Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4Cz4If7QzEpvu5uJ4wJxqSJJo1Y.roa
File: 4Cz4If7QzEpvu5uJ4wJxqSJJo1Y.roa (raw, json)
Hash identifier: r0y4fkGVLa/4+ziSv9MrblRcQ5pUz6y5ptnBlGqphmo=
Subject key identifier: E0:2C:F8:21:FE:D0:CC:4A:6F:BB:9B:89:E3:02:71:A9:22:49:A3:56
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA5499A909B9F7A31CED3884E92F21
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4Cz4If7QzEpvu5uJ4wJxqSJJo1Y.roa
Signing time: Mon 02 Jan 2023 13:44:52 +0000
ROA not before: Mon 02 Jan 2023 13:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 109.248.59.0/24 maxlen: 24
46.8.21.0/24 maxlen: 24
46.8.29.0/24 maxlen: 24
95.182.120.0/22 maxlen: 24
46.8.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:54:99:a9:09:b9:f7:a3:1c:ed:38:84:e9:2f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e02cf821fed0cc4a6fbb9b89e30271a92249a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:99:0a:08:b1:e5:97:3d:1d:e4:c1:a7:cd:
6d:7f:5e:fd:7e:db:2e:64:d2:0b:ad:1b:ea:80:45:
de:8c:7c:a8:78:04:a7:41:c1:8b:d5:bd:c8:c2:d4:
e8:ed:d5:5d:6e:35:26:f0:2c:75:28:56:9a:44:fd:
02:f1:ec:a2:f6:b4:af:6b:52:d8:cc:c1:af:4f:88:
6f:bd:96:eb:0b:f9:94:f4:16:3f:fd:f3:9d:da:b3:
2c:69:6b:15:77:0d:d1:50:0b:78:10:8e:da:45:f1:
c2:f3:12:e8:c9:26:65:b8:db:99:16:2f:e7:0c:21:
53:23:a3:64:ac:19:cb:31:e2:78:f5:53:91:fb:1f:
24:8e:e9:0f:9e:47:3e:b3:44:61:ae:51:33:5a:c3:
5a:16:63:39:66:b1:09:66:07:b3:24:7b:da:f2:8c:
5d:9b:3b:cc:43:3b:19:4c:5c:85:30:c0:cf:78:d7:
85:f5:4f:12:33:44:b7:55:55:a6:64:73:dd:08:2c:
de:d3:a6:2f:f7:e5:a7:97:80:52:ca:2c:ca:5a:df:
58:a1:34:4d:79:d4:0f:94:b3:6b:61:10:a1:f4:72:
ef:4b:06:7b:b9:27:8a:2c:b6:dc:43:0d:38:b3:3c:
a0:db:08:c4:a6:20:e4:f9:33:e3:b9:f1:f6:e7:bd:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:F8:21:FE:D0:CC:4A:6F:BB:9B:89:E3:02:71:A9:22:49:A3:56
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/4Cz4If7QzEpvu5uJ4wJxqSJJo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.21.0/24
46.8.29.0/24
46.8.158.0/24
95.182.120.0/22
109.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:4d:6a:a9:99:04:64:98:59:73:88:f6:94:a5:b0:de:7a:8a:
bd:a2:5e:bd:fe:13:e1:c0:4a:b0:81:0b:39:75:ab:6e:6f:ee:
af:9a:ca:29:90:4c:15:a2:e1:b2:b6:39:d7:a4:c2:bb:16:f3:
bb:3c:5c:81:38:e4:73:f7:4c:ae:3f:4d:88:f7:89:05:44:58:
e1:c8:25:ed:df:30:81:48:01:d7:6a:ed:82:7b:ae:b4:37:76:
c1:bc:1e:b1:2b:5d:57:7d:d6:41:6e:73:11:55:91:96:de:23:
1d:62:c9:db:a4:8f:12:5f:b4:25:58:18:be:50:57:9d:23:88:
20:2a:3d:60:b3:0f:2d:e9:4c:58:84:46:44:27:17:55:2b:53:
8d:cd:34:2c:01:48:62:45:a6:65:0c:6c:9f:50:29:15:6c:6e:
e7:02:93:a5:61:6f:e5:39:73:d3:01:6b:34:af:71:2a:9d:f7:
cc:13:2f:55:c8:f7:25:e2:ce:f3:4e:aa:2f:2e:d7:11:2f:df:
fc:2a:5e:68:24:ea:4d:14:4c:8a:55:b4:11:55:4f:2c:b4:a8:
b5:14:64:cc:cc:2c:18:0e:e4:92:17:fa:7c:90:70:e4:dc:2c:
10:97:3e:5f:2f:4a:82:0a:29:25:ce:49:7f:ee:67:6d:ed:f5:
d4:c0:87:53
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVyulSZqQm596Mc7TiE6S8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjMwMTAyMTM0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDJjZjgyMWZlZDBjYzRhNmZiYjliODllMzAyNzFhOTIyNDlhMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/GZCgix5Zc9HeTBp81tf179ftsu
ZNILrRvqgEXejHyoeASnQcGL1b3IwtTo7dVdbjUm8Cx1KFaaRP0C8eyi9rSva1LY
zMGvT4hvvZbrC/mU9BY//fOd2rMsaWsVdw3RUAt4EI7aRfHC8xLoySZluNuZFi/n
DCFTI6NkrBnLMeJ49VOR+x8kjukPnkc+s0RhrlEzWsNaFmM5ZrEJZgezJHva8oxd
mzvMQzsZTFyFMMDPeNeF9U8SM0S3VVWmZHPdCCze06Yv9+Wnl4BSyizKWt9YoTRN
edQPlLNrYRCh9HLvSwZ7uSeKLLbcQw04szyg2wjEpiDk+TPjufH2571k4wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOAs+CH+0MxKb7ubieMCcakiSaNWMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvNEN6NElmN1F6RXB2dTV1SjR3SnhxU0pKbzFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALggVAwQA
LggdAwQALgieAwQCX7Z4AwQAbfg7MA0GCSqGSIb3DQEBCwUAA4IBAQCzTWqpmQRk
mFlziPaUpbDeeoq9ol69/hPhwEqwgQs5datub+6vmsopkEwVouGytjnXpMK7FvO7
PFyBOORz90yuP02I94kFRFjhyCXt3zCBSAHXau2Ce660N3bBvB6xK11XfdZBbnMR
VZGW3iMdYsnbpI8SX7QlWBi+UFedI4ggKj1gsw8t6UxYhEZEJxdVK1ONzTQsAUhi
RaZlDGyfUCkVbG7nApOlYW/lOXPTAWs0r3EqnffMEy9VyPcl4s7zTqovLtcRL9/8
Kl5oJOpNFEyKVbQRVU8stKi1FGTMzCwYDuSSF/p8kHDk3CwQlz5fL0qCCiklzkl/
7mdt7fXUwIdT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:00 2024 by rpki-client on console-ams.rpki-client.org