Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JLyZtnFeDa6d-pqOl_6QP3rjVmY.roa
File: JLyZtnFeDa6d-pqOl_6QP3rjVmY.roa (raw, json)
Hash identifier: +xXMtCp9bxJC2mfhqtCPprNtWrYC5/bFcTPzzG1Tnl4=
Subject key identifier: 24:BC:99:B6:71:5E:0D:AE:9D:FA:9A:8E:97:FE:90:3F:7A:E3:56:66
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 0185A179FFB3EC72D30BCE01757280CBD072
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JLyZtnFeDa6d-pqOl_6QP3rjVmY.roa
Signing time: Wed 11 Jan 2023 15:36:45 +0000
ROA not before: Wed 11 Jan 2023 15:36:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 46.32.181.0/24 maxlen: 24
46.32.180.0/24 maxlen: 24
46.32.183.0/24 maxlen: 24
46.32.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 16:12:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:79:ff:b3:ec:72:d3:0b:ce:01:75:72:80:cb:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 11 15:36:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24bc99b6715e0dae9dfa9a8e97fe903f7ae35666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:e5:fa:04:84:e9:a4:d6:c4:25:88:58:86:
e5:5d:7e:77:95:3d:26:1d:06:44:a7:de:70:2d:a5:
7a:88:d9:0a:d5:17:a9:da:37:f2:60:27:c9:92:e2:
da:6b:44:e5:17:5d:41:7b:f8:3a:29:15:ee:4c:65:
a2:9b:2e:6f:c1:6c:44:e7:84:09:4c:f0:b1:86:a7:
7b:0e:4f:d7:a8:e3:8a:90:74:ad:1b:76:3b:55:ef:
f6:93:dc:e8:32:1b:68:6d:af:f2:77:f4:bd:b1:c6:
20:7f:76:23:55:cc:2c:99:02:fb:7d:9a:08:96:28:
1b:a5:e0:3d:cb:44:12:f4:aa:c3:18:d9:4a:03:42:
ef:bc:03:3e:ab:a6:2f:88:3b:22:cf:54:fa:72:44:
48:e6:2b:6b:81:f9:95:86:ce:e4:11:39:6a:76:97:
7d:91:6d:e6:a7:e6:e1:6f:0e:9d:be:55:e2:ff:48:
cf:a2:37:29:f7:73:c2:32:72:10:a6:ca:5d:d3:ce:
e5:ab:c4:10:c5:4b:46:03:c8:7b:fe:7a:54:ab:c0:
36:f1:b6:01:99:d6:2a:a8:45:80:42:87:a3:cb:77:
6e:76:74:ee:c2:a6:f7:73:cb:b8:83:c2:be:86:bb:
bc:64:93:c4:b8:a7:b7:9e:3a:62:44:b6:55:2f:6f:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:99:B6:71:5E:0D:AE:9D:FA:9A:8E:97:FE:90:3F:7A:E3:56:66
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/JLyZtnFeDa6d-pqOl_6QP3rjVmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.180.0/22
Signature Algorithm: sha256WithRSAEncryption
31:03:64:62:d8:c0:bb:9e:af:63:8a:87:cf:67:b3:6d:67:f0:
7e:d3:bf:11:62:70:3e:4d:12:a2:af:c6:0e:78:17:fe:32:f1:
3c:ea:5b:b6:e4:a5:b6:34:4f:fe:63:09:1e:f8:3d:4c:e7:ed:
21:b9:8a:00:18:bf:af:1b:10:6f:14:9a:d9:85:bf:ef:56:c0:
72:3d:f4:8d:8a:87:2a:de:06:92:fb:e0:3f:d2:3b:bd:18:0d:
e8:f3:2b:c4:9f:6b:94:75:ed:10:2f:58:30:ce:b7:64:0b:d9:
e9:f0:e3:06:88:33:5f:60:88:0f:eb:0d:19:fb:c6:87:c8:f4:
a6:a4:c6:5f:c3:c3:38:b8:2c:48:1a:db:18:d4:d0:f7:2c:84:
cc:94:a3:3f:32:fa:08:ee:19:97:3d:83:5a:ed:4c:02:c5:4b:
af:8b:f0:b4:3c:c0:f2:6e:02:46:ad:3a:d2:5a:99:6b:d9:a3:
90:65:a0:7c:70:b9:e2:23:98:ac:21:f9:cb:0b:8e:ed:52:99:
b9:cb:4b:78:05:9b:71:b3:89:10:d7:9c:91:6b:72:87:ba:c5:
c7:32:7e:d7:a1:4a:1d:f2:49:ae:b7:c9:f0:2f:e5:27:cb:fa:
55:dc:f5:d1:33:16:cf:00:ab:8f:fa:e5:d4:13:68:9a:37:15:
ae:90:a1:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWhef+z7HLTC84BdXKAy9ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjMwMTExMTUzNjQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGJjOTliNjcxNWUwZGFlOWRmYTlhOGU5N2ZlOTAzZjdhZTM1NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeLl+gSE6aTWxCWIWIblXX53lT0m
HQZEp95wLaV6iNkK1Rep2jfyYCfJkuLaa0TlF11Be/g6KRXuTGWimy5vwWxE54QJ
TPCxhqd7Dk/XqOOKkHStG3Y7Ve/2k9zoMhtoba/yd/S9scYgf3YjVcwsmQL7fZoI
ligbpeA9y0QS9KrDGNlKA0LvvAM+q6YviDsiz1T6ckRI5itrgfmVhs7kETlqdpd9
kW3mp+bhbw6dvlXi/0jPojcp93PCMnIQpspd087lq8QQxUtGA8h7/npUq8A28bYB
mdYqqEWAQoejy3dudnTuwqb3c8u4g8K+hru8ZJPEuKe3njpiRLZVL29VEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCS8mbZxXg2unfqajpf+kD9641ZmMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvSkx5WnRuRmVEYTZkLXBxT2xfNlFQM3JqVm1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLiC0MA0G
CSqGSIb3DQEBCwUAA4IBAQAxA2Ri2MC7nq9jiofPZ7NtZ/B+078RYnA+TRKir8YO
eBf+MvE86lu25KW2NE/+Ywke+D1M5+0huYoAGL+vGxBvFJrZhb/vVsByPfSNiocq
3gaS++A/0ju9GA3o8yvEn2uUde0QL1gwzrdkC9np8OMGiDNfYIgP6w0Z+8aHyPSm
pMZfw8M4uCxIGtsY1ND3LITMlKM/MvoI7hmXPYNa7UwCxUuvi/C0PMDybgJGrTrS
Wplr2aOQZaB8cLniI5isIfnLC47tUpm5y0t4BZtxs4kQ15yRa3KHusXHMn7XoUod
8kmut8nwL+Uny/pV3PXRMxbPAKuP+uXUE2iaNxWukKHJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:11 2024 by rpki-client on console-fra.rpki-client.org