Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/I2lJRty-rHiGy6BLiqEgCN-rAMA.roa
File: I2lJRty-rHiGy6BLiqEgCN-rAMA.roa (raw, json)
Hash identifier: h1VaqJJ1Jesy0bOfuw87JJVnKpLMS19blfMwX+ez7J8=
Subject key identifier: 23:69:49:46:DC:BE:AC:78:86:CB:A0:4B:8A:A1:20:08:DF:AB:00:C0
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018AB311688E3F88E8833E764C7150F6DCD8
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/I2lJRty-rHiGy6BLiqEgCN-rAMA.roa
Signing time: Wed 20 Sep 2023 14:49:37 +0000
ROA not before: Wed 20 Sep 2023 14:49:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203963
IP address blocks: 46.20.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:11:68:8e:3f:88:e8:83:3e:76:4c:71:50:f6:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Sep 20 14:49:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23694946dcbeac7886cba04b8aa12008dfab00c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:0d:95:f0:7c:1f:05:8e:a2:4e:37:f5:0a:
6d:b3:23:0b:a4:f7:89:5f:dc:0c:04:df:d6:b0:ae:
88:a8:77:79:d7:96:47:16:0a:61:5b:94:38:87:ec:
41:d2:5d:2b:4a:e0:f6:54:51:aa:97:c9:fa:a8:dd:
39:22:0a:9a:59:7f:d0:9d:8c:93:94:4a:2e:ba:6d:
5b:7d:09:ea:f7:2f:7d:7c:c8:bd:52:92:d6:6b:9b:
42:8b:38:fe:89:9e:f9:d4:3b:b6:69:cd:c1:c6:72:
1b:a5:fc:ae:87:3f:30:09:29:37:03:0a:d5:c1:aa:
0c:4f:39:46:54:6f:a4:ce:00:dc:b8:cf:65:81:ae:
86:66:3d:1d:b5:9d:07:1d:42:4d:91:88:d3:02:6b:
a1:5d:72:1e:5c:58:71:6e:84:d9:58:8b:09:cc:39:
d0:43:de:ad:b3:33:c8:af:28:39:37:67:4b:53:a5:
84:98:2c:3c:0e:0b:07:73:a5:09:04:1a:dc:06:e2:
2e:31:ed:12:fa:5d:33:59:0e:fb:26:dd:58:0a:be:
da:2e:88:7a:3c:e6:6b:59:c9:d3:09:66:62:2d:29:
78:f5:e7:b3:4e:b9:ff:d4:d9:c2:f2:27:05:7d:92:
23:c1:5a:d6:5c:ad:86:ec:41:43:08:32:17:4d:24:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:49:46:DC:BE:AC:78:86:CB:A0:4B:8A:A1:20:08:DF:AB:00:C0
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/I2lJRty-rHiGy6BLiqEgCN-rAMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.107.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e7:e9:30:87:4d:ed:ff:5f:5f:c9:98:6a:51:8d:1e:9a:8a:
5e:db:b4:c6:56:0d:b5:54:58:29:0a:7c:c7:69:97:1a:29:1f:
34:ab:af:08:a2:95:d7:2a:ff:1f:53:ff:91:c5:d1:f6:f9:75:
d3:fe:e0:60:be:a6:42:8b:64:76:e7:f4:60:8e:92:0e:2a:f6:
d3:38:f9:b3:58:20:eb:c4:a4:cf:80:ef:54:1d:96:1f:3f:d0:
16:d6:20:b6:65:cd:03:fd:53:2d:33:20:38:4f:f4:41:61:fb:
89:23:01:55:6e:96:76:a5:2d:a5:ee:6a:21:21:6d:2a:0d:0c:
17:98:16:49:b0:bf:7f:04:77:5e:95:74:e8:ab:b5:60:1c:8e:
55:98:f1:fe:53:42:3d:61:3b:8d:99:63:75:10:8c:6f:53:f0:
24:53:89:d6:b8:2b:cd:ab:f8:7e:01:8c:25:88:6b:6b:50:01:
74:22:27:18:7f:9e:00:94:26:36:87:5c:83:ef:99:49:fc:1f:
e6:2c:03:ac:25:16:73:7f:59:56:4b:ae:43:1a:44:e1:d2:a6:
2b:b0:2e:47:88:8f:54:31:04:e0:44:b7:4e:92:e0:ab:25:9b:
9f:e4:a7:05:d5:df:d1:49:44:8f:ee:15:a5:c6:2c:69:d1:bb:
d0:19:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:36 2024 by rpki-client on console.sobornost.net