Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/x6gyl_CiEYsZUWVslU9kQYD99jg.roa
File: x6gyl_CiEYsZUWVslU9kQYD99jg.roa (raw, json)
Hash identifier: EAVPaEIuM5xGuPPk8vHzU+5ykx6W6f9aufhjfYEe3s0=
Subject key identifier: C7:A8:32:97:F0:A2:11:8B:19:51:65:6C:95:4F:64:41:80:FD:F6:38
Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Certificate serial: 01856F94BAAD56968625E18A79A2C39805F0
Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/x6gyl_CiEYsZUWVslU9kQYD99jg.roa
Signing time: Sun 01 Jan 2023 23:04:56 +0000
ROA not before: Sun 01 Jan 2023 23:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211790
IP address blocks: 46.32.168.0/24 maxlen: 24
46.32.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:ba:ad:56:96:86:25:e1:8a:79:a2:c3:98:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795
Validity
Not Before: Jan 1 23:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7a83297f0a2118b1951656c954f644180fdf638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:17:da:06:3c:1f:7a:82:4d:1b:52:5c:d2:
ee:77:7c:85:34:74:14:db:25:1e:db:f9:22:cc:1d:
fc:11:cb:a2:11:c8:5b:f7:84:21:c4:75:4e:7e:9d:
2b:72:a4:09:73:7a:eb:59:3f:dc:37:79:eb:33:f0:
bf:76:74:e9:6b:d1:28:23:0a:f8:46:17:09:4a:fb:
21:94:fe:6d:a4:2d:aa:46:46:cf:06:7d:9f:9a:d4:
9e:df:b1:7b:55:5a:85:53:24:ae:94:9a:4a:0b:8f:
54:e6:63:32:c3:31:07:89:3b:1d:81:10:bb:a1:23:
9c:85:30:17:90:85:6e:58:ee:88:14:91:d4:2b:69:
c9:10:ed:50:4b:45:0a:2b:d0:d6:1d:c5:20:3e:d9:
ba:95:86:10:17:b4:fd:a0:b6:7a:41:f5:25:0a:56:
b6:f0:a2:93:42:db:13:00:78:9b:ab:f1:ea:3c:81:
fe:56:8c:c6:0c:3a:d4:84:9d:4a:25:9a:d4:7e:aa:
74:8a:82:25:6b:5c:1b:ca:36:54:ae:f1:36:1e:04:
ca:00:57:d5:2e:09:11:2b:77:20:eb:59:ee:41:e2:
82:c9:06:05:ab:8e:6a:61:8c:33:1c:c9:0e:08:70:
98:70:9d:ab:ac:e7:d8:f6:ea:9d:c4:b8:02:91:0c:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:32:97:F0:A2:11:8B:19:51:65:6C:95:4F:64:41:80:FD:F6:38
X509v3 Authority Key Identifier:
keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/x6gyl_CiEYsZUWVslU9kQYD99jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.168.0/24
46.32.176.0/24
Signature Algorithm: sha256WithRSAEncryption
62:7c:63:93:a2:42:4f:4a:7a:f6:bb:22:b7:7a:5e:c6:3f:83:
cf:e8:f5:07:bd:74:2f:c8:d6:2b:0d:cd:b8:ea:66:62:30:41:
4e:59:66:68:a1:fc:8a:3b:a2:05:b9:f0:ee:50:9d:82:53:6e:
06:ce:7c:2a:bf:a4:3d:53:da:21:da:28:f1:57:b4:43:83:30:
ad:16:59:a6:2a:60:79:6e:a6:df:b5:68:d2:e8:c2:fb:41:0b:
0a:37:2d:fb:9e:52:54:b4:16:40:83:cd:33:74:33:4a:33:61:
c5:68:5f:65:16:9f:6c:68:f9:af:04:db:a2:7f:1b:a3:18:ce:
58:09:0e:0c:36:82:3e:a2:76:23:7b:79:6e:ee:ca:a2:93:64:
61:5b:de:f4:61:2b:17:96:7c:26:9d:97:68:3e:12:dd:87:6b:
67:44:53:c6:d5:3d:22:b7:64:88:33:a6:dc:3c:88:4f:70:3d:
d9:e4:c0:15:f2:b5:7e:8f:17:74:ed:c9:ae:d2:53:d5:75:ca:
f5:e1:eb:1c:c4:51:6d:14:f6:a7:54:b3:98:e2:dd:3b:c2:d4:
e2:32:ba:d4:12:14:cb:e0:b9:ec:d8:63:3d:8d:4d:26:fc:f5:
b0:81:e9:79:3f:d6:fb:b0:af:49:74:8e:da:bb:4c:a1:af:92:
76:6b:a2:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvlLqtVpaGJeGKeaLDmAXwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0
Mzc3OTUwHhcNMjMwMTAxMjMwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2E4MzI5N2YwYTIxMThiMTk1MTY1NmM5NTRmNjQ0MTgwZmRmNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ScX2gY8H3qCTRtSXNLud3yFNHQU
2yUe2/kizB38EcuiEchb94QhxHVOfp0rcqQJc3rrWT/cN3nrM/C/dnTpa9EoIwr4
RhcJSvshlP5tpC2qRkbPBn2fmtSe37F7VVqFUySulJpKC49U5mMywzEHiTsdgRC7
oSOchTAXkIVuWO6IFJHUK2nJEO1QS0UKK9DWHcUgPtm6lYYQF7T9oLZ6QfUlCla2
8KKTQtsTAHibq/HqPIH+VozGDDrUhJ1KJZrUfqp0ioIla1wbyjZUrvE2HgTKAFfV
LgkRK3cg61nuQeKCyQYFq45qYYwzHMkOCHCYcJ2rrOfY9uqdxLgCkQyWYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMeoMpfwohGLGVFlbJVPZEGA/fY4MB8GA1UdIwQY
MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt
MzZlMzQ0YWJjOWQzLzEveDZneWxfQ2lFWXNaVVdWc2xVOWtRWUQ5OWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz
LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCoAwQA
LiCwMA0GCSqGSIb3DQEBCwUAA4IBAQBifGOTokJPSnr2uyK3el7GP4PP6PUHvXQv
yNYrDc246mZiMEFOWWZoofyKO6IFufDuUJ2CU24Gznwqv6Q9U9oh2ijxV7RDgzCt
FlmmKmB5bqbftWjS6ML7QQsKNy37nlJUtBZAg80zdDNKM2HFaF9lFp9saPmvBNui
fxujGM5YCQ4MNoI+onYje3lu7sqik2RhW970YSsXlnwmnZdoPhLdh2tnRFPG1T0i
t2SIM6bcPIhPcD3Z5MAV8rV+jxd07cmu0lPVdcr14escxFFtFPanVLOY4t07wtTi
MrrUEhTL4Lns2GM9jU0m/PWwgel5P9b7sK9JdI7au0yhr5J2a6Iw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:22 2024 by rpki-client on console-ams.rpki-client.org