Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/WN7Q31MMIExtESDslM9OfLEaj6E.roa
File: WN7Q31MMIExtESDslM9OfLEaj6E.roa (raw, json)
Hash identifier: C+aPlq0zaffwKkzvlaZh8upA1yh8OmMmWQZPwXJM5P4=
Subject key identifier: 58:DE:D0:DF:53:0C:20:4C:6D:11:20:EC:94:CF:4E:7C:B1:1A:8F:A1
Certificate issuer: /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial: 0185BB8F362CD0DF20F955E63903D5DD5CD8
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/WN7Q31MMIExtESDslM9OfLEaj6E.roa
Signing time: Mon 16 Jan 2023 17:10:03 +0000
ROA not before: Mon 16 Jan 2023 17:10:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44992
IP address blocks: 46.31.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:8f:36:2c:d0:df:20:f9:55:e6:39:03:d5:dd:5c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Validity
Not Before: Jan 16 17:10:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ded0df530c204c6d1120ec94cf4e7cb11a8fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e3:3f:32:d2:98:93:21:1b:44:c9:99:7f:5d:
0f:5b:68:1f:ab:db:7d:ae:45:61:2e:64:bb:d8:44:
c6:d9:80:c8:7b:72:c0:15:38:31:e2:a9:20:e2:f3:
84:b6:39:e1:50:6f:9b:9f:87:fe:f2:a2:25:66:45:
2a:d2:25:96:e5:e2:78:6f:11:c4:a9:10:9d:f5:fb:
51:7b:21:ee:49:8f:9e:5f:d5:a8:54:46:b0:84:e3:
b3:eb:b6:b0:c5:86:d5:00:71:ec:82:16:88:22:92:
16:f7:6c:1a:98:aa:a9:d0:4f:11:de:d5:59:d7:22:
86:69:60:50:1c:84:13:0d:e8:ab:4e:42:91:19:64:
1b:41:ed:d2:3b:59:b2:31:c9:5f:a3:a1:9d:26:9c:
0c:c2:e7:eb:28:41:32:25:b8:b1:76:2c:39:9c:30:
2b:0b:2c:a4:40:e5:72:9e:4f:73:c6:27:de:c9:cd:
4c:58:e8:0d:38:6a:df:79:77:cd:91:45:bf:2c:81:
a9:2f:17:81:45:ef:5f:18:78:b6:99:76:d7:33:94:
67:c0:80:37:44:49:0a:a1:f8:d1:c0:d6:8f:17:dc:
e5:ae:ae:4a:e9:9c:b5:29:9e:2a:51:8a:5e:7e:59:
0e:5c:35:b9:3a:e4:e2:3f:2e:e9:e1:cc:38:9f:db:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DE:D0:DF:53:0C:20:4C:6D:11:20:EC:94:CF:4E:7C:B1:1A:8F:A1
X509v3 Authority Key Identifier:
keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/WN7Q31MMIExtESDslM9OfLEaj6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9d:a7:4e:7d:ca:66:d9:ac:f8:91:16:17:3f:06:ee:19:8a:
f4:83:2c:7a:36:fa:67:cf:09:de:27:86:6b:8b:dc:39:ca:b6:
4d:77:12:74:2d:7f:7c:b7:92:26:24:b1:b8:e6:57:24:7e:57:
82:2a:e7:75:ff:dd:51:80:3b:33:32:55:2b:9f:ba:7d:23:8d:
f6:c0:35:e7:46:83:cc:99:f1:f4:e0:cb:82:11:4b:e1:e5:81:
e5:f4:49:6c:c9:6e:f3:52:e2:a4:b7:13:ab:4d:5c:20:00:3e:
ed:5d:00:04:e8:19:ae:4b:76:2a:2b:df:5b:e2:a8:4d:14:cd:
bb:a6:8a:a5:26:dd:b0:64:29:f0:0f:4d:f6:91:0e:fb:77:95:
60:d0:2e:61:b7:04:5d:6e:86:5e:9a:8c:ae:61:fa:0a:40:da:
49:02:02:d8:87:4a:b0:23:0a:dc:8f:bc:7b:18:af:5b:c0:b7:
10:33:af:d3:f6:26:00:c2:0e:45:29:d2:a1:76:b5:e7:60:85:
d1:7d:c7:14:90:01:81:3e:de:5e:d4:ba:bc:e8:12:7a:83:f0:
89:c9:ed:2e:59:13:6f:dc:87:94:2e:ba:0f:65:d6:39:97:fb:
67:13:56:5f:07:05:f0:57:e7:97:0a:58:d6:87:d2:96:b0:b6:
96:6b:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-fra.rpki-client.org