Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/_3qGT6XntYAN5O4aC-9YYKvxA2A.roa
File: _3qGT6XntYAN5O4aC-9YYKvxA2A.roa (raw, json)
Hash identifier: 87LY+kkKZBzwRXOrPRaYVVP29RBWoPvkDtZMO0RjPyY=
Subject key identifier: FF:7A:86:4F:A5:E7:B5:80:0D:E4:EE:1A:0B:EF:58:60:AB:F1:03:60
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188BA2D7DB76D7B0A743D782E98EA047A58
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/_3qGT6XntYAN5O4aC-9YYKvxA2A.roa
Signing time: Wed 14 Jun 2023 13:52:03 +0000
ROA not before: Wed 14 Jun 2023 13:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/24 maxlen: 24
46.228.128.0/23 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/23 maxlen: 23
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 14 Jun 2023 14:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:2d:7d:b7:6d:7b:0a:74:3d:78:2e:98:ea:04:7a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 13:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff7a864fa5e7b5800de4ee1a0bef5860abf10360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:82:88:8b:1e:0b:48:41:2b:79:f4:44:95:
46:f7:b2:05:16:fd:d9:4b:7b:21:7c:30:66:81:e3:
02:28:41:b3:76:78:27:c6:13:13:4a:17:4a:83:3b:
68:68:33:bb:22:7e:60:ef:49:15:03:9c:32:82:17:
a0:41:ec:3c:32:d8:79:eb:44:40:20:a8:09:39:53:
3c:32:47:a2:19:9c:30:0e:cf:25:7b:9b:3d:43:14:
5f:25:91:ce:23:21:d0:5f:2d:29:f6:56:ea:c9:5d:
b6:09:15:32:5a:41:74:d0:05:f4:13:46:f9:04:ee:
cc:00:3a:06:9c:9e:81:78:d9:e1:de:00:67:30:b5:
b2:85:30:9e:34:32:dc:c2:00:c4:57:c0:e7:e1:d9:
55:50:e7:28:c7:32:f5:67:7b:11:ad:ce:fc:51:89:
8e:b1:7d:54:81:90:18:6c:fd:51:78:0e:66:81:8c:
4f:fd:b6:dc:47:69:64:d0:2c:2f:04:65:ef:bd:21:
68:5d:c1:a5:41:76:f6:8e:b9:20:db:be:af:1c:2f:
a1:c0:a3:41:90:28:2a:2e:64:7a:cc:e5:f8:ec:94:
ac:92:bf:96:d6:7a:0e:37:a2:37:0d:b0:8e:03:74:
28:64:99:5d:47:b6:e8:2e:05:c8:9b:d9:30:10:e8:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:86:4F:A5:E7:B5:80:0D:E4:EE:1A:0B:EF:58:60:AB:F1:03:60
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/_3qGT6XntYAN5O4aC-9YYKvxA2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
46:a3:77:30:20:95:45:dc:42:60:86:80:c3:0f:7b:7f:d0:f4:
ff:73:9b:dd:d7:5c:b9:89:4d:0f:07:41:65:dd:5a:5d:8e:9a:
6d:0f:97:f3:10:28:72:2c:9a:ff:79:08:7f:6f:44:4d:70:2e:
7b:2d:7d:ba:d3:13:a7:6e:7b:f9:88:f7:aa:15:8c:e2:52:f9:
e5:c6:34:55:d7:e6:c5:7e:7f:eb:af:41:63:48:22:1e:ed:5f:
fe:a6:ad:42:6e:fa:51:c4:b2:79:23:f7:c5:35:2d:a8:ce:3f:
4d:3c:ee:4c:10:75:dc:81:29:3b:99:31:f9:eb:ae:1a:a3:1a:
73:6c:c0:fd:fa:cf:5e:97:f4:c2:e6:2b:6a:97:56:c6:ae:d2:
f4:13:dc:a9:6e:8e:60:d9:81:ff:49:7b:7d:eb:43:10:8d:43:
23:63:25:cf:51:3a:69:5a:d4:85:10:1b:16:1d:0d:5b:6c:76:
e1:11:fb:43:13:76:a2:b3:46:33:24:f5:e3:2a:90:17:01:d7:
d8:9a:21:cd:5c:07:e8:85:eb:40:86:8e:cc:18:bc:c7:c4:0e:
32:2d:2a:8e:56:25:f9:61:0e:c7:b3:ee:2c:dd:f1:64:e3:b1:
51:04:d4:25:7a:5f:79:37:bb:34:7a:65:2c:69:2c:b2:ec:99:
d6:e1:3d:e5
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYi6LX23bXsKdD14LpjqBHpYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjMwNjE0MTM1MjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjdhODY0ZmE1ZTdiNTgwMGRlNGVlMWEwYmVmNTg2MGFiZjEwMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFaCiIseC0hBK3n0RJVG97IFFv3Z
S3shfDBmgeMCKEGzdngnxhMTShdKgztoaDO7In5g70kVA5wyghegQew8Mth560RA
IKgJOVM8MkeiGZwwDs8le5s9QxRfJZHOIyHQXy0p9lbqyV22CRUyWkF00AX0E0b5
BO7MADoGnJ6BeNnh3gBnMLWyhTCeNDLcwgDEV8Dn4dlVUOcoxzL1Z3sRrc78UYmO
sX1UgZAYbP1ReA5mgYxP/bbcR2lk0CwvBGXvvSFoXcGlQXb2jrkg276vHC+hwKNB
kCgqLmR6zOX47JSskr+W1noON6I3DbCOA3QoZJldR7boLgXIm9kwEOhpewIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFP96hk+l57WADeTuGgvvWGCr8QNgMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEvXzNxR1Q2WG50WUFONU80YUMtOVlZS3Z4QTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQDLuSAAwQA
LuSNAwQALuSPAwQBwW5sMA4EAgACMAgDBgAqA3gACjANBgkqhkiG9w0BAQsFAAOC
AQEARqN3MCCVRdxCYIaAww97f9D0/3Ob3ddcuYlNDwdBZd1aXY6abQ+X8xAociya
/3kIf29ETXAuey19utMTp257+Yj3qhWM4lL55cY0VdfmxX5/669BY0giHu1f/qat
Qm76UcSyeSP3xTUtqM4/TTzuTBB13IEpO5kx+euuGqMac2zA/frPXpf0wuYrapdW
xq7S9BPcqW6OYNmB/0l7fetDEI1DI2Mlz1E6aVrUhRAbFh0NW2x24RH7QxN2orNG
MyT14yqQFwHX2JohzVwH6IXrQIaOzBi8x8QOMi0qjlYl+WEOx7PuLN3xZOOxUQTU
JXpfeTe7NHplLGkssuyZ1uE95Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org