Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8wif6IXn4BDQ2x-QJxlR2NAFCKY.roa
File: 8wif6IXn4BDQ2x-QJxlR2NAFCKY.roa (raw, json)
Hash identifier: GhKZ0HqduzzkaV7EUFju7MaNmC7NpUDuoCuFWobFacs=
Subject key identifier: F3:08:9F:E8:85:E7:E0:10:D0:DB:1F:90:27:19:51:D8:D0:05:08:A6
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018DFD98D5B45A5EF0BD7E507E5B0A046A44
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8wif6IXn4BDQ2x-QJxlR2NAFCKY.roa
Signing time: Sat 02 Mar 2024 05:17:48 +0000
ROA not before: Sat 02 Mar 2024 05:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 46.36.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 09:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fd:98:d5:b4:5a:5e:f0:bd:7e:50:7e:5b:0a:04:6a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Mar 2 05:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3089fe885e7e010d0db1f90271951d8d00508a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c4:61:af:59:53:a8:5d:60:e8:f8:00:4e:d3:
aa:be:73:fb:a0:1c:ab:04:ec:4d:ab:97:6b:dd:1a:
5c:6d:7f:ef:4b:f0:02:c6:d3:a0:50:57:5a:69:f3:
ee:dc:6d:02:79:2a:85:df:1f:42:c5:67:52:33:25:
95:ea:21:06:b7:41:7c:9a:07:b6:17:bd:3f:22:c5:
5f:72:cb:e4:17:d1:e6:2c:10:a0:9c:4d:41:f1:c7:
f6:c8:c0:8c:8b:11:25:9e:55:82:f6:c8:ed:97:40:
42:c0:9f:33:03:8c:0d:55:41:3e:94:5f:9e:c7:31:
d0:1b:b7:24:da:91:c5:7d:02:db:39:2b:94:23:44:
6b:7e:37:1b:7c:74:b4:2a:de:08:32:6a:d3:a0:6f:
a8:8b:01:0b:ae:5d:b6:c1:97:24:7e:ee:e4:9b:4c:
6e:26:74:fb:06:e3:bc:d7:48:81:a8:de:ff:e3:c6:
64:09:73:c7:8d:92:01:8b:6d:e6:5b:29:11:8e:37:
aa:d6:24:06:f6:66:8c:14:4a:78:57:29:48:15:26:
80:51:ae:b5:62:51:05:1d:3b:51:26:15:b3:ec:05:
19:11:b8:ab:17:8b:e0:e5:a0:ab:06:cd:d0:f3:59:
7a:42:76:0d:68:66:ab:5e:82:4a:cc:0a:30:78:71:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:08:9F:E8:85:E7:E0:10:D0:DB:1F:90:27:19:51:D8:D0:05:08:A6
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/8wif6IXn4BDQ2x-QJxlR2NAFCKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1e:49:1c:70:1f:31:c8:5c:1a:93:ba:7f:7a:bf:fc:75:e3:
3a:de:b4:85:87:b2:28:a5:2a:be:17:79:ce:6b:22:23:78:d6:
25:9c:d3:f4:27:6e:48:bc:e7:84:af:16:2b:48:0d:3f:c4:a7:
3f:64:23:84:6c:7e:a5:10:30:70:29:64:2d:21:ba:78:9a:77:
8f:e3:8e:6c:0a:ca:f3:26:7b:ba:8e:79:76:b2:5e:b1:c5:84:
62:36:e7:73:55:cf:72:a7:20:c9:de:05:37:7a:60:d9:53:e6:
3b:9b:ac:9d:cc:9a:68:dc:72:10:53:d1:33:21:13:97:9d:8b:
f9:0e:58:a0:f6:26:74:ba:93:b5:21:65:dc:9a:d1:97:9c:e2:
30:5e:bf:bb:30:aa:bd:9f:1e:b7:94:bd:39:cd:f2:68:0f:78:
a6:b8:d3:5e:79:6b:99:2d:9c:fc:95:4d:e0:52:74:9c:a4:57:
79:a0:f0:bd:27:9a:5b:64:8b:f2:5e:ad:79:47:38:21:db:11:
5b:bc:46:4f:55:42:18:a5:22:d0:76:4e:17:f4:15:2e:ee:17:
98:7c:69:a0:95:f2:da:27:29:e7:86:a6:67:4f:7b:b7:46:92:
51:87:3a:55:07:a0:4d:50:20:9a:e8:46:fa:53:12:a9:66:54:
c0:8e:28:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY39mNW0Wl7wvX5QflsKBGpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZDY2MmRjYzZmZTNiODFlZjNkZTJmY2EzY2ZjZWRjMTFl
YmFhNDMwHhcNMjQwMzAyMDUxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzA4OWZlODg1ZTdlMDEwZDBkYjFmOTAyNzE5NTFkOGQwMDUwOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMRhr1lTqF1g6PgATtOqvnP7oByr
BOxNq5dr3RpcbX/vS/ACxtOgUFdaafPu3G0CeSqF3x9CxWdSMyWV6iEGt0F8mge2
F70/IsVfcsvkF9HmLBCgnE1B8cf2yMCMixElnlWC9sjtl0BCwJ8zA4wNVUE+lF+e
xzHQG7ck2pHFfQLbOSuUI0RrfjcbfHS0Kt4IMmrToG+oiwELrl22wZckfu7km0xu
JnT7BuO810iBqN7/48ZkCXPHjZIBi23mWykRjjeq1iQG9maMFEp4VylIFSaAUa61
YlEFHTtRJhWz7AUZEbirF4vg5aCrBs3Q81l6QnYNaGarXoJKzAoweHG10wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMIn+iF5+AQ0NsfkCcZUdjQBQimMB8GA1UdIwQY
MBaAFNjWYtzG/juB7z3i/KPPztwR66pDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1Yjct
Nzg1ZTU4ODM2NDRkLzEvOHdpZjZJWG40QkRRMngtUUp4bFIyTkFGQ0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGZmZjUtZGZkOS00MDA4LTk1YjctNzg1ZTU4ODM2NDRk
LzEvMk5aaTNNYi1PNEh2UGVMOG84X08zQkhycWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiRlMA0G
CSqGSIb3DQEBCwUAA4IBAQBuHkkccB8xyFwak7p/er/8deM63rSFh7IopSq+F3nO
ayIjeNYlnNP0J25IvOeErxYrSA0/xKc/ZCOEbH6lEDBwKWQtIbp4mneP445sCsrz
Jnu6jnl2sl6xxYRiNudzVc9ypyDJ3gU3emDZU+Y7m6ydzJpo3HIQU9EzIROXnYv5
Dlig9iZ0upO1IWXcmtGXnOIwXr+7MKq9nx63lL05zfJoD3imuNNeeWuZLZz8lU3g
UnScpFd5oPC9J5pbZIvyXq15Rzgh2xFbvEZPVUIYpSLQdk4X9BUu7heYfGmglfLa
JynnhqZnT3u3RpJRhzpVB6BNUCCa6Eb6UxKpZlTAjig1
-----END CERTIFICATE-----
Generated at Sat Mar 2 12:08:59 2024 by rpki-client on console-fra.rpki-client.org