Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/LN6vEhhrGoPypFUOqRhftioehTI.roa
File: LN6vEhhrGoPypFUOqRhftioehTI.roa (raw, json)
Hash identifier: 9BU+nE5fgXPBtKv5StcOLK/Fk4oB9IduA0Bg0kvW7jM=
Subject key identifier: 2C:DE:AF:12:18:6B:1A:83:F2:A4:55:0E:A9:18:5F:B6:2A:1E:85:32
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 0185706756C0459E68778B6056F0F5AD96AC
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/LN6vEhhrGoPypFUOqRhftioehTI.roa
Signing time: Mon 02 Jan 2023 02:54:58 +0000
ROA not before: Mon 02 Jan 2023 02:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51682
IP address blocks: 46.16.251.0/24 maxlen: 24
46.16.252.0/22 maxlen: 22
46.16.248.0/24 maxlen: 24
46.16.252.0/24 maxlen: 24
46.16.248.0/22 maxlen: 22
46.16.249.0/24 maxlen: 24
46.16.253.0/24 maxlen: 24
46.16.250.0/24 maxlen: 24
46.16.254.0/24 maxlen: 24
46.16.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:56:c0:45:9e:68:77:8b:60:56:f0:f5:ad:96:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Jan 2 02:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cdeaf12186b1a83f2a4550ea9185fb62a1e8532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:07:75:04:c5:f3:2e:4b:3b:fa:0c:00:82:
fb:37:02:36:f9:57:48:6d:ef:34:01:68:5c:6c:b7:
24:db:69:3b:c7:e9:fd:40:2c:4c:9d:fc:7d:e5:34:
a1:88:da:75:cc:f7:6f:2c:4f:ec:aa:95:60:4a:ea:
aa:e5:9f:e6:c1:98:2a:e3:5f:f3:16:5e:2d:5b:04:
7b:4b:ab:f1:9b:a7:f4:5f:be:6d:d3:50:4f:0c:76:
06:35:2f:3c:1f:ae:62:5c:37:35:17:4f:32:1c:f8:
63:06:7a:16:e3:53:59:aa:2b:5e:75:7e:aa:7e:29:
59:ed:30:f8:ee:46:23:5d:f8:1b:17:0d:88:0e:1a:
5e:ff:cb:0d:47:ab:63:63:be:23:79:3a:88:7d:7f:
08:fd:cb:af:e9:52:4c:59:b5:13:3f:58:62:1e:7c:
df:75:01:6d:dc:b9:e2:84:aa:da:6d:6d:61:d8:10:
8a:ab:9b:6f:c9:cf:29:18:77:ae:58:b1:80:ad:e5:
0b:b5:9a:4b:81:9d:4c:df:b2:fe:8b:25:09:02:6c:
a5:f2:35:c4:e7:c7:2e:69:a5:ab:f5:0d:0f:91:7e:
64:7f:ed:73:18:e4:bc:17:fb:a1:56:e0:d8:fa:f1:
b2:16:10:c9:5e:6a:c9:49:5e:b6:e9:0a:68:85:ff:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:AF:12:18:6B:1A:83:F2:A4:55:0E:A9:18:5F:B6:2A:1E:85:32
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/LN6vEhhrGoPypFUOqRhftioehTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.248.0/21
Signature Algorithm: sha256WithRSAEncryption
22:11:6e:2c:8e:32:42:fe:e4:89:f4:82:13:51:d0:38:72:25:
19:6f:2d:fe:9d:c3:b0:46:40:f8:a5:d0:38:62:33:52:af:a1:
f1:72:bd:f8:e7:50:e4:2c:de:f2:79:63:ee:bb:c6:e1:50:e6:
89:68:33:85:fd:93:8e:ef:01:8f:bf:32:02:e7:7f:52:6f:1b:
93:2c:b7:84:98:25:cb:aa:8f:bd:27:3b:37:6a:6e:20:c4:1f:
03:74:01:ee:7f:e7:45:5c:30:b2:9a:dd:7d:d9:1a:53:8d:e9:
68:d3:6c:c6:2f:82:f7:00:2d:77:68:df:f4:d6:f1:04:b5:43:
26:02:dc:fd:1a:d8:f1:22:63:ad:1d:1a:d1:61:fb:9b:6b:1f:
0b:3e:8d:e0:16:d6:f4:5a:c4:8f:69:70:dc:6b:d5:c5:d6:d4:
b4:48:7c:d8:c6:56:0b:7b:30:10:41:1d:6e:9e:b0:c0:11:f7:
bb:2b:c7:c9:59:bc:80:f6:c2:0e:05:6d:90:f1:a7:d9:4e:6b:
01:4e:98:e4:76:c3:ea:9e:78:6e:5f:61:26:21:9f:08:a7:8a:
e4:dc:f6:46:06:23:95:8b:bc:0e:54:1d:8f:6a:bf:1f:e2:15:
92:a7:4f:8d:16:44:3a:e4:0e:11:bb:b7:4e:c1:94:a7:6e:80:
47:1b:c0:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ1bARZ5od4tgVvD1rZasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3
YTU2ZjAwHhcNMjMwMTAyMDI1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2RlYWYxMjE4NmIxYTgzZjJhNDU1MGVhOTE4NWZiNjJhMWU4NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrYHdQTF8y5LO/oMAIL7NwI2+VdI
be80AWhcbLck22k7x+n9QCxMnfx95TShiNp1zPdvLE/sqpVgSuqq5Z/mwZgq41/z
Fl4tWwR7S6vxm6f0X75t01BPDHYGNS88H65iXDc1F08yHPhjBnoW41NZqitedX6q
filZ7TD47kYjXfgbFw2IDhpe/8sNR6tjY74jeTqIfX8I/cuv6VJMWbUTP1hiHnzf
dQFt3LnihKrabW1h2BCKq5tvyc8pGHeuWLGAreULtZpLgZ1M37L+iyUJAmyl8jXE
58cuaaWr9Q0PkX5kf+1zGOS8F/uhVuDY+vGyFhDJXmrJSV626Qpohf/0kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzerxIYaxqD8qRVDqkYX7YqHoUyMB8GA1UdIwQY
MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt
M2YyOGI2YWRiZGE5LzEvTE42dkVoaHJHb1B5cEZVT3FSaGZ0aW9laFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5
LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhD4MA0G
CSqGSIb3DQEBCwUAA4IBAQAiEW4sjjJC/uSJ9IITUdA4ciUZby3+ncOwRkD4pdA4
YjNSr6Hxcr3451DkLN7yeWPuu8bhUOaJaDOF/ZOO7wGPvzIC539SbxuTLLeEmCXL
qo+9Jzs3am4gxB8DdAHuf+dFXDCymt192RpTjelo02zGL4L3AC13aN/01vEEtUMm
Atz9GtjxImOtHRrRYfubax8LPo3gFtb0WsSPaXDca9XF1tS0SHzYxlYLezAQQR1u
nrDAEfe7K8fJWbyA9sIOBW2Q8afZTmsBTpjkdsPqnnhuX2EmIZ8Ip4rk3PZGBiOV
i7wOVB2Par8f4hWSp0+NFkQ65A4Ru7dOwZSnboBHG8AO
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:36 2024 by rpki-client on console-fra.rpki-client.org