Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tPImUBp-DMbNPqUIIIhi5S8y2F0.roa
File: tPImUBp-DMbNPqUIIIhi5S8y2F0.roa (raw, json)
Hash identifier: oavkfeVgVELg4pR8ItiUIStxEs2zErm5TW0Hfxz6nSg=
Subject key identifier: B4:F2:26:50:1A:7E:0C:C6:CD:3E:A5:08:20:88:62:E5:2F:32:D8:5D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018AD214B5FC257DFDF8039E48C28BA24A06
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tPImUBp-DMbNPqUIIIhi5S8y2F0.roa
Signing time: Tue 26 Sep 2023 15:21:27 +0000
ROA not before: Tue 26 Sep 2023 15:21:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18464
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:14:b5:fc:25:7d:fd:f8:03:9e:48:c2:8b:a2:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 26 15:21:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f226501a7e0cc6cd3ea508208862e52f32d85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:bd:ff:b5:0d:e2:30:06:f4:b8:d4:e2:fe:
a0:c3:d3:35:43:c6:48:39:03:3d:4c:65:5b:4d:57:
7f:de:90:ef:0a:8e:a0:ad:5a:47:c8:00:39:d3:c4:
6b:0c:c7:9e:6a:38:4e:db:78:7c:8a:dc:20:68:22:
85:0e:9f:be:a1:2b:54:3c:c9:d5:1d:15:f4:e5:00:
1a:a0:6e:e5:34:0d:4c:6b:5b:68:f7:03:71:38:70:
6d:b3:c6:fc:c1:bc:41:9d:63:96:6e:06:02:b5:5a:
6d:e1:30:f1:96:08:8b:a4:62:91:9b:ee:a5:48:7e:
22:27:9b:77:68:b8:fc:ad:db:47:55:c7:30:cc:58:
6e:05:8e:bf:56:64:af:cf:d5:29:80:f1:0e:ff:01:
d2:25:45:12:b4:a9:4c:82:24:62:07:33:50:f1:c0:
74:fd:2b:7b:1f:0f:4b:14:f3:5f:93:31:e8:12:8c:
14:2e:8b:cc:31:5b:46:b8:07:3c:06:80:33:72:77:
8d:87:41:bc:bb:b3:82:2c:07:ed:c5:7f:bf:75:77:
c5:73:bc:72:73:e1:52:00:64:b9:b1:2f:87:7d:87:
76:18:c2:5e:4d:7d:ad:86:e1:3f:f6:98:4a:bd:df:
67:9f:3e:80:95:a8:8d:f5:91:3f:4a:4f:9d:a8:6a:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F2:26:50:1A:7E:0C:C6:CD:3E:A5:08:20:88:62:E5:2F:32:D8:5D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tPImUBp-DMbNPqUIIIhi5S8y2F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
94:28:25:f2:da:a0:bc:77:5f:0e:6f:a2:51:df:7f:10:6a:08:
f5:d7:cc:13:2d:15:37:d8:09:4c:e6:85:cb:e9:ae:36:d3:c9:
dc:0c:71:1b:7b:c8:14:6e:4a:bb:cc:8e:19:07:39:f3:7c:12:
17:f0:d6:3d:62:76:59:21:4a:9e:bf:b7:78:62:9f:30:82:72:
f7:84:09:2d:c9:a4:7d:cd:57:e1:69:4c:04:4a:ce:54:40:7f:
2a:e0:32:4b:bd:fc:59:2e:52:cd:fc:ca:5a:94:7e:9f:50:df:
0f:f4:cc:87:b4:52:43:90:c8:83:9b:aa:21:7c:ef:f0:a9:eb:
7c:8f:2d:21:f6:20:cc:c0:df:49:5b:d2:99:91:8f:e7:22:af:
58:28:45:44:d6:20:c5:c9:87:ab:0c:bc:9b:bb:77:ee:d3:79:
1d:94:9d:0f:06:e2:49:4f:ce:9a:cf:38:e1:89:b7:06:bc:f8:
5f:ae:70:35:78:84:a3:3c:bf:c0:53:0f:04:62:e2:4c:a8:66:
cc:a5:1c:d1:a6:ae:1f:c0:f5:00:45:96:e0:9a:7e:be:9c:64:
37:59:2a:59:35:2d:26:4e:de:0b:b4:99:be:5b:8a:fa:34:d7:
67:93:a5:5d:00:42:32:09:f2:08:d3:34:70:65:f7:b1:e3:84:
f4:74:7d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org