Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nTBBs6h45xkwi-MojHEATXE7x7k.roa
File: nTBBs6h45xkwi-MojHEATXE7x7k.roa (raw, json)
Hash identifier: n81XQwFzVhvOnQb7SF91D8BEjQctHOwXwqqnyIZi7/A=
Subject key identifier: 9D:30:41:B3:A8:78:E7:19:30:8B:E3:28:8C:71:00:4D:71:3B:C7:B9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023DFD00D16E7B72361540AFFB5412
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nTBBs6h45xkwi-MojHEATXE7x7k.roa
Signing time: Sun 01 Jan 2023 20:24:55 +0000
ROA not before: Sun 01 Jan 2023 20:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34702
IP address blocks: 46.19.201.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
46.19.207.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3d:fd:00:d1:6e:7b:72:36:15:40:af:fb:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3041b3a878e719308be3288c71004d713bc7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:5f:0c:b4:05:14:dd:10:12:b0:79:fc:6e:
18:a2:3f:cc:35:ec:d3:67:12:17:fc:09:8b:1f:60:
ce:19:5d:b1:1f:6e:2d:d9:f4:aa:a8:08:b3:2f:64:
5c:17:ae:46:bd:2c:26:10:f0:fd:50:01:37:28:c0:
5b:e4:19:37:86:8d:42:67:45:92:5f:e3:1e:be:86:
fe:c1:92:6d:cd:0d:27:1a:04:e3:93:a2:b3:f5:fb:
22:64:66:94:32:43:dc:84:27:f6:28:90:44:e2:23:
2f:1a:46:1f:29:4b:f8:a0:41:2d:42:a7:23:12:fa:
78:71:e5:1b:82:4e:17:b2:c1:0b:37:18:0f:d7:6d:
0f:4e:b6:cc:e6:e1:49:cc:3b:3b:67:b1:67:fb:bc:
21:f6:97:d8:8f:ff:f8:6e:cd:d4:4b:33:ce:fa:c8:
0e:b1:26:bd:54:a2:47:40:d8:c7:f8:31:ba:55:92:
e0:dc:e7:c2:2c:28:1f:05:d0:85:be:c0:7a:21:8c:
f6:35:c5:f1:73:59:f5:b5:a3:5b:60:de:26:69:67:
ed:af:56:d9:06:38:55:18:3e:68:bd:7a:7a:1b:18:
f7:ca:de:2b:58:74:ce:37:db:f5:28:32:34:c1:d8:
5f:a3:74:ff:a8:fb:b0:f7:f3:2c:59:7c:1d:f8:41:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:30:41:B3:A8:78:E7:19:30:8B:E3:28:8C:71:00:4D:71:3B:C7:B9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/nTBBs6h45xkwi-MojHEATXE7x7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.201.0/24
46.19.207.0/24
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:97:d3:1a:37:44:02:55:7f:dd:b3:77:56:12:e9:c9:f8:e4:
9d:7b:52:7e:67:18:38:86:49:50:1a:3f:8f:b4:46:d9:f5:4c:
7e:80:69:b6:b0:7d:11:14:f9:4b:b9:a8:75:33:fc:40:d1:74:
bc:ee:be:25:dd:eb:56:d8:40:3a:c7:24:3c:45:56:7e:4f:ce:
91:b2:36:31:c1:bd:d8:1a:5d:83:e6:34:82:56:01:8c:70:8f:
ff:7b:6e:08:d3:e6:d7:6f:5f:98:8e:2a:19:3d:bb:14:93:fc:
af:ec:f9:bf:d6:b7:f8:da:3f:d2:fc:c6:6d:72:a7:c0:11:39:
32:78:fc:1e:fb:1a:ac:cf:df:ab:0a:cc:8f:70:15:30:7e:78:
15:2c:e8:8d:6a:24:6a:36:b6:41:36:b5:ce:81:78:69:8e:43:
6f:a1:c8:18:81:ae:0c:26:26:f4:14:ed:2e:85:27:66:b5:c2:
bd:14:6c:72:d6:fb:d3:7f:c1:75:70:cf:80:df:64:49:7c:c0:
06:61:a3:43:51:1d:2e:eb:73:11:97:5f:5d:34:28:f9:c0:34:
65:a3:60:8d:cb:5a:3f:e8:de:89:63:95:9b:34:04:ce:92:3c:
d5:71:44:01:4b:75:c3:40:ad:3b:6c:6f:9f:56:d9:a2:82:2c:
41:cf:23:eb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVvAj39ANFue3I2FUCv+1QSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDMwNDFiM2E4NzhlNzE5MzA4YmUzMjg4YzcxMDA0ZDcxM2JjN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNBfDLQFFN0QErB5/G4Yoj/MNezT
ZxIX/AmLH2DOGV2xH24t2fSqqAizL2RcF65GvSwmEPD9UAE3KMBb5Bk3ho1CZ0WS
X+Mevob+wZJtzQ0nGgTjk6Kz9fsiZGaUMkPchCf2KJBE4iMvGkYfKUv4oEEtQqcj
Evp4ceUbgk4XssELNxgP120PTrbM5uFJzDs7Z7Fn+7wh9pfYj//4bs3USzPO+sgO
sSa9VKJHQNjH+DG6VZLg3OfCLCgfBdCFvsB6IYz2NcXxc1n1taNbYN4maWftr1bZ
BjhVGD5ovXp6Gxj3yt4rWHTON9v1KDI0wdhfo3T/qPuw9/MsWXwd+EHCsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ0wQbOoeOcZMIvjKIxxAE1xO8e5MB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvblRCQnM2aDQ1eGt3aS1Nb2pIRUFUWEU3eDdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALhPJAwQA
LhPPAwQAubB0AwQAubB3MA0GCSqGSIb3DQEBCwUAA4IBAQC6l9MaN0QCVX/ds3dW
EunJ+OSde1J+Zxg4hklQGj+PtEbZ9Ux+gGm2sH0RFPlLuah1M/xA0XS87r4l3etW
2EA6xyQ8RVZ+T86RsjYxwb3YGl2D5jSCVgGMcI//e24I0+bXb1+YjioZPbsUk/yv
7Pm/1rf42j/S/MZtcqfAETkyePwe+xqsz9+rCsyPcBUwfngVLOiNaiRqNrZBNrXO
gXhpjkNvocgYga4MJib0FO0uhSdmtcK9FGxy1vvTf8F1cM+A32RJfMAGYaNDUR0u
63MRl19dNCj5wDRlo2CNy1o/6N6JY5WbNATOkjzVcUQBS3XDQK07bG+fVtmigixB
zyPr
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:48 2024 by rpki-client on console-ams.rpki-client.org