Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6WnoOxPvFnVDHvIn6ffH9-P9alw.roa
File: 6WnoOxPvFnVDHvIn6ffH9-P9alw.roa (raw, json)
Hash identifier: NPjrUyTAKk8O707wzd5SE/txtY3eBULggLuESKExBA8=
Subject key identifier: E9:69:E8:3B:13:EF:16:75:43:1E:F2:27:E9:F7:C7:F7:E3:FD:6A:5C
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 01856ECB66A1AC2BE18C2F703719352C94B9
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6WnoOxPvFnVDHvIn6ffH9-P9alw.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50820
IP address blocks: 46.46.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:66:a1:ac:2b:e1:8c:2f:70:37:19:35:2c:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e969e83b13ef1675431ef227e9f7c7f7e3fd6a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0a:8e:af:a8:03:e9:84:5f:7e:ec:5a:3b:3f:
e7:86:9b:02:b6:51:df:c9:6d:7f:00:7f:82:ca:e4:
57:33:6e:90:f8:4c:93:18:82:6f:3a:f4:1e:d8:a0:
34:26:e6:5a:b6:9f:bd:b2:1e:ba:73:c1:d0:7d:02:
b1:00:19:b9:a8:74:1e:f1:52:07:74:0f:ba:c3:58:
fa:8d:21:db:6e:95:f7:f3:8b:95:0c:4e:d7:71:75:
eb:2f:ce:4f:27:27:6d:d7:b3:db:c5:6d:14:6e:27:
a1:1a:84:22:a6:aa:4f:e9:cb:42:86:da:fc:e1:e0:
f4:c9:d4:5e:74:15:b5:8e:e6:cf:c1:4b:32:02:0f:
30:1b:a3:64:85:82:da:c5:37:5d:53:5d:dd:d4:87:
7a:47:5d:01:01:4d:32:59:6b:4d:70:81:0e:10:53:
36:0c:2c:f3:55:43:8e:0d:5f:65:a4:46:d8:ce:b2:
2c:a7:08:b6:7b:1f:79:4c:ce:55:db:20:cd:22:c6:
7f:05:51:ab:97:79:45:2c:7a:2f:11:a5:a2:ea:b7:
61:22:13:b1:5a:5b:18:76:0e:33:0b:37:e5:27:49:
10:95:9a:9a:81:b3:80:bb:da:ba:b3:7a:47:18:bc:
76:6f:3d:90:59:fb:68:4e:c7:57:8a:46:a7:2f:58:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:E8:3B:13:EF:16:75:43:1E:F2:27:E9:F7:C7:F7:E3:FD:6A:5C
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6WnoOxPvFnVDHvIn6ffH9-P9alw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:2b:9f:f2:f5:a1:d6:ab:bf:f3:80:1e:08:02:b6:d1:83:54:
8a:9e:6c:6c:0e:b7:43:3d:92:a2:3e:a1:d4:5b:12:26:4d:9f:
2b:3d:c2:04:0d:bb:87:31:97:71:2e:a8:17:16:aa:db:d0:dc:
a8:1e:d7:af:80:45:bb:1e:c7:00:e6:61:0d:10:9a:52:77:df:
37:08:4d:44:1c:78:64:ca:cf:1c:94:84:29:89:65:7c:cc:cd:
a7:52:8c:56:2d:ff:ca:e7:64:bb:f3:fe:06:9e:09:12:7f:6d:
54:40:3c:a5:1a:8c:63:db:30:c1:d9:10:7b:2e:01:21:5e:16:
4d:77:75:d4:47:44:81:23:2a:e8:15:23:df:db:9b:6a:b5:e3:
40:f6:44:de:cc:28:75:9d:b5:f9:22:e4:d7:51:05:a3:f4:b7:
c0:c2:3e:65:46:70:7d:38:37:35:e8:b1:34:49:f6:c1:70:c2:
88:c1:e5:c3:9a:ed:eb:e7:fa:fa:33:95:49:83:6f:41:55:fb:
7b:cc:59:ef:d3:4c:a6:b2:38:c0:04:72:c4:98:c9:54:51:8d:
73:91:e3:ef:d5:6d:af:ea:a0:3c:a2:92:f7:5a:f2:75:4e:a6:
43:dd:a3:73:ae:3d:58:5a:1c:5c:27:19:33:ac:78:05:91:6b:
3d:d2:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:21 2024 by rpki-client on console-fra.rpki-client.org