb:de:12:94:f7:ae:33:cc:2f:
a5:64:18:3b:1c:ee:07:90:4f:f5:2c:42:05:e0:2b:
82:c0:a8:a6:79:0b:cc:69:03:04:fe:15:46:ff:fa:
59:97:25:05:c0:25:5d:60:90:e5:0c:58:2c:2d:02:
32:2d:e2:f8:95:bf:ee:78:89:6f:c0:0e:df:90:62:
77:0e:19:ea:f9:67:75:af:f5:71:08:b6:de:b7:15:
9d:d4:b1:a8:60:ec:8a:b5:9d:4e:11:21:f5:69:ff:
a3:57:89:ff:c5:02:61:e4:3d:87:8f:6e:12:3a:95:
67:6e:23:52:df:5a:51:4f:58:6e:19:1d:06:08:cc:
62:a2:45:2a:43:77:9b:fe:72:79:ca:6e:2d:7b:86:
54:26:b8:bd:37:8f:ac:8c:bc:f9:ed:ca:2c:69:51:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:71:2C:BF:62:AE:DD:DD:6D:36:58:20:70:C1:B7:B7:E7:CA:5B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/pANxLL9irt3dbTZYIHDBt7fnyls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:65:c4:0b:ca:a3:1d:25:64:cb:45:2b:5e:85:24:fd:71:ca:
95:ef:af:1a:f1:2d:33:61:a9:b8:28:9f:7a:fc:66:e8:f2:99:
6f:fe:17:5b:23:43:fe:b5:cb:82:4b:2a:42:24:6e:3a:9a:b5:
bb:c8:56:18:67:03:9d:89:b7:e7:0e:39:ed:fe:54:50:b1:6a:
2b:21:29:13:ab:f3:86:c8:79:fa:3d:07:42:87:db:bc:8a:82:
c5:75:b2:01:47:d9:cc:9a:b3:ed:61:cd:ab:e6:d3:25:89:ed:
c0:5a:f1:3b:ec:8a:59:df:d0:28:bb:d4:74:59:68:cb:49:bd:
d9:3b:d3:02:a6:5f:1b:06:61:98:38:10:06:64:e0:79:16:63:
a1:c3:7b:3b:cf:24:e4:b0:f1:4e:52:a5:fa:7a:fe:31:6f:f6:
00:37:b4:6f:06:d6:76:b0:9c:79:0c:57:55:6c:ad:5d:4b:db:
28:11:3b:39:4e:8a:c9:9b:d4:8f:c7:cd:8f:06:52:18:f0:25:
01:4a:e6:bc:13:9d:ef:de:64:1a:9f:b6:76:27:c9:f8:87:87:
a7:a2:de:98:cd:68:19:bf:70:0c:69:59:2b:2e:4b:0e:8d:13:
a5:ad:85:26:9f:a9:8c:31:3e:71:71:b6:4c:c5:09:e6:20:3c:
81:25:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org