Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bWYRHcUJve52_k1G5Yl-_u6hZfQ.roa
File: bWYRHcUJve52_k1G5Yl-_u6hZfQ.roa (raw, json)
Hash identifier: xCNXdCXlwihKdcYxbJi0Fz/z4JK019e8Ipzr6iw06pY=
Subject key identifier: 6D:66:11:1D:C5:09:BD:EE:76:FE:4D:46:E5:89:7E:FE:EE:A1:65:F4
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018722175726CCA2E9DEEE3C20B3FBA64B0C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bWYRHcUJve52_k1G5Yl-_u6hZfQ.roa
Signing time: Mon 27 Mar 2023 08:02:47 +0000
ROA not before: Mon 27 Mar 2023 08:02:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/23 maxlen: 23
46.34.40.0/23 maxlen: 23
46.34.51.0/24 maxlen: 24
46.34.47.0/24 maxlen: 24
46.34.53.0/24 maxlen: 24
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 28 Mar 2023 08:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:17:57:26:cc:a2:e9:de:ee:3c:20:b3:fb:a6:4b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 27 08:02:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d66111dc509bdee76fe4d46e5897efeeea165f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8d:b3:9f:2e:18:d6:69:71:f9:30:c6:e1:17:
d7:3f:15:4d:71:33:1b:2f:ea:c3:11:85:7a:0c:bf:
df:3a:9f:bb:08:41:4c:1b:93:3c:ad:9d:83:dc:8b:
a6:92:62:fa:d8:3a:24:34:74:bf:24:b1:a9:e0:ee:
83:0a:5d:c2:67:60:0e:93:fb:1e:86:bd:c9:5b:e2:
de:80:5b:cc:af:96:b1:de:88:e4:0e:1f:47:22:87:
a2:74:7e:95:ce:23:e7:20:91:1a:5e:c2:ab:71:54:
4d:6e:bd:1c:1c:0f:22:6c:f1:57:96:5f:bc:47:fb:
2f:1d:98:b2:1a:8e:bc:85:b7:60:6f:eb:f9:65:d6:
0f:22:00:c1:3e:1d:ef:94:b3:c3:55:76:81:2b:6c:
d3:a7:23:71:ff:08:49:98:5c:cc:52:98:c7:00:3a:
7f:64:ba:86:e9:ef:57:d4:12:60:bd:52:c1:d9:b0:
16:9f:8c:d2:3b:74:43:4b:b1:96:ff:92:1f:c1:0b:
b1:3b:ae:c3:a8:51:83:ab:2c:17:21:48:27:1b:44:
fc:f5:2b:2c:2d:0a:3a:c1:ed:ac:fc:33:61:68:5b:
ca:54:1f:1f:80:bd:0b:9a:83:7f:21:c6:fd:0f:4f:
7c:90:92:17:8d:12:a9:db:39:5d:a7:3b:d9:04:52:
7c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:11:1D:C5:09:BD:EE:76:FE:4D:46:E5:89:7E:FE:EE:A1:65:F4
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bWYRHcUJve52_k1G5Yl-_u6hZfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/23
46.34.47.0/24
46.34.51.0/24
46.34.53.0/24
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:c7:ca:ca:ad:1f:76:e8:8d:07:39:6a:b7:b1:06:5c:5b:76:
b4:c3:25:37:3e:76:6d:61:43:b0:fb:bf:f5:db:ce:33:5d:e1:
aa:bb:2c:ea:06:63:89:24:41:77:fa:75:75:c8:de:f4:27:e1:
ca:bc:0f:25:33:91:fb:05:de:1d:fe:ef:d8:4c:1b:1f:11:ad:
10:03:be:fc:f2:1b:61:ea:55:16:7b:22:56:e3:a2:99:42:d1:
73:f4:0b:a4:73:40:0c:d5:07:90:7e:3c:82:90:b7:7a:84:ef:
ef:9b:03:c3:60:f4:d2:eb:ce:61:60:e4:99:f7:57:81:f9:95:
99:c6:2a:e8:b1:3f:1c:55:96:67:56:df:df:5d:4d:d5:e1:5c:
52:86:9d:76:70:a9:f4:df:09:08:25:2b:85:9a:76:1c:5f:fa:
0f:1f:22:04:3a:4c:bd:d4:d6:8a:37:14:cf:89:a2:0e:c7:73:
d0:b1:8c:01:a0:9d:1d:34:c2:1d:16:85:7f:2d:5c:97:10:88:
36:a6:34:4a:ad:b0:d4:1f:dc:cd:c3:e8:0a:85:dc:01:eb:18:
76:4a:1d:47:41:d7:72:b8:2a:00:a0:fb:58:4c:50:c7:80:fa:
e1:f3:b2:3d:88:40:cd:a3:cd:4d:47:eb:d2:d0:e0:0d:f1:1e:
61:62:fb:ca
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYciF1cmzKLp3u48ILP7pksMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMzI3MDgwMjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDY2MTExZGM1MDliZGVlNzZmZTRkNDZlNTg5N2VmZWVlYTE2NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn42zny4Y1mlx+TDG4RfXPxVNcTMb
L+rDEYV6DL/fOp+7CEFMG5M8rZ2D3IumkmL62DokNHS/JLGp4O6DCl3CZ2AOk/se
hr3JW+LegFvMr5ax3ojkDh9HIoeidH6VziPnIJEaXsKrcVRNbr0cHA8ibPFXll+8
R/svHZiyGo68hbdgb+v5ZdYPIgDBPh3vlLPDVXaBK2zTpyNx/whJmFzMUpjHADp/
ZLqG6e9X1BJgvVLB2bAWn4zSO3RDS7GW/5IfwQuxO67DqFGDqywXIUgnG0T89Sss
LQo6we2s/DNhaFvKVB8fgL0LmoN/Icb9D098kJIXjRKp2zldpzvZBFJ8VwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFG1mER3FCb3udv5NRuWJfv7uoWX0MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvYldZUkhjVUp2ZTUyX2sxRzVZbC1fdTZoWmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAUuIiAD
BAEuIiQDBAEuIigDBAAuIi8DBAAuIjMDBAAuIjUDBAIuIjwwDQYJKoZIhvcNAQEL
BQADggEBAB3HysqtH3bojQc5arexBlxbdrTDJTc+dm1hQ7D7v/XbzjNd4aq7LOoG
Y4kkQXf6dXXI3vQn4cq8DyUzkfsF3h3+79hMGx8RrRADvvzyG2HqVRZ7IlbjoplC
0XP0C6RzQAzVB5B+PIKQt3qE7++bA8Ng9NLrzmFg5Jn3V4H5lZnGKuixPxxVlmdW
399dTdXhXFKGnXZwqfTfCQglK4Wadhxf+g8fIgQ6TL3U1oo3FM+Jog7Hc9CxjAGg
nR00wh0WhX8tXJcQiDamNEqtsNQf3M3D6AqF3AHrGHZKHUdB13K4KgCg+1hMUMeA
+uHzsj2IQM2jzU1H69LQ4A3xHmFi+8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org