Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Rlk6FZfDPgCHZwlHmFcTJGGTFCE.roa
File: Rlk6FZfDPgCHZwlHmFcTJGGTFCE.roa (raw, json)
Hash identifier: PVlhvFfbSWhl8GRvdlDe+CTE3hLcQD5EqCfDBEjZKv8=
Subject key identifier: 46:59:3A:15:97:C3:3E:00:87:67:09:47:98:57:13:24:61:93:14:21
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D94131084232F92D948007F226F4A82
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Rlk6FZfDPgCHZwlHmFcTJGGTFCE.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49747
IP address blocks: 46.23.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:13:10:84:23:2f:92:d9:48:00:7f:22:6f:4a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46593a1597c33e00876709479857132461931421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:6e:d6:dd:e6:62:69:16:e9:92:e2:25:0f:
5b:3c:f7:40:5b:11:ef:c8:06:05:a6:45:a8:4b:ab:
d2:dc:06:a3:83:c1:57:80:8d:21:14:29:79:6d:3c:
38:21:b3:20:f2:08:4e:00:a5:b3:3c:dc:b7:1c:9e:
83:88:5f:7e:05:03:33:b9:c5:e8:df:71:55:50:d8:
42:02:e2:65:6b:dc:93:f1:71:81:39:54:8b:e9:ac:
91:52:72:c3:78:c3:02:2c:60:2e:d3:fd:13:09:91:
06:24:39:73:a2:5e:26:4d:6a:26:5f:9c:25:c1:8d:
47:72:0a:87:9b:bf:95:bf:1d:ab:b7:98:af:2e:c3:
ee:56:60:af:8a:1d:07:61:5c:e1:33:8b:c0:f4:6a:
85:9e:1d:08:e7:8f:b0:e3:fd:e5:c5:9b:dc:a1:5c:
fb:99:ed:8b:46:b5:ab:f4:9d:e6:8c:a0:61:23:d7:
1a:78:22:27:0e:4c:11:be:5a:87:0b:71:75:68:ea:
35:f2:6d:44:a8:51:21:87:64:ea:b1:64:33:31:54:
ea:a7:29:48:53:1e:ea:5c:0f:00:97:3c:a5:55:45:
c6:6a:23:cc:25:54:00:2c:2f:7d:97:a5:ce:c7:cd:
77:60:45:0e:ae:24:cd:1b:d9:03:dd:a2:8d:9e:9d:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:3A:15:97:C3:3E:00:87:67:09:47:98:57:13:24:61:93:14:21
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Rlk6FZfDPgCHZwlHmFcTJGGTFCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:be:d3:1c:76:62:f5:51:e5:94:8b:2c:28:23:73:d6:1a:82:
b0:33:98:13:52:e9:2a:ad:a2:d6:d1:5e:8c:06:56:a3:18:b3:
5a:52:e2:cf:80:be:51:3a:9d:da:f5:c9:f7:b2:67:5a:1e:75:
c9:2d:92:45:00:fd:ea:d8:4b:fc:13:20:38:5b:86:84:e7:79:
8c:92:08:bb:a8:f9:86:fd:e4:85:c3:eb:7b:cd:d3:74:c5:8d:
66:4b:32:15:3c:b9:b3:7a:80:f2:31:88:bd:db:1e:b2:91:ba:
9f:78:46:07:dd:06:9e:7a:03:04:53:67:13:c4:69:83:f6:1d:
0c:f9:b6:11:c1:a2:31:10:26:54:cb:e8:37:47:40:c1:49:50:
e6:e5:93:6e:7b:57:a1:92:64:24:78:63:18:d7:ba:b6:73:b5:
64:f8:d0:b7:28:cd:9c:d0:dd:c2:01:51:62:40:13:d9:45:b0:
eb:39:30:c0:76:66:c0:f1:26:9b:6b:8a:52:b3:45:3d:d0:34:
7f:c7:44:9c:7a:8d:94:e5:82:2b:92:ba:8c:2e:61:bc:fa:a4:
96:e2:ed:34:63:61:95:d6:b6:2c:e3:7c:37:15:a2:dc:4c:23:
18:73:5a:ac:19:9a:f3:eb:ee:8f:68:ba:df:bf:39:0b:fb:47:
94:03:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:55 2024 by rpki-client on console-fra.rpki-client.org