Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/te7qzUAMWHGEWXLiYOLRb5XNsYQ.roa
File: te7qzUAMWHGEWXLiYOLRb5XNsYQ.roa (raw, json)
Hash identifier: GxakPBZXcse+WZM0SjVfsUmsrMbvn1LOFj7VDwcjN3M=
Subject key identifier: B5:EE:EA:CD:40:0C:58:71:84:59:72:E2:60:E2:D1:6F:95:CD:B1:84
Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad
Certificate serial: 018C5E1112D9F0B1E61BF0704FBE2AA965E0
Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/te7qzUAMWHGEWXLiYOLRb5XNsYQ.roa
Signing time: Tue 12 Dec 2023 12:47:06 +0000
ROA not before: Tue 12 Dec 2023 12:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43088
IP address blocks: 46.31.16.0/21 maxlen: 24
193.200.225.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:11:12:d9:f0:b1:e6:1b:f0:70:4f:be:2a:a9:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad
Validity
Not Before: Dec 12 12:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5eeeacd400c5871845972e260e2d16f95cdb184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:d0:12:a1:47:3b:4b:cc:49:de:dc:f4:12:
9e:7a:57:f4:4b:51:99:7e:b7:75:55:cb:40:b8:b5:
d1:a7:80:df:b4:96:e2:b4:6a:1e:9d:4b:bc:55:06:
5c:76:31:6e:a4:0c:d3:8e:29:9d:b0:b2:ec:32:84:
d9:31:d5:b0:d6:7d:43:a1:74:fd:d3:8f:16:a9:03:
67:c9:ab:fa:7b:c0:7b:02:61:8f:bd:25:88:9d:a4:
91:01:3a:d0:55:d4:b7:0d:1f:73:1a:aa:10:e2:87:
27:fa:fa:d3:b1:e5:b8:35:8a:c2:92:30:fd:c4:53:
37:6b:f5:22:71:14:de:94:68:90:16:28:3b:d8:fe:
81:0a:99:4e:41:08:47:df:bd:48:f3:d9:69:15:4a:
61:7b:7f:2e:cc:54:da:46:5d:c2:17:9e:08:2a:af:
ae:70:1d:6e:dc:fc:7c:7e:5d:22:48:ff:6e:37:37:
c1:9a:11:b1:41:63:8f:f2:64:84:5c:e1:f1:f5:f2:
1c:83:9a:43:c4:31:b2:91:5e:9e:ec:8d:e5:cb:ad:
44:18:ff:47:b3:e9:9b:67:00:60:82:0c:cf:cd:a0:
a9:fb:b9:b7:47:80:6a:05:5c:1c:c5:f0:f6:89:a7:
e8:58:a0:56:79:f8:3d:21:bf:72:37:7c:e6:0e:52:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:EA:CD:40:0C:58:71:84:59:72:E2:60:E2:D1:6F:95:CD:B1:84
X509v3 Authority Key Identifier:
keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/te7qzUAMWHGEWXLiYOLRb5XNsYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.16.0/21
193.200.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:01:d5:d9:dc:7c:9a:d4:07:b6:5a:2f:99:72:fb:f0:47:0e:
a1:ac:b6:dc:5f:49:fe:62:6a:b4:34:c5:78:a8:c5:3f:b4:7a:
43:94:8c:e6:79:cd:e9:0e:77:8d:a7:7b:72:b3:f1:ea:7a:36:
5a:97:9d:eb:15:fa:cf:07:b9:ab:ca:58:e8:3b:87:12:48:85:
85:ce:0d:8e:62:91:6e:ff:30:7c:e5:a6:6f:19:cd:d0:ba:17:
56:c6:7d:ee:9c:7d:86:36:1e:35:e9:86:67:56:7e:80:36:9f:
45:ab:8b:4c:19:d2:9b:8d:68:eb:58:d2:93:51:d5:ad:ea:f1:
cf:39:59:82:c2:4a:1d:29:3f:1a:81:a1:69:fa:39:b5:84:8e:
4c:61:ae:97:85:50:9a:3f:84:45:aa:66:d5:1c:cb:1a:6c:30:
2f:46:64:f4:62:71:30:4f:ae:d7:92:48:28:59:17:21:3f:d9:
4d:1e:26:48:fd:60:0b:89:66:62:1c:fa:05:df:7a:56:81:23:
9b:6b:07:6d:71:c4:d1:5e:14:9b:93:d8:9f:c6:58:b4:c9:d0:
8b:16:9f:48:c9:10:91:4b:83:c3:dd:ac:d2:93:11:46:0c:7b:
1c:85:a6:b8:d5:7f:9d:57:aa:54:8f:82:59:25:13:a3:9b:39:
68:a3:a9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:47 2024 by rpki-client on console-ams.rpki-client.org