Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ekBildidGPWZPv71PZScT44Z0sI.roa
File: ekBildidGPWZPv71PZScT44Z0sI.roa (raw, json)
Hash identifier: uAgjq3tP/llWXUW3/G0FXfyCUqYrnFMVMoXAkbkQBfI=
Subject key identifier: 7A:40:62:95:D8:9D:18:F5:99:3E:FE:F5:3D:94:9C:4F:8E:19:D2:C2
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 0187703EC527F0DB8779FBADA7162CF6B8D3
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ekBildidGPWZPv71PZScT44Z0sI.roa
Signing time: Tue 11 Apr 2023 12:16:14 +0000
ROA not before: Tue 11 Apr 2023 12:16:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 46.28.232.0/24 maxlen: 24
46.28.238.0/24 maxlen: 24
46.28.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:3e:c5:27:f0:db:87:79:fb:ad:a7:16:2c:f6:b8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Apr 11 12:16:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a406295d89d18f5993efef53d949c4f8e19d2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:44:e4:c8:ed:fa:c8:41:1d:38:20:48:98:
8b:7e:4a:ec:5f:35:91:df:ba:19:d6:80:5f:23:62:
32:55:04:ea:27:64:c7:c4:07:64:ae:ab:1b:ca:6a:
c6:7d:97:91:9d:5a:8b:ec:b2:86:0e:81:2a:99:77:
61:82:d9:a1:f5:bc:05:76:c9:fa:b9:a5:43:bd:19:
46:78:97:0d:d8:aa:93:0b:f1:62:34:be:bd:db:3d:
76:9d:36:d4:2a:de:a4:36:30:f9:7a:fc:96:9c:19:
ae:39:36:ba:e0:4c:cb:9b:8f:1b:5d:85:22:f0:55:
39:9f:0d:52:8b:5b:c5:c5:f2:35:9f:56:b3:c7:91:
70:2a:7c:f7:cc:99:20:2e:26:79:84:06:57:bc:86:
93:e2:d5:0f:c2:10:7b:33:8e:9e:92:53:16:a7:21:
61:3e:cd:3b:c5:de:9a:f3:25:9f:34:1b:ac:88:23:
3d:aa:ac:22:ff:68:fd:38:c1:03:eb:39:3a:b4:18:
59:0e:2d:4f:67:fb:c0:cd:3a:35:f9:6f:64:2b:a2:
c7:62:32:a4:1e:2a:d5:5e:71:97:db:12:ca:94:b5:
4d:ca:97:2f:cf:b7:3e:a4:9f:a4:31:34:1c:89:73:
3e:b7:67:ce:0c:7c:0d:a7:73:d4:6e:ed:d7:12:1a:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:40:62:95:D8:9D:18:F5:99:3E:FE:F5:3D:94:9C:4F:8E:19:D2:C2
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ekBildidGPWZPv71PZScT44Z0sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.232.0/24
46.28.238.0/23
Signature Algorithm: sha256WithRSAEncryption
01:2f:ab:a2:54:6b:ee:72:cb:cc:6e:9a:63:f8:d9:ce:23:15:
40:eb:f3:43:24:e3:62:65:4c:a7:e2:20:b2:0a:09:ec:3a:22:
04:f8:ec:8a:ba:e6:07:c5:09:16:2b:51:b6:5b:bb:fa:7e:e4:
92:e2:01:ef:62:8c:a2:4c:91:e3:ba:84:29:44:4f:9f:84:74:
e2:ff:48:03:90:f0:bc:f4:ea:c1:33:34:ca:96:a5:9b:12:ee:
bf:03:a3:1e:81:16:68:6a:4a:1e:9c:b2:19:e3:a9:ae:46:ae:
e8:be:5b:7f:cf:7d:a0:bb:6f:fe:8f:70:e7:11:22:df:a2:ae:
35:6d:c7:a8:14:14:ca:e2:22:aa:59:ef:cf:de:93:3b:25:ef:
4f:3c:b8:f3:bd:33:6f:f6:97:25:bc:7b:b5:a1:26:9f:65:dd:
6c:17:40:d2:8a:fd:85:b1:b4:55:66:b6:10:5a:a8:76:89:62:
0c:c4:21:93:15:72:8d:31:1e:e6:8b:7b:72:41:aa:de:26:8e:
5a:cf:24:4f:13:13:b4:17:44:0d:74:2e:19:a9:50:5e:ef:4d:
a9:c6:e6:fe:97:d3:c0:85:99:00:3a:45:86:37:26:c6:b3:b9:
92:13:a8:b8:9b:79:a4:10:02:1a:52:b0:4c:d8:2a:98:fe:6e:
46:88:65:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdwPsUn8NuHefutpxYs9rjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh
MDBiNjcwHhcNMjMwNDExMTIxNjE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTQwNjI5NWQ4OWQxOGY1OTkzZWZlZjUzZDk0OWM0ZjhlMTlkMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyhE5Mjt+shBHTggSJiLfkrsXzWR
37oZ1oBfI2IyVQTqJ2THxAdkrqsbymrGfZeRnVqL7LKGDoEqmXdhgtmh9bwFdsn6
uaVDvRlGeJcN2KqTC/FiNL692z12nTbUKt6kNjD5evyWnBmuOTa64EzLm48bXYUi
8FU5nw1Si1vFxfI1n1azx5FwKnz3zJkgLiZ5hAZXvIaT4tUPwhB7M46eklMWpyFh
Ps07xd6a8yWfNBusiCM9qqwi/2j9OMED6zk6tBhZDi1PZ/vAzTo1+W9kK6LHYjKk
HirVXnGX2xLKlLVNypcvz7c+pJ+kMTQciXM+t2fODHwNp3PUbu3XEhrV7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHpAYpXYnRj1mT7+9T2UnE+OGdLCMB8GA1UdIwQY
MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt
YjllYjg3MWY2ZDk2LzEvZWtCaWxkaWRHUFdaUHY3MVBaU2NUNDRaMHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2
LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhzoAwQB
LhzuMA0GCSqGSIb3DQEBCwUAA4IBAQABL6uiVGvucsvMbppj+NnOIxVA6/NDJONi
ZUyn4iCyCgnsOiIE+OyKuuYHxQkWK1G2W7v6fuSS4gHvYoyiTJHjuoQpRE+fhHTi
/0gDkPC89OrBMzTKlqWbEu6/A6MegRZoakoenLIZ46muRq7ovlt/z32gu2/+j3Dn
ESLfoq41bceoFBTK4iKqWe/P3pM7Je9PPLjzvTNv9pclvHu1oSafZd1sF0DSiv2F
sbRVZrYQWqh2iWIMxCGTFXKNMR7mi3tyQareJo5azyRPExO0F0QNdC4ZqVBe702p
xub+l9PAhZkAOkWGNybGs7mSE6i4m3mkEAIaUrBM2CqY/m5GiGWT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:40 2024 by rpki-client on console-ams.rpki-client.org