Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/2M8bTbKLV0qzGpCPlBVQT_vuN4o.roa
File: 2M8bTbKLV0qzGpCPlBVQT_vuN4o.roa (raw, json)
Hash identifier: DUFM/pkZAg5fvSmHkNnDYc8E+E5BxJgaQWK19bmJu70=
Subject key identifier: D8:CF:1B:4D:B2:8B:57:4A:B3:1A:90:8F:94:15:50:4F:FB:EE:37:8A
Certificate issuer: /CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Certificate serial: 018BA51765D88EB7BD4612D9E66441E74754
Authority key identifier: 70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/2M8bTbKLV0qzGpCPlBVQT_vuN4o.roa
Signing time: Mon 06 Nov 2023 14:44:15 +0000
ROA not before: Mon 06 Nov 2023 14:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16019
IP address blocks: 46.174.16.0/21 maxlen: 21
46.174.21.0/24 maxlen: 24
46.174.22.0/24 maxlen: 24
46.174.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:17:65:d8:8e:b7:bd:46:12:d9:e6:64:41:e7:47:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7078e75635a09dcc03f625a80bfa552b22e3662c
Validity
Not Before: Nov 6 14:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cf1b4db28b574ab31a908f9415504ffbee378a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:be:a3:24:31:9d:a6:85:01:1d:f6:73:7a:
c5:5c:5b:f4:c4:da:3e:d3:3d:89:90:f5:9c:49:86:
18:51:9b:5d:51:a8:20:1f:22:a0:aa:31:f7:06:eb:
19:44:29:ff:24:08:1d:58:6b:70:f7:b8:53:92:0c:
6b:b0:05:f9:61:cc:04:cc:c0:1c:6a:7b:8d:64:e7:
41:7d:37:cc:51:3d:f0:b0:ba:f1:47:52:5e:44:e2:
d5:30:5f:2d:f3:50:78:cb:6a:48:2e:52:5d:2a:5e:
ee:6c:2d:b8:d8:d1:4d:a3:f6:81:76:6c:d1:f0:12:
ae:fc:3d:d7:e1:89:65:cd:89:6c:90:fe:8e:fe:e8:
c6:82:38:ca:a8:c1:39:8f:bb:c2:fd:a0:6c:e2:a1:
6f:57:95:ac:99:73:ef:12:7a:54:b9:de:7f:1f:1b:
9f:66:6f:20:6f:68:6a:0b:f4:b3:91:c0:2f:1c:8a:
87:e9:af:9d:1c:23:34:d7:75:0a:21:4e:c5:11:e7:
b1:b3:db:05:0a:e3:e3:89:44:3b:0c:ee:b3:8d:4e:
72:46:6a:81:99:0d:8d:5c:15:5b:82:94:ef:36:62:
c6:27:c0:23:0c:79:ab:f2:fa:3b:cc:c5:7b:86:05:
d8:e5:0e:b8:64:bb:43:48:64:36:eb:56:58:15:bb:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:1B:4D:B2:8B:57:4A:B3:1A:90:8F:94:15:50:4F:FB:EE:37:8A
X509v3 Authority Key Identifier:
keyid:70:78:E7:56:35:A0:9D:CC:03:F6:25:A8:0B:FA:55:2B:22:E3:66:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHjnVjWgncwD9iWoC_pVKyLjZiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/2M8bTbKLV0qzGpCPlBVQT_vuN4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ca17f7-c593-474d-8cf0-538b47709956/1/cHjnVjWgncwD9iWoC_pVKyLjZiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.16.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:ed:c4:54:4c:50:94:71:79:ce:43:4a:cd:ba:1d:37:b2:d3:
