Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/xOWCxQKlXnnnM-do1mJ3iEBMf-I.roa
File: xOWCxQKlXnnnM-do1mJ3iEBMf-I.roa (raw, json)
Hash identifier: SmHFqcuV9BC6lMxgX6z/v5nemH7uR2PtFSJ4lvsf3zc=
Subject key identifier: C4:E5:82:C5:02:A5:5E:79:E7:33:E7:68:D6:62:77:88:40:4C:7F:E2
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 018AEB12E9DA8D881CC8104E497A74F929C1
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/xOWCxQKlXnnnM-do1mJ3iEBMf-I.roa
Signing time: Sun 01 Oct 2023 11:49:59 +0000
ROA not before: Sun 01 Oct 2023 11:49:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46071
IP address blocks: 46.40.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:eb:12:e9:da:8d:88:1c:c8:10:4e:49:7a:74:f9:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 1 11:49:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e582c502a55e79e733e768d6627788404c7fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:d3:cc:ed:98:92:e2:33:11:78:a1:b9:b8:
f1:7b:9f:22:7b:4a:08:12:a6:67:d1:b7:5d:c8:a2:
10:65:ef:31:f7:19:13:af:4f:a6:ff:bc:94:20:14:
e2:1a:47:59:51:52:a4:08:1b:b1:bc:a6:cc:ae:bb:
a3:ab:17:d3:f2:7d:a3:29:ea:11:e9:47:07:a1:d1:
2b:ba:4a:b9:7e:2c:52:51:56:30:ad:d8:e6:33:37:
5b:41:31:d5:77:ac:2b:10:4b:f3:62:af:e7:bd:b7:
31:7a:d8:84:2e:4f:ac:4d:5e:7a:76:cf:3a:d8:ab:
b5:7e:8b:c8:40:25:75:18:0f:6c:2b:28:9f:71:f3:
46:59:60:8d:6d:39:eb:a0:74:f3:31:de:52:bf:d7:
90:d5:df:e9:af:dd:ff:d2:d0:84:fa:d9:81:cf:36:
a6:be:a3:b6:c9:6a:fb:f3:bd:9f:93:3e:d2:31:99:
37:71:35:30:20:df:79:ed:63:2f:5e:c2:ab:d1:72:
ce:5a:1a:c8:c3:c9:4e:a4:31:32:63:75:7f:46:92:
0b:4e:0b:e4:4f:ff:f9:31:a8:93:cf:e9:bb:d4:89:
81:33:9b:27:ed:e9:e2:69:a7:2d:bf:a6:c4:14:6a:
3a:70:4b:5b:21:ca:b5:51:aa:5b:7d:4d:25:f9:6f:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E5:82:C5:02:A5:5E:79:E7:33:E7:68:D6:62:77:88:40:4C:7F:E2
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/xOWCxQKlXnnnM-do1mJ3iEBMf-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.40.203.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a4:a9:1d:ee:c2:ee:1b:4e:1d:00:26:0b:44:0c:66:00:95:
06:76:59:3e:d4:fd:3d:a0:ef:40:30:ca:31:22:2e:d5:b8:d7:
7e:cb:89:76:fa:2d:d9:a8:13:9d:dc:5c:f7:bb:23:a4:ec:b2:
a4:75:c8:26:7e:ca:06:93:3f:4e:bc:04:96:1f:32:e3:48:a1:
f7:f7:c7:d2:3f:0d:2c:e4:94:6d:8c:0a:6a:af:71:d8:92:c2:
4c:c2:e8:1c:0a:40:59:de:95:e2:7c:d3:a8:8b:30:d2:d3:cb:
88:ec:95:fe:6b:da:b9:7b:d1:f8:6c:1a:3b:fc:b1:32:45:61:
8b:2e:cd:c3:37:0c:1e:4b:93:ec:52:59:a1:21:8a:2b:a2:db:
37:5f:1c:ba:e6:c4:91:19:8b:b0:12:2f:ad:ca:aa:15:a9:41:
ab:60:e9:75:de:4b:a9:b7:3c:ce:67:cb:9a:f4:a1:c6:91:00:
d7:d4:c8:ef:81:2a:5a:16:58:7d:2f:39:f0:42:b7:dd:fb:41:
6f:3b:bf:30:5a:f0:0a:2b:fe:c4:11:1f:64:d0:7f:50:a2:48:
6c:83:76:40:ca:bf:e7:d3:be:83:fe:41:0d:e5:04:90:3b:0a:
75:9b:ac:8c:40:eb:b0:77:96:3d:c7:4d:d9:f5:71:f9:1b:1c:
c2:8e:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 10:29:58 2023 by rpki-client on console-fra.rpki-client.org