Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ttgkGuFQxeDY2Us8_2RhufsD4F8.roa
File: ttgkGuFQxeDY2Us8_2RhufsD4F8.roa (raw, json)
Hash identifier: +k9sn7PD5EvSOQgUf4LdEjmTvz8vNVA2IeENKjVOj90=
Subject key identifier: B6:D8:24:1A:E1:50:C5:E0:D8:D9:4B:3C:FF:64:61:B9:FB:03:E0:5F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857195621937E51112E6A0A6D20C74F27E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ttgkGuFQxeDY2Us8_2RhufsD4F8.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209218
IP address blocks: 46.232.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:62:19:37:e5:11:12:e6:a0:a6:d2:0c:74:f2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d8241ae150c5e0d8d94b3cff6461b9fb03e05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:90:06:22:7c:e9:8c:3c:c6:bf:ca:53:dd:
50:d7:10:b1:01:8e:80:3a:91:99:c8:db:bf:35:63:
9e:57:c4:01:1d:92:5d:86:2d:98:21:9c:04:41:03:
09:2b:e7:f3:7a:d0:1e:47:2f:47:fc:e1:a0:c4:35:
a6:6a:40:aa:e0:84:7d:47:69:63:74:f9:be:55:c8:
83:bb:36:6e:eb:b1:20:d2:c5:07:c6:5c:19:c0:4f:
e7:fc:7c:e7:f3:8b:64:c0:be:60:27:60:e8:4d:b4:
48:ef:8d:b6:21:69:c3:14:5a:19:8e:a8:00:d3:bc:
10:77:5c:5a:02:c7:d6:04:15:34:81:4c:fd:32:8d:
76:5c:1d:2a:56:5a:77:2d:3f:be:ed:8a:39:61:bd:
52:e7:ce:16:5e:04:02:1a:28:c5:67:5b:93:90:8d:
67:ee:92:d3:08:19:c4:c6:63:45:a2:23:e4:81:02:
64:fb:e2:71:94:02:d1:db:4e:91:71:2a:98:fd:1a:
01:a6:d6:7f:61:43:aa:1e:68:a4:2b:7e:74:32:56:
6d:32:1f:8e:1f:56:40:02:72:8b:9e:18:a1:d8:b6:
cf:38:f2:42:cd:d8:0a:dd:7a:7a:f3:31:c6:a3:ec:
26:70:16:b4:b8:d6:4a:51:c1:6a:63:fb:12:e7:41:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D8:24:1A:E1:50:C5:E0:D8:D9:4B:3C:FF:64:61:B9:FB:03:E0:5F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ttgkGuFQxeDY2Us8_2RhufsD4F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/24
Signature Algorithm: sha256WithRSAEncryption
65:77:09:b2:a9:e8:4a:80:99:e5:17:87:79:6f:69:e1:52:4d:
b3:77:6d:c7:1f:01:2d:ed:4f:da:74:82:7c:98:ab:18:07:78:
d1:1c:d3:58:da:b2:38:af:a6:58:dd:f3:63:65:03:94:68:22:
0e:15:0c:db:38:69:e2:93:14:2d:da:a1:61:98:93:9a:4b:d4:
6e:1f:da:be:19:ab:0a:67:e5:26:e9:c9:8d:93:6c:ae:2d:a4:
a2:5b:26:87:19:10:a4:eb:67:0d:a6:27:75:33:96:c2:12:25:
32:fb:ef:57:5d:3f:c6:62:c3:fd:a6:5d:4c:12:00:51:3d:57:
a5:9b:b3:df:c8:9c:56:7a:4b:57:41:38:3c:53:de:22:e0:12:
08:98:66:14:b2:1f:fe:76:ee:e5:9c:6e:6e:2c:0b:5c:85:63:
dd:17:7f:c4:03:33:0e:d9:5c:27:3b:ef:3a:33:ef:fe:05:e8:
65:36:05:b6:ee:42:06:34:21:00:99:76:87:2e:1e:d5:a4:ec:
0e:e9:8b:3f:f1:a1:5a:59:53:50:04:e4:00:3b:cc:c1:f1:cc:
08:80:fe:af:d5:6f:42:6f:4b:37:b1:b6:7a:b6:0a:54:73:93:
34:94:81:99:54:4f:a1:9c:97:7d:d2:52:7c:21:4f:48:51:ab:
06:7c:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 07:16:52 2023 by rpki-client on console-fra.rpki-client.org