Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YYg9pCAUXTL0Fz-09OHuaUhnT-o.roa
File: YYg9pCAUXTL0Fz-09OHuaUhnT-o.roa (raw, json)
Hash identifier: ryUMsjLJBtbWynaTNt0OVBjhlkfdKspOD/nwmZWNDSk=
Subject key identifier: 61:88:3D:A4:20:14:5D:32:F4:17:3F:B4:F4:E1:EE:69:48:67:4F:EA
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01873CFFE01215A9C48EE07FD970E50B3AA9
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YYg9pCAUXTL0Fz-09OHuaUhnT-o.roa
Signing time: Sat 01 Apr 2023 13:26:54 +0000
ROA not before: Sat 01 Apr 2023 13:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 46.23.100.0/22 maxlen: 22
46.23.108.0/24 maxlen: 24
46.23.110.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:ff:e0:12:15:a9:c4:8e:e0:7f:d9:70:e5:0b:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 1 13:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61883da420145d32f4173fb4f4e1ee6948674fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4c:7c:75:6f:6b:f6:7a:47:f0:3a:4a:16:20:
c3:4d:bb:c2:06:d1:33:93:ed:66:a9:77:17:ca:19:
63:ed:28:84:f7:2a:f9:a6:c9:6a:fe:0f:d2:88:4c:
f8:5b:26:14:4a:79:13:52:48:90:f0:66:e3:7d:8b:
a8:1e:a8:0f:53:0f:10:80:95:8b:23:e3:08:56:72:
c3:95:bc:fd:b5:7a:ac:af:b9:62:42:7d:78:44:cc:
56:29:9b:3e:8d:4f:e2:bf:3e:64:65:27:51:86:4b:
fa:dd:de:8b:b3:d8:d1:4e:29:b5:3c:d7:90:56:d8:
77:5a:a8:7b:82:45:0f:5e:e5:44:62:89:20:1f:14:
6e:01:13:f6:65:f6:6c:46:86:86:00:9c:12:2b:17:
e1:7a:1d:c8:cc:5f:5b:71:82:8f:19:36:de:c4:4c:
dd:a6:e5:bc:56:f9:a1:11:71:b2:8e:db:a9:41:1e:
42:2c:eb:8d:75:67:8e:02:bd:e2:77:03:4d:f8:1a:
4d:0e:d0:27:9c:f1:ec:33:1e:2e:0b:fc:d7:93:ea:
2e:a7:2f:31:0f:ed:30:62:b9:86:53:35:2a:6f:eb:
3b:54:6f:45:b3:03:33:b4:e4:bd:a6:9f:34:69:23:
04:d1:a5:0e:a8:ae:25:23:41:55:1e:55:48:02:a0:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:3D:A4:20:14:5D:32:F4:17:3F:B4:F4:E1:EE:69:48:67:4F:EA
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/YYg9pCAUXTL0Fz-09OHuaUhnT-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.100.0/22
46.23.108.0/24
46.23.110.0/24
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0c:d6:33:f5:7a:64:45:81:0e:ae:96:4c:66:1d:5c:9d:64:
39:58:9d:a3:53:91:d1:db:a0:62:e0:2d:81:ad:d4:35:47:a9:
a1:73:76:6a:4f:e4:99:b1:6d:80:0f:81:a6:39:23:cd:f2:a8:
8a:ee:f8:ca:70:a6:84:fe:d0:67:f2:b1:96:c2:0c:2e:40:07:
5a:25:a4:b8:bb:68:a0:08:dc:15:90:5b:10:42:68:89:88:0a:
57:49:9b:67:f5:a1:4f:7d:33:dd:a5:25:01:c2:06:11:18:b0:
e0:6b:58:ba:f5:22:e8:f2:81:a1:64:67:5f:7e:b2:c5:f6:a7:
22:c6:06:bb:bf:f7:ea:92:76:87:b3:1f:c8:3d:75:77:c1:26:
0a:ab:f0:cd:ef:cc:34:cb:23:49:e6:a8:56:81:97:cc:2f:f0:
f8:df:1f:65:3c:05:8e:91:1e:9b:7f:a3:da:c0:60:2f:e3:30:
b7:d3:12:7b:c5:3f:88:e5:7c:57:7d:73:cf:3c:dc:7b:be:f2:
ce:8e:77:1b:2b:81:a3:b2:83:cc:d8:54:1c:7a:36:e8:87:b9:
5e:84:59:93:65:38:8e:d1:1e:03:90:4c:e8:cb:7d:69:c6:c0:
8f:ae:30:aa:aa:95:ca:a1:5b:26:91:e0:77:3d:46:59:03:f7:
c0:90:03:fe
-----BEGIN CERTIFICATE-----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Generated at Thu Dec 21 18:05:40 2023 by rpki-client on console-ams.rpki-client.org