Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PhpWOICN-jMd_tea0cxwcvMB49Y.roa
File: PhpWOICN-jMd_tea0cxwcvMB49Y.roa (raw, json)
Hash identifier: KerVtxIQ1La8sdqwLZ7rba8o8+hpvSi1by0o49e7LXM=
Subject key identifier: 3E:1A:56:38:80:8D:FA:33:1D:FE:D7:9A:D1:CC:70:72:F3:01:E3:D6
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE65141A41F5161185A307034E1F083
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PhpWOICN-jMd_tea0cxwcvMB49Y.roa
Signing time: Sun 01 Jan 2023 10:35:11 +0000
ROA not before: Sun 01 Jan 2023 10:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 95.43.198.0/24 maxlen: 24
46.10.162.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:51:41:a4:1f:51:61:18:5a:30:70:34:e1:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e1a5638808dfa331dfed79ad1cc7072f301e3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:6e:e4:8e:2a:6a:9a:6d:9b:c3:50:7e:e9:
21:7f:aa:01:df:bc:b9:1e:2a:47:17:06:c6:56:76:
f5:66:08:68:9c:c3:f7:3f:bf:52:19:c3:2a:11:a3:
68:7a:2f:ed:72:c1:2d:a8:f5:65:d1:9b:02:79:62:
a9:cb:94:7d:76:98:1b:c1:32:58:29:c2:d5:e0:6c:
9c:f4:22:c1:59:3f:c4:cb:8c:92:79:7a:ca:cd:15:
9d:d8:cd:09:a8:c9:70:4b:dd:f5:d7:df:18:bf:2d:
9c:0c:3d:35:e5:55:0b:5e:b1:c4:08:3d:dc:1a:12:
6e:53:9a:a6:2e:eb:1e:16:ed:51:3e:9d:e9:ca:26:
32:0c:cc:8e:37:88:f7:ae:3d:9c:e7:f6:23:c6:05:
8f:f4:96:b1:60:d5:59:ef:27:5e:67:be:1a:7e:42:
ee:d4:3e:14:dd:36:89:59:0d:07:ba:d2:16:ca:16:
ab:13:3b:cf:8e:d7:79:59:24:58:6a:4c:85:61:83:
bb:64:d2:69:02:62:a8:1b:a3:35:a5:8e:30:58:57:
ca:d1:b1:1b:3d:4f:13:e5:11:9c:83:09:f8:2e:c5:
b9:49:69:47:3f:df:bd:1e:3f:d9:63:96:69:9f:3a:
0b:eb:51:6d:f4:ae:0b:49:f2:28:49:3d:fa:ba:75:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:56:38:80:8D:FA:33:1D:FE:D7:9A:D1:CC:70:72:F3:01:E3:D6
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/PhpWOICN-jMd_tea0cxwcvMB49Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.10.162.0/23
95.43.198.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8d:3b:ce:34:e5:8a:a0:62:a8:a9:48:85:77:6a:38:3f:be:
d4:ba:6b:f7:3a:bc:59:26:12:aa:5e:2b:8c:86:79:11:7c:0c:
1d:b7:20:aa:26:8e:fe:4e:f3:8c:1e:05:96:4c:bd:7b:08:dc:
ca:b5:74:11:25:7a:a1:7e:5c:84:60:c7:46:86:d9:47:9f:91:
37:19:16:51:90:e1:ee:19:d1:97:46:ca:e8:a8:ae:48:37:df:
c4:e3:c1:70:ed:d7:d5:f6:f5:d7:b0:3b:59:c6:8b:74:6c:46:
08:8f:92:d9:88:5e:71:47:b5:77:bd:84:85:88:cd:b8:6d:23:
10:50:cd:45:37:3b:e6:34:62:c7:f6:43:60:07:1d:1e:b6:97:
70:60:d8:40:f7:d7:30:f4:69:f0:fb:55:10:4c:2b:e6:9a:8e:
d8:f7:71:e9:52:bc:22:14:f9:2f:74:e3:ec:98:b8:3a:2f:71:
ea:d4:79:55:d3:a5:70:bb:fa:2d:57:57:1c:ae:c2:03:5a:8a:
a6:32:e4:39:0f:52:91:8c:bb:89:01:32:27:5e:a3:43:08:ad:
78:f0:33:1b:fd:c7:d6:13:27:51:76:6f:d4:41:ff:84:13:06:
37:64:56:50:60:b6:f7:cf:42:56:5c:40:b9:d8:3e:ab:fa:6f:
1b:b2:12:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVs5lFBpB9RYRhaMHA04fCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjMwMTAxMTAzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTFhNTYzODgwOGRmYTMzMWRmZWQ3OWFkMWNjNzA3MmYzMDFlM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgehu5I4qapptm8NQfukhf6oB37y5
HipHFwbGVnb1ZghonMP3P79SGcMqEaNoei/tcsEtqPVl0ZsCeWKpy5R9dpgbwTJY
KcLV4Gyc9CLBWT/Ey4ySeXrKzRWd2M0JqMlwS931198Yvy2cDD015VULXrHECD3c
GhJuU5qmLuseFu1RPp3pyiYyDMyON4j3rj2c5/YjxgWP9JaxYNVZ7ydeZ74afkLu
1D4U3TaJWQ0HutIWyharEzvPjtd5WSRYakyFYYO7ZNJpAmKoG6M1pY4wWFfK0bEb
PU8T5RGcgwn4LsW5SWlHP9+9Hj/ZY5ZpnzoL61Ft9K4LSfIoST36unXhxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD4aVjiAjfozHf7XmtHMcHLzAePWMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvUGhwV09JQ04tak1kX3RlYTBjeHdjdk1CNDlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLgqiAwQA
XyvGMA0GCSqGSIb3DQEBCwUAA4IBAQAijTvONOWKoGKoqUiFd2o4P77Uumv3OrxZ
JhKqXiuMhnkRfAwdtyCqJo7+TvOMHgWWTL17CNzKtXQRJXqhflyEYMdGhtlHn5E3
GRZRkOHuGdGXRsroqK5IN9/E48Fw7dfV9vXXsDtZxot0bEYIj5LZiF5xR7V3vYSF
iM24bSMQUM1FNzvmNGLH9kNgBx0etpdwYNhA99cw9Gnw+1UQTCvmmo7Y93HpUrwi
FPkvdOPsmLg6L3Hq1HlV06Vwu/otV1ccrsIDWoqmMuQ5D1KRjLuJATInXqNDCK14
8DMb/cfWEydRdm/UQf+EEwY3ZFZQYLb3z0JWXEC52D6r+m8bshJY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org