Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/r6A--MwJuRFuds19zmnGpUmhPt0.roa
File: r6A--MwJuRFuds19zmnGpUmhPt0.roa (raw, json)
Hash identifier: Xnjr+54xYy2QGbjkR0xBSXN9u59GUWfpd+BwPxMfemc=
Subject key identifier: AF:A0:3E:F8:CC:09:B9:11:6E:76:CD:7D:CE:69:C6:A5:49:A1:3E:DD
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A6C18A7CDBC3272635DB1DC8A4B9C8FC8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/r6A--MwJuRFuds19zmnGpUmhPt0.roa
Signing time: Wed 06 Sep 2023 20:04:29 +0000
ROA not before: Wed 06 Sep 2023 20:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.3.176.0/21 maxlen: 21
149.126.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:18:a7:cd:bc:32:72:63:5d:b1:dc:8a:4b:9c:8f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 6 20:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afa03ef8cc09b9116e76cd7dce69c6a549a13edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:47:ee:2c:9c:7a:54:75:86:1a:93:de:e8:
0e:49:fe:3a:40:76:f9:19:4f:62:12:91:ba:d4:89:
82:a0:5b:ca:68:c7:06:91:30:15:53:40:e2:3f:de:
29:ef:94:bf:73:73:05:32:0f:4b:64:71:a8:46:f1:
05:43:71:10:90:01:e5:ab:62:7f:00:7b:3b:a9:ca:
e5:5c:cc:d1:68:32:c4:13:ac:6c:3e:70:72:99:b4:
c7:d1:d9:6f:e3:fe:ab:70:ef:a5:50:fe:6c:d0:71:
6f:27:08:b1:04:87:b8:ab:3a:5b:3e:4f:ae:58:a3:
77:78:74:26:f0:0f:47:7a:2e:04:49:b3:ed:39:59:
68:81:a8:a5:b2:78:53:7f:59:d6:6e:32:c7:87:d0:
df:22:fc:47:89:46:6b:3b:45:a0:b0:9a:ac:26:73:
c4:42:8f:13:8c:4d:80:00:53:3c:19:56:4a:f9:01:
dd:90:2b:d3:95:97:56:42:29:5d:4a:4b:02:5d:14:
b8:15:5a:7d:f9:24:c6:5d:ba:8c:5a:ce:99:da:ab:
9c:c4:e1:6f:fc:93:3a:8a:ad:35:b4:8b:9f:ed:ef:
ea:c6:94:88:f4:59:3f:c9:38:1f:34:10:8a:55:31:
a2:57:d9:f5:cd:e4:25:3a:2c:9a:d2:b0:ef:a2:31:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A0:3E:F8:CC:09:B9:11:6E:76:CD:7D:CE:69:C6:A5:49:A1:3E:DD
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/r6A--MwJuRFuds19zmnGpUmhPt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.176.0/21
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
68:cf:e4:4b:67:eb:1a:64:2e:77:e8:5e:1e:f3:00:e7:d9:2b:
98:34:92:b2:b9:17:10:08:2a:ee:43:a2:f6:59:cb:a8:68:69:
fa:c9:06:4f:14:c7:a3:88:86:67:c5:6d:e6:ac:06:d2:53:7f:
11:8f:54:07:84:6f:d0:69:b7:aa:fc:02:77:e2:47:1b:c1:9b:
04:5c:e6:02:c0:93:c2:be:7d:39:d5:81:f0:b2:3f:bc:e1:41:
16:8d:bc:f0:b9:a6:a6:3e:b6:cc:f2:c1:ef:77:2e:d7:a7:4a:
72:2d:eb:55:9a:40:05:b8:7d:56:13:7a:22:79:25:86:00:ed:
03:06:6e:f8:3f:87:07:e2:5b:7d:4d:73:3e:4b:b6:c7:14:fc:
f1:7b:85:5c:e0:c3:51:67:34:a7:6a:fe:17:77:dd:3e:71:66:
97:c0:da:7c:71:b8:68:4a:f7:d3:39:5b:4b:d4:a4:27:9d:77:
f1:2b:2b:cc:cf:e1:b3:68:1f:68:37:36:89:04:31:21:6f:2f:
36:7b:e9:c8:0a:a4:8b:ba:4f:c4:96:e3:9c:35:9f:f7:8f:0f:
55:00:ea:41:d8:ab:3b:2d:9a:c8:b7:fe:e8:69:f7:a3:b7:4c:
0f:07:2b:46:42:7c:45:fb:cc:3d:93:5d:ab:ee:4e:21:9c:9c:
03:38:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 19:40:10 2023 by rpki-client on console-fra.rpki-client.org