Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RMIk-V8XZ97sJM-UhXx3kCkHk-k.roa
File: RMIk-V8XZ97sJM-UhXx3kCkHk-k.roa (raw, json)
Hash identifier: cJTW6HKyRAXlqEsbnlDXAEBw87OcWOc/DMlFVA9xyWI=
Subject key identifier: 44:C2:24:F9:5F:17:67:DE:EC:24:CF:94:85:7C:77:90:29:07:93:E9
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01891A7849F422B38B267A671E81F8E52781
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RMIk-V8XZ97sJM-UhXx3kCkHk-k.roa
Signing time: Mon 03 Jul 2023 06:37:18 +0000
ROA not before: Mon 03 Jul 2023 06:37:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203622
IP address blocks: 46.32.166.0/24 maxlen: 24
46.32.165.0/24 maxlen: 24
46.32.164.0/24 maxlen: 24
46.32.160.0/24 maxlen: 24
46.32.162.0/24 maxlen: 24
46.32.161.0/24 maxlen: 24
46.32.167.0/24 maxlen: 24
46.32.170.0/24 maxlen: 24
46.32.171.0/24 maxlen: 24
46.32.191.0/24 maxlen: 24
46.32.188.0/24 maxlen: 24
46.32.190.0/24 maxlen: 24
46.32.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 10:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1a:78:49:f4:22:b3:8b:26:7a:67:1e:81:f8:e5:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jul 3 06:37:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44c224f95f1767deec24cf94857c7790290793e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6c:4c:cf:d4:27:4a:ee:a3:be:63:d7:50:40:
a1:89:6c:7f:d3:f3:79:3b:1e:39:51:96:91:a4:0a:
20:43:be:52:22:0b:bf:dc:89:5d:2f:45:4a:fc:c4:
76:60:bd:9f:cc:46:30:e3:65:43:a5:cf:37:3d:46:
e8:1b:37:c7:15:f9:17:5a:fd:22:56:f2:a3:6b:25:
9e:74:f6:d1:a9:73:52:57:33:4d:9d:9f:7c:b4:61:
30:81:f8:46:34:e1:4b:ee:86:71:3f:ee:25:21:af:
82:e9:06:81:ec:0e:89:6e:a5:6d:04:6a:d6:cb:11:
40:2e:26:96:05:a9:ca:f5:b8:f7:dc:ee:be:c6:d4:
fa:e1:3c:d3:a5:e4:e1:53:04:77:c0:d0:03:45:ac:
ec:a3:88:54:a0:60:15:e3:89:98:9e:a9:2a:c6:1c:
a2:8a:9d:34:8c:b1:a3:63:5f:eb:54:8f:b7:be:c4:
42:0b:79:26:03:eb:7b:cc:0b:9e:3d:08:5c:72:16:
e1:3d:6c:91:52:25:09:e6:26:9c:14:ff:a9:4d:51:
b9:21:8f:b1:9a:b0:d0:9c:17:8b:d7:55:aa:bd:05:
a3:59:3f:6e:e4:98:99:ab:09:3a:a3:e3:c3:81:e7:
98:31:bf:af:f2:d5:5a:d8:4b:70:7d:0a:3f:23:4f:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C2:24:F9:5F:17:67:DE:EC:24:CF:94:85:7C:77:90:29:07:93:E9
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/RMIk-V8XZ97sJM-UhXx3kCkHk-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.160.0-46.32.162.255
46.32.164.0/22
46.32.170.0/23
46.32.188.0/22
Signature Algorithm: sha256WithRSAEncryption
02:80:1d:f7:e8:df:b8:0e:69:11:2d:e8:22:56:8f:42:89:4b:
6d:4b:bd:8d:a6:c4:71:ef:fd:ed:54:98:e7:ec:6b:98:e6:d8:
f4:c6:0e:79:9f:e1:be:5a:ac:83:02:70:7e:f1:0e:e2:f7:86:
21:1c:27:9a:04:25:c2:f5:bb:bb:0e:6c:ef:06:25:c1:e9:ef:
16:fa:12:64:95:93:e7:77:b9:df:6e:43:4f:91:37:be:52:22:
62:63:f6:c7:d6:f3:7c:32:43:14:93:f3:e4:2d:d4:70:5f:0d:
37:c5:8e:ec:d6:74:d9:f7:46:ce:5c:81:39:3a:1f:da:0c:35:
9e:b1:e6:b6:6a:3f:8e:c2:ee:0c:53:44:0a:e0:ad:03:82:bc:
47:39:25:7b:ea:7f:3b:0b:e7:34:60:3b:78:b3:73:40:c1:2c:
e5:d4:bf:0a:a8:26:31:51:db:06:38:e6:fa:c4:ed:c3:c6:70:
71:d0:cd:e0:3c:d2:28:ef:e7:08:2d:36:b5:93:f4:f7:82:ed:
1f:fc:df:39:5b:59:dd:41:30:90:a7:98:5e:65:0d:29:11:b4:
5a:ad:bd:ec:28:01:1b:0b:13:3f:43:02:47:4e:1b:f3:c9:17:
bd:b7:65:13:e7:61:87:5d:6b:30:82:5f:cc:35:a2:a2:e6:bf:
5a:80:39:08
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYkaeEn0IrOLJnpnHoH45SeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjMwNzAzMDYzNzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGMyMjRmOTVmMTc2N2RlZWMyNGNmOTQ4NTdjNzc5MDI5MDc5M2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGxMz9QnSu6jvmPXUEChiWx/0/N5
Ox45UZaRpAogQ75SIgu/3IldL0VK/MR2YL2fzEYw42VDpc83PUboGzfHFfkXWv0i
VvKjayWedPbRqXNSVzNNnZ98tGEwgfhGNOFL7oZxP+4lIa+C6QaB7A6JbqVtBGrW
yxFALiaWBanK9bj33O6+xtT64TzTpeThUwR3wNADRazso4hUoGAV44mYnqkqxhyi
ip00jLGjY1/rVI+3vsRCC3kmA+t7zAuePQhcchbhPWyRUiUJ5iacFP+pTVG5IY+x
mrDQnBeL11WqvQWjWT9u5JiZqwk6o+PDgeeYMb+v8tVa2EtwfQo/I09nxQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFETCJPlfF2fe7CTPlIV8d5ApB5PpMB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEvUk1Jay1WOFhaOTdzSk0tVWhYeDNrQ2tIay1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAUuIKAD
BAAuIKIDBAIuIKQDBAEuIKoDBAIuILwwDQYJKoZIhvcNAQELBQADggEBAAKAHffo
37gOaREt6CJWj0KJS21LvY2mxHHv/e1UmOfsa5jm2PTGDnmf4b5arIMCcH7xDuL3
hiEcJ5oEJcL1u7sObO8GJcHp7xb6EmSVk+d3ud9uQ0+RN75SImJj9sfW83wyQxST
8+Qt1HBfDTfFjuzWdNn3Rs5cgTk6H9oMNZ6x5rZqP47C7gxTRArgrQOCvEc5JXvq
fzsL5zRgO3izc0DBLOXUvwqoJjFR2wY45vrE7cPGcHHQzeA80ijv5wgtNrWT9PeC
7R/83zlbWd1BMJCnmF5lDSkRtFqtvewoARsLEz9DAkdOG/PJF723ZRPnYYddazCC
X8w1oqLmv1qAOQg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org