Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qkEXNNPrNMvJDEkYlzAihu1Tp-k.roa
File: qkEXNNPrNMvJDEkYlzAihu1Tp-k.roa (raw, json)
Hash identifier: LTa9+uDeJ9eHvLtz7XQpZON733PE4TeRdE2egkbAdeI=
Subject key identifier: AA:41:17:34:D3:EB:34:CB:C9:0C:49:18:97:30:22:86:ED:53:A7:E9
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F52A18C5E308664EF6503A956C964841
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qkEXNNPrNMvJDEkYlzAihu1Tp-k.roa
Signing time: Mon 26 Jun 2023 00:45:56 +0000
ROA not before: Mon 26 Jun 2023 00:45:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146839
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 20
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f5:2a:18:c5:e3:08:66:4e:f6:50:3a:95:6c:96:48:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 26 00:45:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa411734d3eb34cbc90c491897302286ed53a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:34:81:c8:f5:9c:04:a7:67:33:38:b8:ea:68:
d6:e0:c1:95:7e:ae:7e:cd:1b:b7:1b:ff:94:33:91:
76:93:d4:9a:f2:b6:a6:f6:03:e9:1d:14:23:6c:f4:
d7:21:ea:d5:b3:2f:e4:e7:b1:72:3d:0f:fb:b9:75:
99:c5:02:5a:6f:c1:1e:13:af:d6:aa:29:3b:c0:1a:
ce:07:83:5d:ad:8e:2e:2b:d5:5d:36:a8:64:f7:41:
84:c1:b1:54:7e:9e:0e:e6:da:7b:a7:02:8b:b2:a3:
a0:e6:00:57:f3:fb:92:c0:5b:5d:f6:82:0a:18:82:
cf:10:5c:20:c7:7f:c6:2c:aa:8f:0a:03:f7:a7:a7:
5f:19:92:a3:7a:6d:9f:e4:35:34:9a:53:5a:8c:d5:
9b:65:e6:fa:d3:58:b8:4d:83:d9:d6:b2:3c:61:91:
cb:11:aa:75:de:30:78:25:d3:3d:dd:26:ee:f1:e0:
77:8a:36:44:3a:d6:54:78:a1:63:b9:95:70:8e:b7:
cd:6b:ae:be:3a:c6:cc:6d:c3:bd:ad:6e:9d:69:ff:
1b:01:92:36:10:d3:60:c7:7d:8b:34:23:57:23:0e:
76:5d:ed:56:89:b9:70:11:d9:20:db:fe:87:18:3c:
9b:52:a0:ae:f3:6b:8b:eb:94:73:98:77:4a:fb:2b:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:41:17:34:D3:EB:34:CB:C9:0C:49:18:97:30:22:86:ED:53:A7:E9
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qkEXNNPrNMvJDEkYlzAihu1Tp-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
04:00:f6:79:52:f6:fd:60:72:43:42:b8:94:24:e8:11:df:e7:
4f:31:9d:33:98:92:7e:10:33:46:48:f2:f0:07:54:ad:0d:16:
77:15:65:85:21:c4:f9:20:9f:b8:45:aa:bb:6b:6e:e4:79:a8:
71:ac:b1:d8:e0:7e:40:e0:f5:b3:5e:06:c1:5f:8a:ba:b8:e9:
81:4f:28:83:90:4e:fb:25:80:f4:95:d3:6e:aa:ce:e0:0b:67:
db:85:d9:c4:7b:3d:93:88:fd:a6:dd:4b:22:56:74:9b:34:c2:
d2:29:13:39:b4:04:eb:b3:cd:c2:4f:2f:75:42:e0:bc:cd:12:
42:94:e5:51:c3:88:38:51:f3:7f:da:f7:cd:57:d3:0e:27:c3:
9b:f3:e6:b9:95:a7:a9:50:a1:bb:15:1e:69:3a:dc:02:2d:5c:
a0:d3:5f:90:58:de:6e:8b:df:08:3f:62:93:e5:97:0a:66:f0:
18:d4:0d:ad:6b:b1:c7:7f:a9:ad:5a:c7:78:3e:7b:d3:e6:07:
fe:d2:1a:a9:2b:c5:e8:c7:1a:92:ec:cd:cc:04:36:7b:10:f0:
62:05:78:40:ff:c4:89:09:c5:e1:ee:85:70:82:e3:6d:99:83:
f8:67:60:ca:02:ef:d4:3c:90:fa:f9:98:f2:6e:5b:6d:37:aa:
4b:d7:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org