Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/AcihkVH8lRON7CZYNMN6wFm5oa8.roa
File: AcihkVH8lRON7CZYNMN6wFm5oa8.roa (raw, json)
Hash identifier: 8R40QIst4+pMtSjkU4sPp21UsDExm4MVn2c2bbSC70k=
Subject key identifier: 01:C8:A1:91:51:FC:95:13:8D:EC:26:58:34:C3:7A:C0:59:B9:A1:AF
Certificate issuer: /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial: 0185723A1E8CBB73C4FED774AC05D169ED56
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/AcihkVH8lRON7CZYNMN6wFm5oa8.roa
Signing time: Mon 02 Jan 2023 11:24:49 +0000
ROA not before: Mon 02 Jan 2023 11:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 46.31.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:1e:8c:bb:73:c4:fe:d7:74:ac:05:d1:69:ed:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Validity
Not Before: Jan 2 11:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01c8a19151fc95138dec265834c37ac059b9a1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:1f:3d:d8:53:6b:5a:f9:fb:5b:b3:fc:27:
10:29:6c:02:8d:34:36:35:dd:02:8c:84:a6:8f:28:
44:80:ca:95:07:11:18:bc:17:f8:a5:d3:a5:d8:8e:
fc:e0:72:00:6b:4a:75:8a:06:3e:6d:70:81:dc:52:
ce:2d:52:23:40:45:bb:13:9e:00:78:bd:ee:ac:29:
27:a3:a7:7b:4f:93:e6:31:3d:62:6a:65:ab:5a:73:
35:86:ce:fb:74:a4:11:ea:2d:34:ac:4a:52:f8:6f:
54:7e:ef:05:8d:93:69:9f:be:d7:70:0f:23:8f:c8:
39:85:a8:1c:ad:d1:2d:8d:d4:b4:33:8f:2a:52:b0:
6e:36:3d:d3:92:3c:17:73:31:8c:f6:11:32:56:5c:
a5:29:8b:7b:06:e4:e3:b0:10:05:e9:31:b2:a3:d2:
37:66:2f:e5:81:eb:39:a6:67:5b:a4:1b:8e:21:d8:
f1:e7:2f:f9:32:c6:09:f9:3e:f9:b6:a3:db:b6:18:
56:37:49:b5:1d:86:6e:e5:cd:3c:72:71:de:cc:ae:
a6:51:72:fc:3e:6f:4e:30:aa:38:e3:11:15:ef:7a:
dc:01:53:9f:f6:45:5c:07:88:8f:9d:0b:07:3f:b7:
7f:81:d7:36:3b:6f:ab:ee:07:7a:b6:02:2e:ba:f8:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:A1:91:51:FC:95:13:8D:EC:26:58:34:C3:7A:C0:59:B9:A1:AF
X509v3 Authority Key Identifier:
keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/AcihkVH8lRON7CZYNMN6wFm5oa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.64.0/24
Signature Algorithm: sha256WithRSAEncryption
01:84:23:f1:19:36:7d:e8:5d:b4:d6:08:ac:bf:de:46:23:ce:
9c:57:97:7d:31:4e:6e:b5:d6:ea:52:5e:4e:2a:3d:22:5a:12:
99:90:0e:2f:9b:5a:ea:8b:dd:a4:80:a7:57:b4:a1:16:e9:6c:
22:f4:a4:96:ab:73:1e:c5:1b:20:8b:67:a2:50:0d:13:6a:81:
cf:f1:ae:fa:0d:75:c8:43:63:df:4a:6c:b8:02:23:f4:b9:9f:
f8:ed:57:87:9e:31:74:23:bd:7b:e7:2d:dd:ec:a5:fb:61:f8:
06:6d:0b:0c:4c:96:e3:58:9b:7e:2e:42:6c:da:91:25:07:3f:
21:2a:de:88:07:8a:63:2d:88:d0:77:32:cd:9d:92:14:3a:6d:
9b:bf:c7:30:c5:b8:f3:94:9f:f1:50:03:e5:22:5f:56:f8:92:
cb:de:dd:d6:86:6e:42:e6:97:2b:9c:d0:87:5e:d2:8f:64:62:
7d:d3:01:1f:27:17:d5:58:e2:6c:aa:1f:a0:79:27:29:16:61:
5f:1e:3c:fc:fd:d1:d1:6c:f4:d0:12:29:34:53:77:29:d4:18:
1f:dd:f0:0b:ec:35:f0:88:8e:84:2f:d1:7a:93:de:32:c5:15:
72:ef:f2:03:7e:35:7c:af:87:a3:3a:38:30:4a:41:2b:f0:f1:
20:4c:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:11 2023 by rpki-client on console-ams.rpki-client.org