Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VaDWvIvzxg46z8MwbBZQS2PLI0I.roa
File: VaDWvIvzxg46z8MwbBZQS2PLI0I.roa (raw, json)
Hash identifier: 77LtFZejd2m2Iaa3OSM0IgdNATYt7e8a/u4NcVntL78=
Subject key identifier: 55:A0:D6:BC:8B:F3:C6:0E:3A:CF:C3:30:6C:16:50:4B:63:CB:23:42
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188B9C52098147E15DFFA2DFFE74180E84C
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VaDWvIvzxg46z8MwbBZQS2PLI0I.roa
Signing time: Wed 14 Jun 2023 11:58:03 +0000
ROA not before: Wed 14 Jun 2023 11:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.228.131.0/24 maxlen: 24
46.228.136.0/23 maxlen: 24
46.228.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 12:20:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c5:20:98:14:7e:15:df:fa:2d:ff:e7:41:80:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 11:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55a0d6bc8bf3c60e3acfc3306c16504b63cb2342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:7d:a7:1a:fd:35:44:6b:99:81:86:03:7e:
79:22:3f:8c:24:0e:93:1b:97:5e:73:76:16:9e:41:
4b:e0:f3:c7:01:b0:8a:80:8f:8d:72:0e:03:51:cb:
2d:aa:f7:a5:a2:df:17:c5:1b:57:0d:4f:98:91:cd:
fd:86:3d:af:e9:af:1a:58:6c:a3:25:d3:f7:8d:92:
71:67:6e:2c:24:33:20:40:77:e4:89:b9:11:b1:51:
c0:f5:cc:04:60:20:38:99:8d:53:e8:12:90:06:18:
63:96:08:1b:f4:b3:88:ae:53:79:7c:bc:66:6b:17:
cc:81:88:57:1b:ea:17:b1:31:25:19:42:8b:94:2a:
8a:87:8b:7a:b0:1d:ca:d6:c2:c0:0c:c3:ef:f3:4f:
8f:e9:fe:6b:1b:42:bb:a1:25:31:13:77:1b:83:4d:
31:b1:f9:11:48:18:52:ba:3e:b9:22:22:0e:a4:99:
f6:e8:51:15:10:89:e5:4b:9e:41:cc:96:18:5f:20:
e1:fc:a5:41:db:01:12:2a:c3:bb:6d:93:8b:a5:3c:
29:5b:d3:e3:73:3d:da:e8:13:9d:89:d5:38:64:f5:
10:e2:95:21:e4:f5:84:2b:d9:12:b1:8f:16:6e:13:
09:1e:a3:ff:56:56:d8:e5:df:4e:3f:81:e1:a4:43:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:D6:BC:8B:F3:C6:0E:3A:CF:C3:30:6C:16:50:4B:63:CB:23:42
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/VaDWvIvzxg46z8MwbBZQS2PLI0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.131.0/24
46.228.135.0-46.228.137.255
Signature Algorithm: sha256WithRSAEncryption
45:98:3c:4e:95:6e:f7:6c:92:5c:f2:48:29:76:26:2d:25:fe:
f2:ed:18:12:f1:3a:db:33:37:f4:ee:91:49:4c:0c:a2:9d:f6:
fd:6e:df:93:00:f6:24:23:da:d6:b2:bd:e5:64:30:f1:52:5a:
50:00:bc:5a:be:fa:dd:f8:4b:ce:0d:d4:8a:7d:0d:37:9e:35:
c1:24:5a:ee:59:5c:2a:87:ef:e0:1f:95:c3:e9:1b:25:65:3c:
9b:ba:a7:91:ce:74:72:9b:25:12:c1:fe:7c:c5:1b:6c:1e:69:
cb:e6:84:83:2b:c3:82:b6:82:78:d2:90:4f:6b:53:a2:5f:ef:
c8:09:0e:7e:79:2b:6a:f0:44:81:cc:ea:36:95:ab:80:50:8f:
ba:b0:07:02:0a:98:56:69:7f:e5:d8:8f:12:32:44:77:a2:0e:
1a:0e:10:b0:5b:69:97:28:c7:07:9d:bb:e3:1a:6b:da:47:8a:
be:e6:58:8d:0e:13:9d:19:2d:cb:9c:4d:be:e7:b9:34:e3:0e:
2a:8d:1f:b0:35:0d:7e:56:5f:9f:98:0c:83:0d:3f:23:52:6a:
2e:97:a0:5a:5a:8f:33:65:bf:69:b0:1f:8a:b6:4e:3b:65:80:
68:01:1d:e9:16:88:f7:c5:f8:79:ed:30:df:ab:c6:a2:44:4c:
28:04:e0:bf
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYi5xSCYFH4V3/ot/+dBgOhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjMwNjE0MTE1ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWEwZDZiYzhiZjNjNjBlM2FjZmMzMzA2YzE2NTA0YjYzY2IyMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl859pxr9NURrmYGGA355Ij+MJA6T
G5dec3YWnkFL4PPHAbCKgI+Ncg4DUcstqvelot8XxRtXDU+Ykc39hj2v6a8aWGyj
JdP3jZJxZ24sJDMgQHfkibkRsVHA9cwEYCA4mY1T6BKQBhhjlggb9LOIrlN5fLxm
axfMgYhXG+oXsTElGUKLlCqKh4t6sB3K1sLADMPv80+P6f5rG0K7oSUxE3cbg00x
sfkRSBhSuj65IiIOpJn26FEVEInlS55BzJYYXyDh/KVB2wESKsO7bZOLpTwpW9Pj
cz3a6BOdidU4ZPUQ4pUh5PWEK9kSsY8WbhMJHqP/VlbY5d9OP4HhpEMFHQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFWg1ryL88YOOs/DMGwWUEtjyyNCMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvVmFEV3ZJdnp4ZzQ2ejhNd2JCWlFTMlBMSTBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALuSDMAwD
BAAu5IcDBAEu5IgwDQYJKoZIhvcNAQELBQADggEBAEWYPE6VbvdsklzySCl2Ji0l
/vLtGBLxOtszN/TukUlMDKKd9v1u35MA9iQj2tayveVkMPFSWlAAvFq++t34S84N
1Ip9DTeeNcEkWu5ZXCqH7+AflcPpGyVlPJu6p5HOdHKbJRLB/nzFG2weacvmhIMr
w4K2gnjSkE9rU6Jf78gJDn55K2rwRIHM6jaVq4BQj7qwBwIKmFZpf+XYjxIyRHei
DhoOELBbaZcoxwedu+Maa9pHir7mWI0OE50ZLcucTb7nuTTjDiqNH7A1DX5WX5+Y
DIMNPyNSai6XoFpajzNlv2mwH4q2TjtlgGgBHekWiPfF+HntMN+rxqJETCgE4L8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org