Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/s2aCO8Nv7b-oB6K0OebaOxO8Be4.roa
File: s2aCO8Nv7b-oB6K0OebaOxO8Be4.roa (raw, json)
Hash identifier: oQWybKgpmVmTWKDFPVuuz9oXq5qcPlwfsankLvDX/tg=
Subject key identifier: B3:66:82:3B:C3:6F:ED:BF:A8:07:A2:B4:39:E6:DA:3B:13:BC:05:EE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0185F2D3732B3562E3CA506A4097DACB991E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/s2aCO8Nv7b-oB6K0OebaOxO8Be4.roa
Signing time: Fri 27 Jan 2023 10:43:41 +0000
ROA not before: Fri 27 Jan 2023 10:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/21 maxlen: 21
46.34.32.0/19 maxlen: 19
46.34.32.0/20 maxlen: 20
46.34.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 10:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d3:73:2b:35:62:e3:ca:50:6a:40:97:da:cb:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 27 10:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b366823bc36fedbfa807a2b439e6da3b13bc05ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:a3:41:0b:4e:19:32:ef:d8:f2:ad:ac:07:
2f:b7:fe:a2:9f:47:14:46:7d:96:a6:40:ba:8c:15:
ce:f5:0a:07:45:31:32:bd:a8:1a:cc:1c:40:94:3d:
89:e4:93:16:6f:0e:64:2f:f6:c3:aa:91:58:09:00:
44:e8:da:2c:2d:9e:51:ea:d1:59:ee:f0:de:b5:cd:
b9:e6:79:9c:3a:a4:a2:42:10:ac:94:f2:06:21:35:
2a:fe:4f:c7:f2:00:e7:73:b3:69:d4:54:35:34:fc:
0f:43:1f:fe:f3:68:f3:53:89:3a:65:0c:c6:d4:77:
af:3e:dd:a6:46:f4:dc:33:40:9a:50:2a:a3:25:bb:
c2:16:67:dc:7a:29:1b:e0:be:4a:5a:5e:c5:b0:a8:
f7:a0:72:3b:e0:66:2f:16:f0:41:92:60:dc:37:f3:
67:aa:f2:f2:9f:b6:3f:fa:11:fa:fc:0c:ce:f9:20:
0e:5f:f1:0b:db:47:b7:e3:21:27:f9:e7:a8:29:4b:
d9:b7:da:1c:e6:a0:e0:5a:c6:72:49:cf:5e:48:d2:
7a:73:d2:67:8f:c2:e7:f5:28:de:59:10:d0:42:f6:
94:c4:a3:c4:7c:29:77:0c:b8:8b:09:72:5c:26:ac:
b7:44:14:6e:0a:bc:c2:24:43:0d:90:5f:2d:cb:13:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:66:82:3B:C3:6F:ED:BF:A8:07:A2:B4:39:E6:DA:3B:13:BC:05:EE
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/s2aCO8Nv7b-oB6K0OebaOxO8Be4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
12:ac:14:ca:9a:a6:2a:50:35:a1:f5:9f:d6:e2:a1:54:56:3b:
62:f6:1f:06:13:6d:e7:a5:70:04:70:29:85:94:29:21:71:a5:
28:10:d0:c3:a8:ea:22:df:b8:47:b3:f1:ad:09:98:9c:d7:f7:
6e:ab:ea:33:b4:1f:88:7b:d4:23:15:31:5e:fe:07:14:6d:9e:
b7:87:79:b4:f1:69:6e:35:d0:35:3a:26:73:20:be:f3:53:77:
e4:a6:e0:98:05:cc:a9:0f:b0:01:52:ef:bc:86:12:d3:e1:ca:
88:5e:06:55:1e:37:5a:9c:27:2d:be:9e:79:8c:43:d8:23:39:
f2:fd:0d:fd:9a:e2:2f:1e:82:74:aa:05:dc:6c:95:c7:ef:46:
be:de:a1:51:fd:36:a0:11:ab:40:6c:a5:9d:88:d5:72:d5:6b:
73:c1:bb:d8:ef:4e:6a:5f:84:bb:6c:06:95:eb:f8:df:72:00:
68:5b:fd:d3:05:78:d2:d5:9e:3f:d9:10:36:9f:a3:c6:d5:d7:
2c:80:1a:8a:77:1b:11:b6:13:e8:f6:19:dc:f0:23:3a:43:3d:
5b:35:de:55:d5:49:a4:71:c5:20:b2:34:ec:33:4c:6d:35:fb:
a0:87:75:63:fd:bd:cc:2f:7e:e6:05:7e:06:1c:73:38:2d:27:
7d:a5:6e:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXy03MrNWLjylBqQJfay5keMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMTI3MTA0MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzY2ODIzYmMzNmZlZGJmYTgwN2EyYjQzOWU2ZGEzYjEzYmMwNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaujQQtOGTLv2PKtrAcvt/6in0cU
Rn2WpkC6jBXO9QoHRTEyvagazBxAlD2J5JMWbw5kL/bDqpFYCQBE6NosLZ5R6tFZ
7vDetc255nmcOqSiQhCslPIGITUq/k/H8gDnc7Np1FQ1NPwPQx/+82jzU4k6ZQzG
1HevPt2mRvTcM0CaUCqjJbvCFmfceikb4L5KWl7FsKj3oHI74GYvFvBBkmDcN/Nn
qvLyn7Y/+hH6/AzO+SAOX/EL20e34yEn+eeoKUvZt9oc5qDgWsZySc9eSNJ6c9Jn
j8Ln9SjeWRDQQvaUxKPEfCl3DLiLCXJcJqy3RBRuCrzCJEMNkF8tyxNokQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNmgjvDb+2/qAeitDnm2jsTvAXuMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvczJhQ084TnY3Yi1vQjZLME9lYmFPeE84QmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiIgMA0G
CSqGSIb3DQEBCwUAA4IBAQASrBTKmqYqUDWh9Z/W4qFUVjti9h8GE23npXAEcCmF
lCkhcaUoENDDqOoi37hHs/GtCZic1/duq+oztB+Ie9QjFTFe/gcUbZ63h3m08Wlu
NdA1OiZzIL7zU3fkpuCYBcypD7ABUu+8hhLT4cqIXgZVHjdanCctvp55jEPYIzny
/Q39muIvHoJ0qgXcbJXH70a+3qFR/TagEatAbKWdiNVy1WtzwbvY705qX4S7bAaV
6/jfcgBoW/3TBXjS1Z4/2RA2n6PG1dcsgBqKdxsRthPo9hnc8CM6Qz1bNd5V1Umk
ccUgsjTsM0xtNfugh3Vj/b3ML37mBX4GHHM4LSd9pW7Q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org