Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/bNkCjk96eKnAHwqJDqyLiVKiIAQ.roa
File: bNkCjk96eKnAHwqJDqyLiVKiIAQ.roa (raw, json)
Hash identifier: 73OvmNFu2XgYqH5NQgW0PYmkGrdd6+mgp2YTY1mhhec=
Subject key identifier: 6C:D9:02:8E:4F:7A:78:A9:C0:1F:0A:89:0E:AC:8B:89:52:A2:20:04
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 018E311FB3F0AE81FC40FFEDD9186E16A5FE
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/bNkCjk96eKnAHwqJDqyLiVKiIAQ.roa
Signing time: Tue 12 Mar 2024 05:25:45 +0000
ROA not before: Tue 12 Mar 2024 05:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Apr 2024 15:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:31:1f:b3:f0:ae:81:fc:40:ff:ed:d9:18:6e:16:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Mar 12 05:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cd9028e4f7a78a9c01f0a890eac8b8952a22004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:79:b0:de:e6:08:00:01:8d:bd:a5:8e:66:
d2:b3:5a:7e:0c:60:35:af:94:03:ac:27:7c:c4:c8:
23:21:6c:4d:b6:c8:b6:78:ce:8e:e0:a3:2c:1f:93:
8c:f2:8e:74:a4:4f:3e:ab:e1:20:d0:a0:42:da:07:
f4:97:05:a6:64:a0:8d:24:2a:49:47:25:29:c8:d5:
ac:37:1e:e6:5d:bb:14:24:d0:f6:fa:92:34:ac:b3:
e7:65:08:c4:0b:37:47:0d:ea:7a:2d:cc:4d:20:38:
8e:b9:13:05:ad:e9:58:a2:71:84:d1:11:20:c4:9e:
17:d8:17:f7:89:44:ad:48:fd:51:b5:af:91:9c:23:
4d:2d:d0:eb:d8:20:ef:93:0f:ad:9e:ac:b8:59:9a:
82:09:21:7b:2e:0a:4a:24:58:89:bc:06:cd:91:7f:
c1:c2:68:c3:38:5e:0c:88:de:09:45:30:21:d0:b2:
ad:55:2b:06:8d:d4:b1:c4:5f:b9:4d:ee:b2:32:26:
90:79:24:1c:e9:c4:fd:24:f8:f3:48:ad:05:dd:df:
2a:c2:c7:70:68:fc:ff:d8:f8:4d:8a:38:ea:2d:6a:
ba:a3:4d:24:77:cc:b1:1e:0f:52:22:b2:b2:b8:28:
1b:02:7b:d1:c0:0f:12:f4:6f:c3:92:7b:9a:90:d2:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:02:8E:4F:7A:78:A9:C0:1F:0A:89:0E:AC:8B:89:52:A2:20:04
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/bNkCjk96eKnAHwqJDqyLiVKiIAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.43.0/24
46.148.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:9e:76:40:f9:21:ea:d7:f0:49:25:89:76:2f:19:44:4c:b5:
40:d3:5f:62:5c:34:32:fe:f3:34:f0:1f:61:6c:03:1e:d6:99:
a5:6c:00:19:6e:fd:75:9c:e7:85:3d:ee:81:de:92:d9:f7:c5:
0c:87:5b:c7:ff:a5:34:3c:a6:fa:e6:38:fb:fe:70:56:a1:c1:
47:7a:ee:9b:77:d9:fb:80:a8:4a:32:dc:72:f0:22:6b:71:ff:
4b:28:1c:8c:37:4b:ff:19:8f:31:ae:c6:8f:bb:6e:6d:bb:ea:
08:63:ff:0c:dc:32:4a:24:dc:15:c6:61:25:fd:9a:c1:65:8d:
52:da:86:91:36:cb:16:10:43:c8:b5:93:da:93:55:7c:ff:27:
80:f8:a3:66:85:e6:1f:53:5d:2b:1e:3a:19:25:4d:61:7f:8c:
29:84:b5:ae:a8:69:db:cc:ff:cb:02:97:a5:53:e5:17:54:ef:
04:b1:09:29:b1:87:04:e4:d1:4b:0e:2d:63:32:55:34:8e:73:
dd:88:77:74:15:99:75:ed:6a:b6:48:29:91:f6:7c:c8:d1:7d:
c7:41:f4:10:0e:0a:c6:f6:54:a4:3a:89:4b:d7:e1:e4:ee:9c:
4c:90:f3:4b:a4:bf:13:17:be:3e:91:c3:8a:c8:64:c2:0b:d4:
ab:b5:d4:41
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY4xH7PwroH8QP/t2RhuFqX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx
MTdlNzUwHhcNMjQwMzEyMDUyNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Q5MDI4ZTRmN2E3OGE5YzAxZjBhODkwZWFjOGI4OTUyYTIyMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ15sN7mCAABjb2ljmbSs1p+DGA1
r5QDrCd8xMgjIWxNtsi2eM6O4KMsH5OM8o50pE8+q+Eg0KBC2gf0lwWmZKCNJCpJ
RyUpyNWsNx7mXbsUJND2+pI0rLPnZQjECzdHDep6LcxNIDiOuRMFrelYonGE0REg
xJ4X2Bf3iUStSP1Rta+RnCNNLdDr2CDvkw+tnqy4WZqCCSF7LgpKJFiJvAbNkX/B
wmjDOF4MiN4JRTAh0LKtVSsGjdSxxF+5Te6yMiaQeSQc6cT9JPjzSK0F3d8qwsdw
aPz/2PhNijjqLWq6o00kd8yxHg9SIrKyuCgbAnvRwA8S9G/DknuakNLQNQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGzZAo5PenipwB8KiQ6si4lSoiAEMB8GA1UdIwQY
MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt
YWYyY2ZhNjIyZDE4LzEvYk5rQ2prOTZlS25BSHdxSkRxeUxpVktpSUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4
LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAulCMD
BAAulCQDBAAulCsDBAAulC0wDQYJKoZIhvcNAQELBQADggEBAMCedkD5IerX8Ekl
iXYvGURMtUDTX2JcNDL+8zTwH2FsAx7WmaVsABlu/XWc54U97oHektn3xQyHW8f/
pTQ8pvrmOPv+cFahwUd67pt32fuAqEoy3HLwImtx/0soHIw3S/8ZjzGuxo+7bm27
6ghj/wzcMkok3BXGYSX9msFljVLahpE2yxYQQ8i1k9qTVXz/J4D4o2aF5h9TXSse
OhklTWF/jCmEta6oadvM/8sCl6VT5RdU7wSxCSmxhwTk0UsOLWMyVTSOc92Id3QV
mXXtarZIKZH2fMjRfcdB9BAOCsb2VKQ6iUvX4eTunEyQ80ukvxMXvj6Rw4rIZMIL
1Ku11EE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org