Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/LDvJZ1QYhJk9F0ySEnfcm42gJgo.roa
File: LDvJZ1QYhJk9F0ySEnfcm42gJgo.roa (raw, json)
Hash identifier: ZpmwZm+TKFnfRt0W4R71LUuLBhgzTqCrOFw71tGA5YQ=
Subject key identifier: 2C:3B:C9:67:54:18:84:99:3D:17:4C:92:12:77:DC:9B:8D:A0:26:0A
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 018571153330DEF2042A93149E296AFF7DCF
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/LDvJZ1QYhJk9F0ySEnfcm42gJgo.roa
Signing time: Mon 02 Jan 2023 06:04:52 +0000
ROA not before: Mon 02 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204818
IP address blocks: 46.16.205.0/24 maxlen: 24
46.16.206.0/24 maxlen: 24
46.16.207.0/24 maxlen: 24
185.148.77.0/24 maxlen: 24
185.148.76.0/24 maxlen: 24
185.148.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:33:30:de:f2:04:2a:93:14:9e:29:6a:ff:7d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Jan 2 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c3bc967541884993d174c921277dc9b8da0260a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:b8:25:39:cb:9a:0c:60:3a:90:56:d6:0d:
a5:ce:51:49:df:5d:4f:9f:58:4e:7c:bd:30:d2:01:
15:81:dd:37:f4:45:3e:f6:08:2a:c1:f4:e6:71:c9:
4b:2b:7c:9b:36:fa:3d:d6:92:ed:f6:5b:a6:00:22:
53:f1:f1:d3:6c:d2:36:99:25:3c:44:58:3f:91:af:
9d:b0:4e:ef:6b:5c:14:15:a6:c6:63:52:83:57:9b:
2e:57:32:40:a4:f7:4b:80:c8:94:ad:e8:49:28:a0:
5f:1a:10:a6:73:d4:bd:88:68:63:01:10:ed:43:75:
2b:b7:0c:cd:58:b8:fd:4f:ce:f9:03:85:69:36:94:
03:7c:ac:e1:79:76:3d:f9:7b:2e:82:84:25:9a:dd:
00:a9:95:c1:28:39:a9:55:a7:5d:25:d2:2a:09:02:
7f:27:30:6a:18:35:39:1c:00:a0:25:c2:86:b1:6e:
dc:61:50:cf:b7:f8:53:d8:d6:08:bb:82:a8:70:34:
c7:c5:83:c9:ea:c5:ce:f8:b7:9c:f2:52:24:fe:2a:
d9:d4:62:be:9a:f7:34:1f:8a:37:31:be:eb:a7:36:
b2:aa:e2:7b:4c:5b:23:b1:42:fa:6c:66:d2:d9:5e:
df:55:25:aa:07:e9:d2:af:d2:6f:1d:65:ab:06:16:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:C9:67:54:18:84:99:3D:17:4C:92:12:77:DC:9B:8D:A0:26:0A
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/LDvJZ1QYhJk9F0ySEnfcm42gJgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.205.0-46.16.207.255
185.148.76.0/23
185.148.79.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ef:77:12:43:77:cc:4f:15:f4:90:88:66:ee:a2:2a:f8:98:
6d:69:8c:33:be:0f:95:9d:3f:f2:30:59:58:05:d1:48:14:ea:
eb:6a:41:f9:e3:1a:eb:a7:f9:41:98:b7:a1:d3:74:a3:0a:96:
a3:34:ee:55:a2:9b:be:1d:b6:f7:44:42:e7:e2:93:52:b8:a8:
c3:95:94:81:a5:5d:d2:4d:d0:d7:e8:1f:6a:b0:7d:98:0a:87:
59:5a:83:b7:af:dd:7f:a1:ab:71:8d:36:8a:c2:a1:80:8a:53:
7a:02:69:1a:7d:8a:78:45:4b:99:50:8f:3c:06:f0:ee:d0:8e:
33:1f:be:e4:f2:b7:71:02:da:90:62:40:13:d3:da:c7:0e:30:
98:73:03:74:e5:a9:e1:21:c0:df:4c:b1:87:19:28:b3:ea:56:
06:47:90:78:ff:bc:97:56:ac:04:41:08:37:94:62:40:95:9e:
3f:f9:e9:68:8c:ce:7b:2a:62:9c:e1:22:f5:32:ae:6a:ec:13:
30:36:67:36:d5:23:6f:33:b4:3d:ae:45:ee:e2:80:6d:5a:0b:
2a:f0:66:cb:f5:8c:fc:62:20:89:f0:04:5a:13:e2:e2:1d:de:
96:87:b2:c4:96:9b:81:d0:71:03:2d:ea:4e:cd:3a:29:52:32:
e6:89:c8:cd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVxFTMw3vIEKpMUnilq/33PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYTNkYTZkMGZhZmQyN2QwMWI3NDcwM2JiMzlkOGMxMTVl
ODY0MTIwHhcNMjMwMTAyMDYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzNiYzk2NzU0MTg4NDk5M2QxNzRjOTIxMjc3ZGM5YjhkYTAyNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+O4JTnLmgxgOpBW1g2lzlFJ311P
n1hOfL0w0gEVgd039EU+9ggqwfTmcclLK3ybNvo91pLt9lumACJT8fHTbNI2mSU8
RFg/ka+dsE7va1wUFabGY1KDV5suVzJApPdLgMiUrehJKKBfGhCmc9S9iGhjARDt
Q3UrtwzNWLj9T875A4VpNpQDfKzheXY9+XsugoQlmt0AqZXBKDmpVaddJdIqCQJ/
JzBqGDU5HACgJcKGsW7cYVDPt/hT2NYIu4KocDTHxYPJ6sXO+Lec8lIk/irZ1GK+
mvc0H4o3Mb7rpzayquJ7TFsjsUL6bGbS2V7fVSWqB+nSr9JvHWWrBha05QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCw7yWdUGISZPRdMkhJ33JuNoCYKMB8GA1UdIwQY
MBaAFDGj2m0Pr9J9AbdHA7s52MEV6GQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYt
NmNkNGM5ODBhNTIzLzEvTER2SloxUVloSms5RjB5U0VuZmNtNDJnSmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yMDI5MDAtM2Q3Mi00MDViLTllZjYtNmNkNGM5ODBhNTIz
LzEvTWFQYWJRLXYwbjBCdDBjRHV6bll3UlhvWkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAuEM0D
BAQuEMADBAG5lEwDBAC5lE8wDQYJKoZIhvcNAQELBQADggEBAIjvdxJDd8xPFfSQ
iGbuoir4mG1pjDO+D5WdP/IwWVgF0UgU6utqQfnjGuun+UGYt6HTdKMKlqM07lWi
m74dtvdEQufik1K4qMOVlIGlXdJN0NfoH2qwfZgKh1lag7ev3X+hq3GNNorCoYCK
U3oCaRp9inhFS5lQjzwG8O7QjjMfvuTyt3EC2pBiQBPT2scOMJhzA3TlqeEhwN9M
sYcZKLPqVgZHkHj/vJdWrARBCDeUYkCVnj/56WiMznsqYpzhIvUyrmrsEzA2ZzbV
I28ztD2uRe7igG1aCyrwZsv1jPxiIInwBFoT4uId3paHssSWm4HQcQMt6k7NOilS
MuaJyM0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:59 2024 by rpki-client on console-ams.rpki-client.org