Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/F65TZNtB0-19cVO8uWfhue3jbEE.roa
File: F65TZNtB0-19cVO8uWfhue3jbEE.roa (raw, json)
Hash identifier: dwkxkurQTU9xAPL4YWaZ5JNzG3CZy/KoFUSfCSqmcVM=
Subject key identifier: 17:AE:53:64:DB:41:D3:ED:7D:71:53:BC:B9:67:E1:B9:ED:E3:6C:41
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186C153638ADF27FF2533160D988A8B9C27
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/F65TZNtB0-19cVO8uWfhue3jbEE.roa
Signing time: Wed 08 Mar 2023 13:05:13 +0000
ROA not before: Wed 08 Mar 2023 13:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:53:63:8a:df:27:ff:25:33:16:0d:98:8a:8b:9c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 8 13:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17ae5364db41d3ed7d7153bcb967e1b9ede36c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ac:1d:f9:c6:60:b4:dc:5e:d5:ec:85:28:7b:
25:93:7e:a5:68:c9:7a:3b:c3:10:46:cb:f2:84:c5:
7e:87:2a:a0:70:54:83:a4:9d:29:a6:8c:84:9e:0a:
ef:12:6c:9d:c1:e5:55:c1:85:ca:79:8c:32:81:13:
e2:fa:76:01:07:0d:09:c4:96:f0:10:e1:dc:8c:72:
cb:63:04:08:25:67:e8:e6:c8:5e:95:f1:00:b5:94:
60:17:96:d8:b3:a3:9f:16:76:f6:96:6f:4a:08:16:
7d:4c:f1:f4:c3:42:ea:8a:11:b5:88:e7:1d:90:6e:
44:d2:93:8c:c2:c9:b2:5d:c4:c6:9a:26:53:59:ce:
08:2a:89:57:a4:05:bf:b1:12:59:18:e9:9e:1d:06:
6d:88:33:0f:8a:14:19:28:e9:bc:e8:cf:f6:7f:37:
6a:12:e7:f8:79:12:02:a5:61:10:38:49:f3:39:82:
db:ca:f7:10:64:1f:a9:bc:c2:c6:64:68:90:a5:50:
33:3d:51:3b:12:3c:84:16:8c:16:8a:e4:54:cd:a7:
dd:fa:a2:6d:d5:68:37:c9:cf:75:f5:4b:aa:6a:87:
9e:a0:b0:83:51:67:78:5c:30:75:38:04:78:d9:a5:
db:4e:50:04:58:05:49:f0:85:86:fb:c6:05:4b:b1:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:53:64:DB:41:D3:ED:7D:71:53:BC:B9:67:E1:B9:ED:E3:6C:41
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/F65TZNtB0-19cVO8uWfhue3jbEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f8:2b:dc:25:b4:6f:df:c3:6c:25:29:fb:18:1f:30:c0:c0:
3d:02:10:3b:61:d6:e2:5a:b4:16:80:e2:66:8d:ca:02:55:3a:
09:9c:98:5f:9b:13:3d:ba:c3:44:d3:b0:06:38:86:ca:b8:75:
20:d7:bf:8c:c3:37:c0:7a:48:78:bf:ab:aa:3d:67:79:3d:be:
0f:b2:ac:dd:23:28:56:9a:92:6b:76:4f:41:97:93:84:e3:e7:
cc:f7:21:c4:87:85:fb:da:c9:a6:51:38:e7:37:af:18:9d:10:
85:08:c9:05:b6:c1:56:89:59:90:b2:42:a8:ae:00:9f:21:e9:
5c:d1:c5:1e:19:96:eb:d3:58:94:8a:1e:b6:66:a9:bc:a7:d0:
84:8d:e5:19:d5:81:60:0b:bb:6d:73:92:e7:a5:0d:5f:88:dd:
0c:78:65:cf:6f:f4:7f:90:0d:5c:0d:61:8d:40:90:23:02:a2:
f2:e5:c3:31:05:2d:b1:a9:a4:4d:66:71:05:2e:82:d9:60:23:
63:b3:e0:e0:c6:34:b0:18:9e:ef:4b:29:c2:2e:cd:05:e3:f4:
77:94:22:92:e9:f4:bf:66:f5:76:3e:b2:f7:9f:29:5f:8f:bc:
9d:d5:09:01:a7:51:93:33:24:e1:19:45:fb:96:7f:c3:7b:b6:
2b:a5:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org