Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/dH56E5Gjv7PbrMZ9nxll35kVa70.roa
File: dH56E5Gjv7PbrMZ9nxll35kVa70.roa (raw, json)
Hash identifier: otlQOW6Wn+MO3ddqzk4IhdrNkfeoXS+RK2OU+Ppyt4o=
Subject key identifier: 74:7E:7A:13:91:A3:BF:B3:DB:AC:C6:7D:9F:19:65:DF:99:15:6B:BD
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 01856ECB66213783EACB80254830E38A6ADF
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/dH56E5Gjv7PbrMZ9nxll35kVa70.roa
Signing time: Sun 01 Jan 2023 19:25:01 +0000
ROA not before: Sun 01 Jan 2023 19:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29470
IP address blocks: 46.46.160.0/20 maxlen: 20
46.46.176.0/21 maxlen: 21
46.46.184.0/22 maxlen: 22
46.46.128.0/19 maxlen: 19
46.46.128.0/18 maxlen: 18
2a02:24b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 16 Jan 2023 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:66:21:37:83:ea:cb:80:25:48:30:e3:8a:6a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 1 19:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747e7a1391a3bfb3dbacc67d9f1965df99156bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:28:7e:ef:7c:c7:9a:de:cb:5e:f1:43:2c:
b6:7d:1f:0d:06:0d:40:9e:ce:9e:62:21:d6:79:08:
33:f4:1c:d9:7b:ec:34:fb:75:d2:0d:21:3e:b3:ed:
2a:61:e7:22:b0:8f:c8:8a:7f:e8:23:41:a1:b4:03:
62:c0:0f:c8:7b:a4:14:36:9c:6b:f7:51:b7:45:ec:
c8:6d:7e:fc:4d:9d:24:c0:6a:fb:96:3f:09:11:4e:
62:72:69:fc:a2:ea:b6:0b:d5:8b:e2:c0:da:c4:02:
c5:d4:20:92:90:92:32:7c:0a:c6:e6:84:e2:3d:ad:
d3:63:32:77:a0:ea:24:cd:83:cb:2e:88:a4:a7:ee:
07:dd:22:cf:9b:bd:53:07:98:25:41:b9:77:a9:c7:
39:89:bf:57:21:c6:f3:ac:bd:c4:c0:95:c1:a1:80:
fe:98:52:c2:c2:24:05:b6:37:7c:30:54:2d:c7:35:
42:ba:16:39:24:6c:87:5c:79:c0:88:92:a2:5f:09:
a9:0c:52:a9:c8:95:c0:20:12:b3:09:4a:14:47:93:
f6:52:91:da:c7:f6:21:4a:06:28:2d:dd:73:4c:a5:
e4:75:d6:cc:49:64:ed:3e:75:3d:8a:de:66:17:74:
4e:e8:63:a4:ea:20:23:c4:e6:c5:ba:89:3b:dd:17:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7E:7A:13:91:A3:BF:B3:DB:AC:C6:7D:9F:19:65:DF:99:15:6B:BD
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/dH56E5Gjv7PbrMZ9nxll35kVa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.128.0/18
IPv6:
2a02:24b0::/32
Signature Algorithm: sha256WithRSAEncryption
41:b6:04:c0:cc:f2:5e:37:f0:67:bf:e9:63:49:09:31:b1:e0:
c4:e8:04:48:d9:3f:f6:31:32:74:ed:d7:38:0a:88:0b:a0:1b:
02:ba:8d:56:17:ae:d5:b9:32:99:47:03:bc:db:4d:e4:8d:31:
64:80:20:17:f0:e7:9c:26:2f:be:c2:e8:82:69:99:4b:1b:80:
4e:16:0c:5d:93:fa:49:59:60:cd:88:f6:b3:b2:27:9b:e7:63:
37:3d:e7:92:40:00:cb:11:67:38:3a:63:66:73:1f:1d:ce:17:
94:4c:65:80:c4:17:cb:8f:a1:a0:6b:a8:94:90:52:8c:21:a6:
6c:ab:16:b0:af:67:3a:8d:8d:18:0e:eb:6e:ea:4d:85:90:ae:
47:65:94:84:bb:91:e5:4c:05:2b:3b:7c:4d:91:6d:43:bb:f6:
18:05:56:b6:c5:65:5d:11:11:2a:02:b0:f8:3f:49:b8:a5:e5:
b5:39:7d:b3:eb:10:06:4d:f3:e7:51:55:84:65:99:c5:80:85:
3a:27:8c:0c:c9:6a:28:21:54:bd:8a:a4:b6:51:f0:0b:73:bc:
99:c6:ae:32:3c:79:f7:e9:bd:ad:4e:35:62:dd:02:80:35:e8:
5d:79:c4:b1:65:30:0d:f7:b1:db:74:ad:db:b8:06:13:36:76:
25:a0:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:14 2024 by rpki-client on console-ams.rpki-client.org