Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/0SQeSS5pF0FiUrClTdReKhbwfLg.roa
File: 0SQeSS5pF0FiUrClTdReKhbwfLg.roa (raw, json)
Hash identifier: IFCSou14uXFXPiq25U4LQVur3/WyyjkrCwHPjS8jBvM=
Subject key identifier: D1:24:1E:49:2E:69:17:41:62:52:B0:A5:4D:D4:5E:2A:16:F0:7C:B8
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 0186BC2EABF604DAD4DD80DC918704AC44C5
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/0SQeSS5pF0FiUrClTdReKhbwfLg.roa
Signing time: Tue 07 Mar 2023 13:07:00 +0000
ROA not before: Tue 07 Mar 2023 13:07:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56347
IP address blocks: 46.175.64.0/20 maxlen: 20
46.175.80.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:2e:ab:f6:04:da:d4:dd:80:dc:91:87:04:ac:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Mar 7 13:07:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1241e492e6917416252b0a54dd45e2a16f07cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:6b:f0:9d:d7:6b:4c:76:e8:d8:5e:20:fc:
e1:ec:d5:56:ca:fe:79:3d:06:09:6e:60:d7:4d:b1:
62:53:b5:55:58:fe:4a:4a:d4:f3:e9:e2:7e:f8:63:
be:fd:2d:40:af:87:06:ce:64:21:cf:7a:24:ea:b7:
1e:60:f9:05:b9:61:cd:13:f8:c2:a0:3f:bc:27:91:
95:64:82:82:1b:f8:e6:21:58:fd:1a:bb:f2:4e:0f:
a0:1f:d8:d9:22:bf:22:9c:3b:d5:72:a4:95:f9:6b:
4c:5a:92:ee:8d:32:9d:27:34:ac:fa:cd:51:aa:d2:
eb:5e:de:31:d0:0a:56:cc:12:a9:66:d6:39:0c:58:
ad:d6:ea:67:b6:6e:21:5d:0c:e7:64:24:e9:63:33:
b3:a7:f7:65:4f:21:d1:92:1a:e1:d1:21:af:b2:88:
2c:11:99:f2:a3:c7:d8:04:b6:98:23:b1:df:d4:f6:
fa:e5:72:8a:2e:55:6b:09:7e:db:b3:5e:24:b0:74:
c8:7a:e4:21:c4:74:fd:66:e7:92:23:06:6a:d6:6a:
a4:4b:00:da:60:75:5c:84:93:1b:f1:5a:86:34:07:
6d:cc:29:7c:ff:d9:49:0a:ab:1f:aa:39:36:a1:8b:
23:11:72:2b:c2:db:ed:8e:e4:9e:c0:2a:75:43:ef:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:24:1E:49:2E:69:17:41:62:52:B0:A5:4D:D4:5E:2A:16:F0:7C:B8
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/0SQeSS5pF0FiUrClTdReKhbwfLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.64.0-46.175.87.255
Signature Algorithm: sha256WithRSAEncryption
b1:39:f6:f2:21:e8:46:a7:52:42:49:6b:0f:88:37:8b:ae:87:
b4:69:66:a1:ab:4e:30:d0:00:73:77:b9:cf:77:4d:12:c7:b5:
b4:9c:83:32:f9:c5:79:61:7b:2d:45:53:e9:1a:14:52:6c:3e:
86:32:c5:07:47:54:bc:3a:6e:0f:5d:0b:fe:75:d6:8a:11:0b:
4b:93:7d:84:57:4e:46:00:29:a9:d5:47:41:e4:f7:52:f1:ac:
1c:af:a9:39:b4:84:0c:1e:3d:e0:40:bf:d2:40:f4:b5:ec:6f:
2b:2e:3a:5f:78:e3:84:2b:e8:b5:12:10:48:5b:08:e1:60:da:
cd:75:85:e2:fa:7c:d5:8d:7d:51:ad:72:48:ab:f4:b6:60:c5:
a3:1d:18:96:52:94:dd:47:ea:9b:81:59:d7:86:80:d0:3a:2e:
ae:71:2b:89:5d:8c:ca:31:32:b9:98:1e:45:2e:59:62:f8:e9:
08:7e:e9:b8:56:07:88:3d:ba:ff:f2:45:11:88:dc:e8:50:f7:
10:c4:66:df:49:8e:cf:51:35:06:1a:46:73:64:93:b8:79:77:
d9:d4:da:55:11:d2:3f:1a:5c:3f:73:92:e5:e7:81:da:7a:82:
b6:08:4a:92:94:80:23:67:f7:ea:ed:dc:f9:22:b8:6b:1f:ca:
af:62:a9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:05 2024 by rpki-client on console-ams.rpki-client.org