Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wKDqy-YZnTYmcgnChgJvLQbZaow.roa
File: wKDqy-YZnTYmcgnChgJvLQbZaow.roa (raw, json)
Hash identifier: ltJIQOMJ36CVD2e0ZWb7nhFYPTuP1RVURLcwO1M7l10=
Subject key identifier: C0:A0:EA:CB:E6:19:9D:36:26:72:09:C2:86:02:6F:2D:06:D9:6A:8C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186DAE56D879497F62E4D53BF3EE50E0602
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wKDqy-YZnTYmcgnChgJvLQbZaow.roa
Signing time: Mon 13 Mar 2023 12:15:14 +0000
ROA not before: Mon 13 Mar 2023 12:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206003
IP address blocks: 46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:e5:6d:87:94:97:f6:2e:4d:53:bf:3e:e5:0e:06:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 12:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0a0eacbe6199d36267209c286026f2d06d96a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:9e:3a:7a:8c:99:2f:c1:8b:c3:4a:50:8b:
c5:44:c9:6e:d3:02:eb:b9:06:a1:57:aa:52:a6:fc:
7f:ca:3e:1c:a6:6d:c0:da:b4:21:b5:75:e8:43:f0:
82:12:3a:30:dd:3f:6b:3d:5b:ba:a0:65:8c:a3:d0:
d9:9d:cd:56:99:59:90:58:b8:d7:80:dd:06:05:26:
33:c8:40:cc:f5:4a:a5:cc:71:57:b1:97:ad:10:c6:
5f:ab:aa:b1:88:3f:86:97:49:0c:8f:5b:bc:76:81:
b0:74:03:67:15:02:52:14:67:d6:1d:03:7b:77:22:
cc:e2:7c:21:bd:fb:31:c6:44:d0:d4:77:c1:44:cc:
80:51:a2:ea:08:b1:96:35:70:c7:4d:81:04:dd:bc:
f4:b9:f1:a5:f5:3e:ad:f9:be:2a:81:de:ae:2e:95:
99:5a:52:41:27:23:04:6e:41:df:3e:ad:cf:c5:c6:
3d:e4:49:1a:95:6f:84:b7:56:7b:f9:5e:8b:82:55:
3b:46:1c:8c:68:c3:38:3f:3b:8b:09:29:2a:a4:e5:
8e:7e:6a:7e:46:8f:0e:6f:f3:b0:db:ce:83:20:09:
c5:37:92:ca:05:fb:c8:4b:92:76:0b:d1:4f:e3:1f:
72:4d:c4:fa:6e:ad:ab:44:e1:35:95:b4:4b:ff:1b:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:EA:CB:E6:19:9D:36:26:72:09:C2:86:02:6F:2D:06:D9:6A:8C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wKDqy-YZnTYmcgnChgJvLQbZaow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.100.0/22
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
71:79:e2:97:8c:3a:ae:86:7a:38:1e:2d:53:6d:e7:af:d8:50:
5c:fc:e8:f6:cb:89:de:50:fc:12:47:65:db:1b:15:eb:e5:04:
dd:75:c3:22:98:5f:49:34:80:69:fc:cd:00:61:df:b1:29:24:
65:41:45:c7:d2:9b:99:6e:66:43:9e:27:6b:ee:c0:cb:ea:ff:
7f:95:c7:5e:12:a3:45:e8:ae:3e:b3:b8:dd:12:bf:cc:7c:dd:
d4:4c:fa:22:ab:04:a5:36:22:70:5b:aa:0c:e4:67:20:de:5b:
dd:d8:df:f7:4a:ec:c3:29:e9:30:04:a9:99:65:24:76:c2:ec:
44:67:6d:41:5f:64:20:91:9b:de:20:87:64:ad:9a:d3:95:2d:
3a:ed:f3:cb:fe:35:9a:5c:d1:dd:f7:97:14:c6:31:a0:f3:38:
ab:89:de:a9:27:69:61:61:75:f4:4a:d6:4d:b5:ed:ed:b8:8a:
5e:9c:ea:5a:5f:86:d4:74:e7:10:d0:cd:aa:14:fa:4c:14:63:
97:d5:96:e4:a2:53:8d:87:d3:0a:fc:3e:e4:0e:ea:c0:15:c2:
13:7f:c4:15:d2:ca:cd:d5:36:0d:d0:3f:11:e7:30:e8:23:15:
67:fc:da:bf:37:ff:c1:a5:0a:b0:bb:1d:e1:5a:65:d0:72:c7:
45:92:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org