Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa
File: _tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa (raw, json)
Hash identifier: naMnLQgDerICFYVl1aGkD/a+PFsGrpNIW1Dp3+SYOS4=
Subject key identifier: FE:D1:62:D8:69:F7:09:F2:5F:53:0E:E6:48:96:3E:68:61:7C:57:0A
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0186FEC45E6EC0E398E12BD18A882F511076
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa
Signing time: Mon 20 Mar 2023 11:25:27 +0000
ROA not before: Mon 20 Mar 2023 11:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200453
IP address blocks: 46.46.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:c4:5e:6e:c0:e3:98:e1:2b:d1:8a:88:2f:51:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Mar 20 11:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed162d869f709f25f530ee648963e68617c570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:1a:2d:6c:d7:18:08:1c:9e:0d:4e:eb:88:
73:9e:4d:bb:08:99:48:12:1b:b0:a1:0d:d3:b7:bb:
53:97:e6:ec:24:d6:b3:98:1e:d4:0e:c9:d6:34:e9:
87:ed:67:27:82:a7:cf:cc:e5:f7:11:65:7c:ee:14:
1c:96:20:dc:d4:75:17:07:70:67:bc:7d:7b:3b:bc:
89:08:9d:b0:89:b1:7b:7b:bb:75:2a:82:a6:08:4c:
a0:9e:32:c1:ec:0b:45:65:3a:b9:5f:42:31:d7:b3:
75:2e:42:9c:43:93:62:94:bf:94:ff:2e:d3:a9:8f:
d7:44:56:a2:96:7f:77:0f:5c:86:ba:e4:ba:4c:2e:
d6:0d:98:14:01:50:b3:6b:7d:82:1a:91:54:d5:85:
36:35:f9:56:8a:6a:5c:08:be:ec:cf:de:75:ef:52:
06:16:f4:71:7f:78:82:12:ec:eb:1a:fa:c8:a2:00:
14:b6:b2:cc:63:71:1b:96:50:f7:f5:c8:75:96:7e:
92:11:c4:50:28:c7:f2:2a:43:30:f4:b2:2c:47:9d:
25:fd:69:85:88:11:e1:b2:09:8b:6e:e9:5e:57:ee:
98:61:4d:0a:3a:f0:ec:5b:55:08:09:41:ba:49:f0:
25:83:d4:a1:1e:c5:e9:1e:69:e2:dc:fc:b5:57:99:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:62:D8:69:F7:09:F2:5F:53:0E:E6:48:96:3E:68:61:7C:57:0A
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/_tFi2Gn3CfJfUw7mSJY-aGF8Vwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:60:45:17:6f:e4:9c:2a:a3:24:d1:c9:66:dc:00:0c:01:36:
29:47:ec:4e:b3:bc:9d:32:30:36:04:01:2a:fa:2d:1e:6a:37:
3d:3d:c8:aa:b2:71:53:59:18:c6:bd:4c:e4:ea:10:e8:7a:7d:
30:a6:f6:e0:72:95:5e:c5:e3:cf:68:f6:86:70:7b:d8:d3:5f:
e5:45:f1:b1:39:95:ea:f1:00:30:87:49:a7:d5:b2:8f:61:80:
0f:41:7d:f5:2c:c8:f4:e3:1e:5c:bb:74:80:8d:37:da:c4:be:
cf:4a:11:7c:bc:4e:d9:2d:02:5a:f8:8e:a6:a9:2e:87:1a:23:
9a:7c:cc:ea:4f:a3:e1:65:71:35:a7:ef:f7:55:49:04:ec:13:
34:fd:5d:ed:54:11:43:8e:71:88:c0:4c:86:87:88:db:79:34:
5c:e6:eb:e4:0f:40:a0:07:4c:d7:c6:05:cb:c5:41:68:ab:8a:
38:dc:18:48:99:f2:34:13:1e:eb:4a:67:16:7e:d1:5d:74:d7:
3e:71:17:87:24:1c:34:8c:4e:a8:c8:86:0e:64:1a:c7:99:ac:
b2:e4:44:18:0c:64:e3:03:c3:de:a1:8b:b0:3b:d9:5c:84:b0:
c5:3e:54:5d:9b:ba:89:6c:3e:1d:54:d7:46:e2:31:54:22:92:
c6:32:37:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:22:04 2024 by rpki-client on console-ams.rpki-client.org