7d:2f:8f:1f:18:19:ff:3f:a3:1d:c0:f6:40:06:d0:c9:2c:6d:
05:49:7a:53:dc:f6:0a:79:9f:b1:b2:df:9f:7b:3b:6f:25:7d:
6c:c6:d1:c5:13:ec:83:98:6d:9c:e7:b7:e2:05:6a:ad:78:5f:
b4:60:b2:88:18:1e:07:7d:85:ca:01:5f:18:60:9e:b6:46:d6:
95:7c:6f:1b:2a:85:a2:31:4f:9e:89:27:36:c0:83:2c:46:fb:
8c:90:7f:a5:42:c1:ac:c0:34:05:cf:10:5a:8a:cd:2c:fb:04:
2e:ce:eb:e7:8f:05:58:9a:03:4f:4b:c0:be:8f:46:f1:6c:76:
9a:54:3e:4b:13:69:c9:78:4a:9c:36:11:63:ca:b9:92:3c:55:
4d:d8:13:c2:40:47:6f:2a:db:cf:2e:ac:ea:85:97:40:01:ae:
f9:ce:7f:78:eb:9e:75:56:ef:bb:51:85:43:f0:2a:5d:5a:bb:
98:36:22:54:76:96:34:88:6b:b6:cc:18:ad:9c:2a:4a:74:d5:
4e:00:9e:db:27:4f:ac:0c:c7:b5:6e:18:96:32:f4:c0:bc:aa:
cf:53:a6:36:50:b3:b7:cb:3e:eb:34:80:71:f7:db:e1:a3:ba:
d0:8d:20:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYulF2XYjre9RhLZ5mRB50dUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzhlNzU2MzVhMDlkY2MwM2Y2MjVhODBiZmE1NTJiMjJl
MzY2MmMwHhcNMjMxMTA2MTQ0NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGNmMWI0ZGIyOGI1NzRhYjMxYTkwOGY5NDE1NTA0ZmZiZWUzNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMu+oyQxnaaFAR32c3rFXFv0xNo+
0z2JkPWcSYYYUZtdUaggHyKgqjH3BusZRCn/JAgdWGtw97hTkgxrsAX5YcwEzMAc
anuNZOdBfTfMUT3wsLrxR1JeROLVMF8t81B4y2pILlJdKl7ubC242NFNo/aBdmzR
8BKu/D3X4YllzYlskP6O/ujGgjjKqME5j7vC/aBs4qFvV5WsmXPvEnpUud5/Hxuf
Zm8gb2hqC/SzkcAvHIqH6a+dHCM013UKIU7FEeexs9sFCuPjiUQ7DO6zjU5yRmqB
mQ2NXBVbgpTvNmLGJ8AjDHmr8vo7zMV7hgXY5Q64ZLtDSGQ261ZYFbv+XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNjPG02yi1dKsxqQj5QVUE/77jeKMB8GA1UdIwQY
MBaAFHB451Y1oJ3MA/YlqAv6VSsi42YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAt
NTM4YjQ3NzA5OTU2LzEvMk04YlRiS0xWMHF6R3BDUGxCVlFUX3Z1TjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9jYTE3ZjctYzU5My00NzRkLThjZjAtNTM4YjQ3NzA5OTU2
LzEvY0hqblZqV2duY3dEOWlXb0NfcFZLeUxqWml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq4QMA0G
CSqGSIb3DQEBCwUAA4IBAQCx7cRUTFCUcXnOQ0rNuh03stN9L48fGBn/P6MdwPZA
BtDJLG0FSXpT3PYKeZ+xst+feztvJX1sxtHFE+yDmG2c57fiBWqteF+0YLKIGB4H
fYXKAV8YYJ62RtaVfG8bKoWiMU+eiSc2wIMsRvuMkH+lQsGswDQFzxBais0s+wQu
zuvnjwVYmgNPS8C+j0bxbHaaVD5LE2nJeEqcNhFjyrmSPFVN2BPCQEdvKtvPLqzq
hZdAAa75zn946551Vu+7UYVD8CpdWruYNiJUdpY0iGu2zBitnCpKdNVOAJ7bJ0+s
DMe1bhiWMvTAvKrPU6Y2ULO3yz7rNIBx99vho7rQjSBy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:27 2024 by rpki-client on console-fra.rpki-client.org