Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/DOi8tJCdFh54kP9CnaFo50PVD_Q.roa
File: DOi8tJCdFh54kP9CnaFo50PVD_Q.roa (raw, json)
Hash identifier: KsyDqmadBokuHOzwSsNJ5g7l6Qd/3Iop6WQJa/+wxBQ=
Subject key identifier: 0C:E8:BC:B4:90:9D:16:1E:78:90:FF:42:9D:A1:68:E7:43:D5:0F:F4
Certificate issuer: /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial: 01856DE64B24800A3134ABFB38CCEDB1286D
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/DOi8tJCdFh54kP9CnaFo50PVD_Q.roa
Signing time: Sun 01 Jan 2023 15:14:47 +0000
ROA not before: Sun 01 Jan 2023 15:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51155
IP address blocks: 46.227.38.0/23 maxlen: 23
178.19.176.0/20 maxlen: 20
46.227.36.0/23 maxlen: 23
2a02:26e8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:4b:24:80:0a:31:34:ab:fb:38:cc:ed:b1:28:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Validity
Not Before: Jan 1 15:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce8bcb4909d161e7890ff429da168e743d50ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:7a:69:19:e4:0e:40:d6:e6:41:a5:3b:a5:
76:87:01:a5:e1:ed:2f:6e:c2:98:d0:b6:40:42:ae:
8e:e5:a6:ef:3c:ee:38:3d:26:07:5a:d5:50:82:22:
cc:ff:da:6d:0f:67:89:f1:68:04:5d:cc:6b:d4:8c:
aa:e5:6c:16:cb:c3:fe:e8:ec:e0:04:58:a7:1e:4e:
87:f1:0e:c1:48:b6:da:4c:33:af:89:bc:0a:0f:da:
46:73:02:fd:b4:e4:13:4b:84:fe:50:02:ba:2e:df:
73:93:8d:16:a9:a2:1a:e4:60:a8:ac:9f:db:01:9c:
ee:68:5f:c4:e7:d5:a6:61:c4:33:2d:d5:09:ef:32:
62:37:60:20:16:86:fb:ca:4d:94:2e:33:83:f0:06:
d2:8c:98:12:25:6e:90:59:31:1d:f6:06:13:a7:d3:
a3:67:39:45:46:5f:54:e5:b7:24:ee:48:b7:74:91:
40:16:5a:d8:e1:19:73:8b:99:19:65:68:02:3e:fb:
de:71:1c:4c:fd:69:f1:3c:4d:01:c3:ef:ad:b5:13:
e9:66:53:56:e1:da:95:3b:f9:26:24:fc:2e:41:da:
33:96:ed:a2:5c:79:d5:93:5c:3c:28:fa:73:12:ef:
1f:f1:cc:dc:1d:91:6b:2b:bc:2b:39:7e:65:98:28:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:BC:B4:90:9D:16:1E:78:90:FF:42:9D:A1:68:E7:43:D5:0F:F4
X509v3 Authority Key Identifier:
keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/DOi8tJCdFh54kP9CnaFo50PVD_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.36.0/22
178.19.176.0/20
IPv6:
2a02:26e8::/32
Signature Algorithm: sha256WithRSAEncryption
14:62:35:e8:c2:f9:48:6a:6c:a3:dd:f9:b1:7f:e1:38:51:c0:
04:c2:d5:52:ef:d9:4e:d1:a0:a2:ae:d1:39:4e:22:35:cc:46:
e8:f3:09:95:3a:c3:99:c9:b1:cd:b4:04:47:4c:1b:f5:52:6a:
18:d3:64:78:e8:32:46:07:57:f5:b9:d8:ab:af:cb:7c:b6:33:
f5:ca:7c:32:05:57:0a:44:58:41:0b:54:52:d1:f6:fd:d3:8b:
8e:cc:30:f1:de:1b:fb:19:89:8b:e0:40:11:06:17:0b:dc:0d:
70:98:40:07:b5:f0:db:7c:a6:98:2d:bc:c7:30:ce:13:da:62:
78:b3:11:d7:c6:bd:e3:db:5c:a6:84:ff:74:86:5d:3d:a5:8c:
bd:e2:7f:61:44:93:c6:a7:8d:46:2e:3c:1c:3f:80:80:4c:a4:
31:83:8e:eb:54:fa:3d:c1:26:ac:df:82:d4:2f:6b:bb:2c:b7:
16:d0:55:b3:73:0c:ba:80:a3:b4:d7:ab:48:65:c3:37:da:4a:
b0:e4:c8:32:34:e2:99:d7:19:bf:e9:8b:01:9c:ec:4e:25:89:
57:34:67:6e:41:96:1d:ea:09:22:cf:4d:48:97:cf:1a:b5:5b:
81:d2:cc:bc:94:c2:b9:4a:f6:43:75:92:fa:f9:af:a3:69:58:
42:02:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:29 2024 by rpki-client on console-ams.rpki-client.org