Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/y3xZmOKeOKczjlye5mFF7gUVEH8.roa
File: y3xZmOKeOKczjlye5mFF7gUVEH8.roa (raw, json)
Hash identifier: 71EU5ymZW4D5VkyXt0sHBST4AKZs6hW5qtG4cBHGTvY=
Subject key identifier: CB:7C:59:98:E2:9E:38:A7:33:8E:5C:9E:E6:61:45:EE:05:15:10:7F
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018998575AAF03B4594E89D7AB82EDBC123E
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/y3xZmOKeOKczjlye5mFF7gUVEH8.roa
Signing time: Thu 27 Jul 2023 17:13:28 +0000
ROA not before: Thu 27 Jul 2023 17:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197677
IP address blocks: 46.247.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:57:5a:af:03:b4:59:4e:89:d7:ab:82:ed:bc:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jul 27 17:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb7c5998e29e38a7338e5c9ee66145ee0515107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:8c:02:fb:2e:db:f3:ed:e9:e3:43:f8:f9:
76:f6:50:6f:00:94:57:84:4f:d9:e0:00:e8:7d:d3:
0f:19:17:cb:b0:67:4f:ea:83:c4:d5:53:8f:73:13:
92:c0:28:6f:9c:88:69:4a:28:8f:4b:f7:34:30:98:
37:02:47:d6:72:e0:4d:21:75:73:44:31:b2:99:de:
6f:a5:63:d4:29:ef:73:ca:d1:98:10:df:39:3d:6a:
8a:b0:66:27:9d:65:ee:1a:0a:69:f0:8a:94:17:29:
a1:b9:54:c5:d7:8a:16:59:52:72:ae:d3:cf:fb:9f:
22:13:8a:e8:61:e2:35:52:a3:69:d0:87:ee:07:70:
dc:c8:c4:34:f5:5d:a5:56:42:29:11:e0:f5:6d:62:
5d:50:35:10:56:ad:83:51:5e:d2:e6:e7:f6:0b:f7:
44:76:2d:4d:98:02:51:f9:b8:c2:c9:29:38:c3:e8:
30:24:b4:f0:eb:02:a3:f2:99:b8:80:c2:aa:40:89:
e2:15:f6:80:1e:4a:3b:92:4b:5d:50:50:28:ba:fb:
57:21:74:36:5d:73:db:15:60:7c:fd:2e:89:68:8f:
36:40:fd:ae:43:0c:a6:8f:26:57:0b:0c:bd:04:d2:
27:dc:ca:21:70:ea:36:e0:4b:4a:ee:47:71:42:5e:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:59:98:E2:9E:38:A7:33:8E:5C:9E:E6:61:45:EE:05:15:10:7F
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/y3xZmOKeOKczjlye5mFF7gUVEH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.142.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:3d:e9:cd:63:37:09:f1:46:e2:15:08:97:cd:5e:68:d2:3d:
92:bb:14:2e:2d:2b:c1:c2:1c:c0:66:a0:ff:61:65:99:b9:a9:
f9:e9:0d:24:e7:a4:c0:e7:84:e6:8e:95:5f:21:0a:f5:64:ee:
64:df:5b:f3:be:f7:78:53:81:30:d3:7c:1c:dd:66:aa:7f:4c:
02:b8:da:28:65:c7:42:0b:34:e9:44:88:84:82:ac:b6:99:3c:
5a:7a:a1:c8:65:1c:ff:a3:61:f8:74:fd:c5:50:5c:b8:7e:3f:
20:6a:64:ff:0f:b7:2c:1c:9b:e4:6f:9e:bd:e4:42:52:4c:4d:
fd:fd:b2:6f:99:7d:47:ff:4d:d1:84:d4:ac:dd:af:1c:39:5d:
12:01:4c:66:9e:be:dd:80:cb:1d:71:2a:0b:f1:cc:6d:85:b6:
f0:45:f0:1a:f2:90:11:f9:3c:07:0d:7b:bd:0b:f9:7d:f8:87:
4c:b9:41:3b:d5:fe:93:67:68:c7:03:d9:08:cc:64:d5:54:c3:
f4:8f:2c:8c:b6:ed:9e:5e:72:39:5b:3e:60:cd:20:b3:33:f1:
27:b4:4b:32:d3:b6:c8:1e:a8:fd:6d:9a:62:4c:98:52:0c:88:
fd:05:50:3a:9d:15:ae:c6:61:ee:e6:d6:9b:c0:bd:12:03:71:
90:c2:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org