Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/OweZx2Hqw4sajv6Gzky7QREdsZU.roa
File: OweZx2Hqw4sajv6Gzky7QREdsZU.roa (raw, json)
Hash identifier: akAD4gn+uQVfLE5L6DHjrO0W8CQPM4WvIA9d+tGgjKQ=
Subject key identifier: 3B:07:99:C7:61:EA:C3:8B:1A:8E:FE:86:CE:4C:BB:41:11:1D:B1:95
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0188D82CF27938F6588702083AA0A0C2D604
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/OweZx2Hqw4sajv6Gzky7QREdsZU.roa
Signing time: Tue 20 Jun 2023 09:40:04 +0000
ROA not before: Tue 20 Jun 2023 09:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198079
IP address blocks: 46.244.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:2c:f2:79:38:f6:58:87:02:08:3a:a0:a0:c2:d6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Jun 20 09:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0799c761eac38b1a8efe86ce4cbb41111db195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fc:9f:85:c1:9d:d9:d5:86:fd:d4:52:f9:90:
f4:bf:b7:d5:de:9b:66:96:42:a1:d6:93:77:c7:d1:
b7:36:7c:b0:da:2e:a2:d1:af:e1:1e:2e:1e:e8:77:
56:52:0b:ea:fd:8e:90:02:58:a6:0d:0e:10:21:5c:
35:21:01:ed:77:64:45:f4:7c:d8:37:30:25:76:00:
3a:54:d8:b0:0d:96:f4:52:e6:d4:54:49:35:6d:47:
a9:e2:06:d2:63:8f:b8:e8:6b:05:09:82:f3:bd:0c:
7c:a1:33:03:df:12:08:d7:52:6d:83:7d:ee:ad:91:
c7:38:5b:b2:18:f7:f2:a8:96:3b:d9:4c:19:bb:b0:
d5:17:c4:e6:b3:87:2f:c0:47:2f:0a:93:42:41:a7:
af:2f:1c:9d:61:1d:ff:a2:24:91:d7:c6:69:70:ac:
70:64:0a:92:63:da:84:0d:b6:30:a6:9f:f9:10:a0:
4b:8b:6e:ea:c0:50:69:b9:3f:85:b8:34:5e:04:02:
97:56:e1:af:a9:f0:ce:44:cf:c0:a8:79:2b:34:a2:
18:2a:5d:fb:a1:71:54:11:6a:cf:22:93:a4:0e:75:
d7:58:12:58:08:3f:1a:a4:14:07:76:99:1b:38:02:
06:49:d5:e8:50:a5:6b:00:17:1d:4d:b4:b8:f9:86:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:07:99:C7:61:EA:C3:8B:1A:8E:FE:86:CE:4C:BB:41:11:1D:B1:95
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/OweZx2Hqw4sajv6Gzky7QREdsZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.98.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8b:71:01:3c:c7:e5:e2:0a:7f:da:6a:9c:59:66:f1:ed:37:
11:9e:ac:2e:0a:e5:96:7a:28:e6:e6:9e:f1:88:49:3f:7b:01:
d4:7b:3c:34:af:ad:dc:f4:06:32:26:df:32:b7:97:9d:a5:a9:
27:ba:5c:dd:6b:b4:9e:6e:db:e7:cd:50:62:5a:d9:b6:96:66:
d3:2c:71:63:0e:e4:fe:4d:f4:d3:57:d8:6b:21:15:46:a1:79:
9b:b0:ab:2c:1f:e4:01:12:ad:5f:2f:b7:22:18:22:1a:2a:e9:
f4:e1:85:dc:9a:76:0f:63:71:7c:39:27:fd:bf:05:13:59:ac:
2b:22:14:55:7b:33:65:9d:67:f8:e8:a2:f3:39:c2:8f:15:ee:
d5:72:62:eb:89:5a:ab:68:2b:3f:59:b2:f8:be:5b:af:db:1e:
10:85:e8:44:69:db:8c:e9:18:3f:4b:9e:05:24:2a:f4:51:70:
ea:43:c9:12:ad:ea:a4:d8:e6:d0:94:39:13:32:92:31:04:44:
cd:80:ef:3d:6f:7f:0c:5f:cc:ed:10:91:f4:03:70:8e:d5:1f:
61:c9:c7:fb:22:c3:eb:34:7f:a9:42:38:cc:9c:ad:fe:cc:8d:
c7:62:c0:22:52:59:44:41:a5:3f:26:b9:90:4a:c7:6a:ca:e8:
c4:36:1e:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjYLPJ5OPZYhwIIOqCgwtYEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy
NTc2MjQwHhcNMjMwNjIwMDk0MDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjA3OTljNzYxZWFjMzhiMWE4ZWZlODZjZTRjYmI0MTExMWRiMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/yfhcGd2dWG/dRS+ZD0v7fV3ptm
lkKh1pN3x9G3Nnyw2i6i0a/hHi4e6HdWUgvq/Y6QAlimDQ4QIVw1IQHtd2RF9HzY
NzAldgA6VNiwDZb0UubUVEk1bUep4gbSY4+46GsFCYLzvQx8oTMD3xII11Jtg33u
rZHHOFuyGPfyqJY72UwZu7DVF8Tms4cvwEcvCpNCQaevLxydYR3/oiSR18ZpcKxw
ZAqSY9qEDbYwpp/5EKBLi27qwFBpuT+FuDReBAKXVuGvqfDORM/AqHkrNKIYKl37
oXFUEWrPIpOkDnXXWBJYCD8apBQHdpkbOAIGSdXoUKVrABcdTbS4+YYPtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsHmcdh6sOLGo7+hs5Mu0ERHbGVMB8GA1UdIwQY
MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt
ZTk3ZDFkMDIyMGFmLzEvT3dlWngySHF3NHNhanY2R3preTdRUkVkc1pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm
LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvRiMA0G
CSqGSIb3DQEBCwUAA4IBAQAii3EBPMfl4gp/2mqcWWbx7TcRnqwuCuWWeijm5p7x
iEk/ewHUezw0r63c9AYyJt8yt5edpaknulzda7SebtvnzVBiWtm2lmbTLHFjDuT+
TfTTV9hrIRVGoXmbsKssH+QBEq1fL7ciGCIaKun04YXcmnYPY3F8OSf9vwUTWawr
IhRVezNlnWf46KLzOcKPFe7VcmLriVqraCs/WbL4vluv2x4QhehEaduM6Rg/S54F
JCr0UXDqQ8kSreqk2ObQlDkTMpIxBETNgO89b38MX8ztEJH0A3CO1R9hycf7IsPr
NH+pQjjMnK3+zI3HYsAiUllEQaU/JrmQSsdqyujENh7B
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:21 2024 by rpki-client on console-ams.rpki-client.org