Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WN5OZD6E6eU2o8gajpiGaXSY4hA.roa
File: WN5OZD6E6eU2o8gajpiGaXSY4hA.roa (raw, json)
Hash identifier: rzHDbTQun7rL2HPs+H9fYQZNs1sKROsMOnKgMDUUXEw=
Subject key identifier: 58:DE:4E:64:3E:84:E9:E5:36:A3:C8:1A:8E:98:86:69:74:98:E2:10
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D9412A9021224ADF323E6C623421A6D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WN5OZD6E6eU2o8gajpiGaXSY4hA.roa
Signing time: Sun 01 Jan 2023 13:44:58 +0000
ROA not before: Sun 01 Jan 2023 13:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.23.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:12:a9:02:12:24:ad:f3:23:e6:c6:23:42:1a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58de4e643e84e9e536a3c81a8e9886697498e210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8f:01:0b:08:81:83:c6:11:d5:d8:a3:f3:83:
69:88:76:44:57:02:1a:40:b9:35:43:f0:6c:2a:79:
b6:02:c5:43:09:58:1d:24:6b:a3:51:b1:1c:3d:fb:
a4:55:ac:ff:25:98:ce:10:ca:42:36:4c:c1:a8:25:
e3:4b:1d:2e:d2:f8:32:af:cb:f3:2a:c9:21:a4:ae:
2b:76:5a:c6:db:4b:70:af:f2:67:fd:e5:28:8b:98:
d0:1f:de:e0:91:2f:77:90:cf:df:a7:28:d1:a0:df:
56:cd:18:bc:e6:0a:e2:66:93:f8:b9:3c:8e:df:cf:
9b:8a:77:37:2b:f9:7f:78:64:09:64:58:c3:7b:ef:
c4:fd:53:d8:96:4f:ee:86:fb:8f:29:34:b5:fe:d2:
fc:50:30:d2:40:82:b9:d1:de:55:4b:a6:b9:1a:bb:
37:46:f0:d0:d5:5e:42:6d:ae:35:f6:1a:ef:76:c3:
88:67:81:14:3c:b5:d4:fe:05:50:26:35:d0:1d:ed:
31:95:8c:f7:98:8e:ca:8e:34:de:50:07:37:a7:fa:
d8:70:14:17:bd:4d:35:51:fd:1d:b6:47:e0:09:9a:
5a:ea:8f:f9:fd:5b:6b:0b:15:c5:bf:e6:b9:c0:af:
9f:0a:00:19:99:13:19:e5:5a:c5:82:66:e3:32:59:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DE:4E:64:3E:84:E9:E5:36:A3:C8:1A:8E:98:86:69:74:98:E2:10
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WN5OZD6E6eU2o8gajpiGaXSY4hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.108.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:fb:56:62:2f:7b:be:4a:2e:02:8f:b2:4e:8a:1a:15:ef:
cd:c9:55:38:c5:87:a9:e5:c7:39:6e:18:ec:a1:a5:6a:b3:aa:
07:14:13:55:b0:d2:ab:4d:ac:70:d2:07:53:a3:76:6e:1c:bc:
42:50:05:2b:d1:de:fd:7a:b7:58:38:f7:e7:45:19:99:30:4c:
b9:fd:e0:84:5b:b3:e3:92:d5:c0:a6:6a:66:88:26:e8:21:ee:
13:23:ea:72:e0:36:d1:43:93:c4:62:c9:0a:3e:b7:07:93:f8:
60:5e:65:82:69:e1:29:d3:f1:00:eb:53:16:7e:81:b5:24:03:
ef:f4:c7:d1:d1:60:8f:67:a4:e3:82:82:24:8a:51:62:82:3b:
18:94:74:2f:c8:db:f6:61:a0:95:6d:0c:7d:a5:3d:60:b3:e6:
57:cf:1e:32:95:8e:96:93:83:9e:6d:5f:ad:59:64:d5:af:61:
72:84:9b:13:33:48:cf:3c:05:64:b6:c6:27:7b:07:18:23:ee:
f9:15:77:49:7c:2d:6b:cc:e0:b3:75:85:f1:86:ae:39:10:8d:
c2:e5:6c:a7:36:de:83:d6:cc:d7:8d:28:55:d2:bd:b5:e7:75:
bc:99:c4:d9:49:99:65:e3:62:91:2d:68:cd:3c:97:c8:c0:f3:
2f:73:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org