Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ABt1RzyKGymvIt-BlWdqkG4hjGk.roa
File: ABt1RzyKGymvIt-BlWdqkG4hjGk.roa (raw, json)
Hash identifier: xL83LLzzm+7etLJr6HPaxOz9C0sJoRRs6Mf1Phv6jAY=
Subject key identifier: 00:1B:75:47:3C:8A:1B:29:AF:22:DF:81:95:67:6A:90:6E:21:8C:69
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018C84A135F50DC90D48A9096C9DE00DE3E8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ABt1RzyKGymvIt-BlWdqkG4hjGk.roa
Signing time: Wed 20 Dec 2023 00:30:06 +0000
ROA not before: Wed 20 Dec 2023 00:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44881
IP address blocks: 46.161.12.0/23 maxlen: 23
5.8.56.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
37.139.48.0/23 maxlen: 23
5.188.222.0/24 maxlen: 24
146.185.244.0/23 maxlen: 23
91.243.62.0/23 maxlen: 23
46.161.42.0/24 maxlen: 24
5.8.16.0/24 maxlen: 24
5.8.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:84:a1:35:f5:0d:c9:0d:48:a9:09:6c:9d:e0:0d:e3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Dec 20 00:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=001b75473c8a1b29af22df8195676a906e218c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:f9:d9:2c:c8:99:4b:cb:64:80:77:ac:16:
68:8b:8f:b2:8f:21:14:a9:cd:13:7e:06:a7:54:17:
27:1a:b1:93:fb:ab:bf:8f:72:b4:5e:f6:bf:f9:a3:
09:c7:1b:26:f2:77:bd:7f:d8:cf:bf:09:44:79:80:
b2:d2:5e:88:f0:cb:9f:94:25:57:bf:69:41:f6:b6:
9d:ae:33:03:d5:c2:61:64:57:9e:d6:9b:f9:69:36:
ee:5e:2d:7c:fc:72:b4:0d:f7:4f:29:44:32:2c:14:
77:8c:7f:a1:b7:da:ea:b5:18:ec:1d:19:4e:52:17:
9a:02:82:4d:3b:71:6b:1c:6d:ee:d8:28:96:20:4c:
d0:fd:1c:21:d4:67:c0:5a:7a:70:33:90:d9:a0:27:
14:10:20:39:7c:8f:a5:8c:32:2e:c3:06:58:bb:63:
a8:6e:cf:f1:4a:db:24:f7:c5:5e:8d:48:4f:1a:c0:
30:2a:c2:45:3c:d3:62:11:d4:4c:50:9d:b6:db:01:
b9:ac:18:af:87:c2:be:9d:55:03:35:a0:8f:80:13:
44:3a:e2:3d:e5:0a:f9:bc:34:5a:5f:65:17:a8:fd:
ce:5c:4b:5b:3c:2e:c5:a3:39:59:0c:a7:05:a7:3f:
af:16:ed:8f:fd:96:d0:d6:7b:84:79:cb:17:78:b2:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:75:47:3C:8A:1B:29:AF:22:DF:81:95:67:6A:90:6E:21:8C:69
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ABt1RzyKGymvIt-BlWdqkG4hjGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.16.0/24
5.8.19.0/24
5.8.56.0/23
5.188.222.0/24
37.139.48.0/23
46.161.12.0/23
46.161.20.0/22
46.161.42.0/24
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:83:05:6f:4c:cb:4e:ca:88:b5:57:18:cb:a4:da:ea:46:9b:
01:f4:96:79:2d:23:fb:33:91:35:3e:fb:ba:10:bf:d6:ee:a0:
e4:eb:a7:ad:78:64:85:58:c2:92:21:f0:f3:ee:e4:2b:e7:51:
33:76:6c:51:b0:0f:99:9e:36:fd:b2:b1:43:c4:8f:12:0a:3d:
66:f5:64:b5:1d:19:b5:0d:89:42:f9:32:ea:98:56:9a:0e:10:
26:3a:63:43:e3:94:30:7a:93:55:ac:1a:ec:c6:82:2d:1d:dc:
00:c9:8f:1d:c4:32:ae:26:8b:93:54:16:9f:3b:8c:fb:1b:71:
3a:57:d6:ff:35:f3:a1:43:3f:0c:81:46:8c:d1:37:f5:0b:9e:
e1:23:ad:ef:1c:ae:ab:6a:81:13:72:68:1e:a1:21:71:86:32:
b8:6f:47:a7:ac:10:fc:f4:c4:0f:35:b0:93:dd:c4:91:e8:41:
17:6e:a3:f3:03:7c:e1:e7:e3:d1:22:8e:18:1c:fe:60:66:27:
0b:83:c9:5d:20:7c:53:34:ea:bb:8d:d1:3b:31:0c:c1:97:f1:
dc:7a:21:a6:97:19:3a:cb:3b:91:92:78:8e:10:44:87:fe:6a:
2e:82:46:ea:44:22:25:7c:a3:0e:31:c7:d7:27:f0:5a:d9:ca:
24:82:5b:47
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYyEoTX1DckNSKkJbJ3gDePoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMxMjIwMDAzMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDFiNzU0NzNjOGExYjI5YWYyMmRmODE5NTY3NmE5MDZlMjE4YzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUP52SzImUvLZIB3rBZoi4+yjyEU
qc0TfganVBcnGrGT+6u/j3K0Xva/+aMJxxsm8ne9f9jPvwlEeYCy0l6I8MuflCVX
v2lB9radrjMD1cJhZFee1pv5aTbuXi18/HK0DfdPKUQyLBR3jH+ht9rqtRjsHRlO
UheaAoJNO3FrHG3u2CiWIEzQ/Rwh1GfAWnpwM5DZoCcUECA5fI+ljDIuwwZYu2Oo
bs/xStsk98VejUhPGsAwKsJFPNNiEdRMUJ222wG5rBivh8K+nVUDNaCPgBNEOuI9
5Qr5vDRaX2UXqP3OXEtbPC7FozlZDKcFpz+vFu2P/ZbQ1nuEecsXeLJ9PwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFAAbdUc8ihspryLfgZVnapBuIYxpMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvQUJ0MVJ6eUtHeW12SXQtQmxXZHFrRzRoakdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABQgQAwQA
BQgTAwQBBQg4AwQABbzeAwQBJYswAwQBLqEMAwQCLqEUAwQALqEqAwQBW/M+AwQB
krn0MA0GCSqGSIb3DQEBCwUAA4IBAQDIgwVvTMtOyoi1VxjLpNrqRpsB9JZ5LSP7
M5E1Pvu6EL/W7qDk66eteGSFWMKSIfDz7uQr51EzdmxRsA+Znjb9srFDxI8SCj1m
9WS1HRm1DYlC+TLqmFaaDhAmOmND45QwepNVrBrsxoItHdwAyY8dxDKuJouTVBaf
O4z7G3E6V9b/NfOhQz8MgUaM0Tf1C57hI63vHK6raoETcmgeoSFxhjK4b0enrBD8
9MQPNbCT3cSR6EEXbqPzA3zh5+PRIo4YHP5gZicLg8ldIHxTNOq7jdE7MQzBl/Hc
eiGmlxk6yzuRkniOEESH/mougkbqRCIlfKMOMcfXJ/Ba2cokgltH
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:47 2024 by rpki-client on console-ams.rpki-client.org