Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/9mnFsv8T5PoI2f4fdyNrCrGw7wI.roa
File: 9mnFsv8T5PoI2f4fdyNrCrGw7wI.roa (raw, json)
Hash identifier: v0+3/QunkVLf+NMblL0eW+ROT+3lKbHn1u9wqnyzFAc=
Subject key identifier: F6:69:C5:B2:FF:13:E4:FA:08:D9:FE:1F:77:23:6B:0A:B1:B0:EF:02
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 01857246A7A49BECF2DF9EC891F8BE53A8E3
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/9mnFsv8T5PoI2f4fdyNrCrGw7wI.roa
Signing time: Mon 02 Jan 2023 11:38:30 +0000
ROA not before: Mon 02 Jan 2023 11:38:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51606
IP address blocks: 46.16.136.0/21 maxlen: 21
46.16.137.0/24 maxlen: 24
46.16.136.0/24 maxlen: 24
46.16.138.0/24 maxlen: 24
46.16.140.0/24 maxlen: 24
46.16.143.0/24 maxlen: 24
46.16.142.0/24 maxlen: 24
46.16.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:a7:a4:9b:ec:f2:df:9e:c8:91:f8:be:53:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jan 2 11:38:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f669c5b2ff13e4fa08d9fe1f77236b0ab1b0ef02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:ee:06:54:38:48:59:bc:b1:6f:32:7f:44:
2c:86:98:fb:44:d2:d3:d4:7e:d5:1a:fd:5a:54:76:
19:93:b0:c7:dd:7b:9c:e4:37:33:d8:8d:d6:20:86:
a3:dd:45:9d:1b:a5:03:3d:87:92:d2:f4:6d:f3:71:
0e:84:90:37:5b:19:c1:5f:b2:67:3a:8a:75:3a:06:
0c:48:e8:0b:32:e2:ea:fa:0e:f1:63:ad:4f:97:9d:
75:97:50:da:1c:9e:77:b8:9a:60:a8:76:13:7b:b6:
59:1a:4c:be:b9:2d:b2:46:d9:da:e5:46:34:31:3c:
e1:5b:25:fb:96:6b:3b:34:e8:e6:51:12:8d:b2:1b:
36:a8:a5:1b:dd:4c:1e:65:4a:6b:15:2b:7c:d9:1e:
71:1f:61:27:7d:53:08:cd:ee:39:6f:2d:8e:e9:5b:
04:be:91:75:af:5e:96:eb:26:a0:ee:5f:f1:e4:9b:
e6:55:31:09:14:20:9b:a3:e0:46:9d:b8:a0:f4:50:
bb:e5:9e:4b:b5:d1:35:a8:f5:de:50:3b:87:29:86:
ef:4e:e4:f6:1a:fe:3e:c8:82:fd:a2:15:91:5d:a5:
d3:35:70:94:91:08:8c:70:ac:2a:f0:69:45:06:a0:
dc:40:82:94:37:13:6c:fe:15:9b:4b:30:b0:66:d4:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:69:C5:B2:FF:13:E4:FA:08:D9:FE:1F:77:23:6B:0A:B1:B0:EF:02
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/9mnFsv8T5PoI2f4fdyNrCrGw7wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:40:e7:02:3f:8d:41:c2:c3:10:6c:b3:a5:78:4c:48:b7:40:
bd:29:3f:82:57:16:78:81:a6:82:97:3f:0e:78:f4:8e:92:88:
10:24:f7:38:44:d1:8c:92:d2:01:f7:7e:82:66:39:41:2d:f6:
52:83:c5:d3:46:3c:98:ad:77:4c:61:ad:92:24:d8:66:ef:50:
f3:e9:19:a0:6f:23:5c:87:26:b9:bc:5f:36:8e:eb:7f:e0:13:
15:85:26:80:98:51:7e:5c:cb:96:17:25:64:1f:a2:d1:99:a6:
f8:23:3f:c9:8c:e8:77:2f:97:d5:0e:ae:88:6b:d7:12:36:b3:
fc:09:0d:6d:9e:c9:be:66:da:4b:5e:a4:3b:03:d4:88:6c:c8:
a2:28:2c:e2:48:5e:f1:c8:45:f5:b5:1b:d5:cf:0d:54:04:6d:
6f:42:13:38:8c:fb:4d:5e:5c:2a:7d:3e:1c:d8:c3:95:92:cb:
2c:01:f0:ff:0b:1d:e0:8c:5d:74:fb:2c:91:5e:77:8c:b9:04:
17:8b:35:b8:65:9e:cd:c1:62:de:fe:32:2a:29:c7:79:35:6d:
29:eb:f2:f1:79:cb:0c:dd:b3:9f:a2:31:46:78:2f:f8:99:3b:
36:eb:d7:1d:a3:6a:5c:04:b9:9c:e2:fc:92:89:42:e1:7d:4f:
4f:ff:82:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:25 2024 by rpki-client on console-ams.rpki-client.org