Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oG-0kZOeNbYA8WQis8aZsdVLuxg.roa
File: oG-0kZOeNbYA8WQis8aZsdVLuxg.roa (raw, json)
Hash identifier: 7HY6JPBnNH5ju9e0O/kB2yUXeYEeiyfs4GTCxBPIdwI=
Subject key identifier: A0:6F:B4:91:93:9E:35:B6:00:F1:64:22:B3:C6:99:B1:D5:4B:BB:18
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42D5217D28AB3DE62908F9435556CC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oG-0kZOeNbYA8WQis8aZsdVLuxg.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47843
IP address blocks: 46.209.145.0/24 maxlen: 24
46.209.146.0/24 maxlen: 24
46.209.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d5:21:7d:28:ab:3d:e6:29:08:f9:43:55:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06fb491939e35b600f16422b3c699b1d54bbb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:46:76:89:17:e6:94:c8:8e:51:a8:6c:9e:
b0:45:d0:6e:5d:e3:4d:33:80:54:43:dd:86:f2:e9:
5b:d9:ce:43:2b:7f:7d:24:e3:7b:1c:af:52:6d:bd:
4e:88:0d:97:c4:27:ee:db:7e:94:61:8f:98:96:fa:
d2:ca:c8:b1:da:34:11:cd:8e:c4:53:b9:fc:2a:9e:
6d:1f:13:d2:b7:3a:87:0d:69:6b:e4:fc:4d:a1:e8:
96:7c:38:56:ea:df:30:9b:e5:3b:89:f5:44:38:f2:
1b:ff:2c:f6:d1:b2:ae:ae:0b:62:58:4b:1f:93:e0:
42:f4:7c:0d:37:c4:91:5d:95:96:43:e6:99:d6:3f:
b8:f0:25:e9:15:e2:81:b1:89:ab:3e:b4:d4:81:bf:
0f:d3:c7:09:8f:04:05:30:43:25:d8:7e:cc:c7:dd:
9d:b0:54:dd:23:4c:14:fb:2f:5e:08:d5:90:42:27:
7f:62:8c:46:d6:51:97:d5:30:78:a6:65:a8:e2:6c:
c1:8c:61:dd:26:df:87:02:7c:3e:29:f9:25:b8:82:
d8:f9:bc:65:99:a4:03:06:4e:4c:52:e0:b3:f8:f7:
a1:29:1d:32:7b:78:5e:26:96:22:e6:25:18:46:f7:
ff:8e:82:54:50:57:8c:59:41:33:e7:c0:88:3f:d1:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:B4:91:93:9E:35:B6:00:F1:64:22:B3:C6:99:B1:D5:4B:BB:18
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/oG-0kZOeNbYA8WQis8aZsdVLuxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.145.0-46.209.147.255
Signature Algorithm: sha256WithRSAEncryption
93:4f:98:c5:bf:c0:6f:db:d0:75:66:b5:1a:8b:6f:01:e5:15:
41:dc:0f:d0:16:f8:84:4e:c1:be:79:3e:4f:82:77:40:d4:0c:
94:0f:51:8d:cb:c8:80:e1:41:f8:65:02:3b:36:0f:38:02:60:
c0:51:d5:c3:f6:1e:47:9c:13:72:bc:f6:d8:b2:83:6d:45:61:
a5:5b:19:7c:e6:17:d5:8c:e8:c5:5e:58:7b:b3:ca:ee:3e:22:
fd:55:41:30:d1:d7:2e:50:a3:a0:de:26:ef:80:97:28:52:46:
f3:17:24:44:d1:85:7d:13:08:e9:04:db:01:32:db:61:9c:68:
6f:c8:bb:a6:3e:df:df:32:c9:53:3b:66:f0:3c:6f:ef:24:94:
be:1b:25:95:2d:04:b9:17:97:d0:dc:4b:16:e4:ce:21:72:e4:
30:f1:e1:86:fb:11:6f:79:f0:6e:88:a1:ff:9b:9e:68:9f:20:
37:82:75:8b:d6:26:a1:67:8d:22:0c:8e:05:ae:30:5c:f4:b7:
da:a4:82:70:a9:be:8f:30:02:af:b9:b4:c4:c0:ac:9f:f4:27:
1e:dd:df:0c:82:0a:b4:d6:1d:a0:0d:95:ab:81:74:d9:78:16:
42:fe:1d:44:4f:2c:ef:9d:43:fc:37:41:fd:50:f2:ba:52:f9:
d1:23:67:c0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvQtUhfSirPeYpCPlDVVbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjMwMTAxMjEzNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDZmYjQ5MTkzOWUzNWI2MDBmMTY0MjJiM2M2OTliMWQ1NGJiYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkANGdokX5pTIjlGobJ6wRdBuXeNN
M4BUQ92G8ulb2c5DK399JON7HK9Sbb1OiA2XxCfu236UYY+YlvrSysix2jQRzY7E
U7n8Kp5tHxPStzqHDWlr5PxNoeiWfDhW6t8wm+U7ifVEOPIb/yz20bKurgtiWEsf
k+BC9HwNN8SRXZWWQ+aZ1j+48CXpFeKBsYmrPrTUgb8P08cJjwQFMEMl2H7Mx92d
sFTdI0wU+y9eCNWQQid/YoxG1lGX1TB4pmWo4mzBjGHdJt+HAnw+KfkluILY+bxl
maQDBk5MUuCz+PehKR0ye3heJpYi5iUYRvf/joJUUFeMWUEz58CIP9GKgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKBvtJGTnjW2APFkIrPGmbHVS7sYMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvb0ctMGtaT2VOYllBOFdRaXM4YVpzZFZMdXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAu0ZED
BAIu0ZAwDQYJKoZIhvcNAQELBQADggEBAJNPmMW/wG/b0HVmtRqLbwHlFUHcD9AW
+IROwb55Pk+Cd0DUDJQPUY3LyIDhQfhlAjs2DzgCYMBR1cP2HkecE3K89tiyg21F
YaVbGXzmF9WM6MVeWHuzyu4+Iv1VQTDR1y5Qo6DeJu+AlyhSRvMXJETRhX0TCOkE
2wEy22GcaG/Iu6Y+398yyVM7ZvA8b+8klL4bJZUtBLkXl9DcSxbkziFy5DDx4Yb7
EW958G6Iof+bnmifIDeCdYvWJqFnjSIMjgWuMFz0t9qkgnCpvo8wAq+5tMTArJ/0
Jx7d3wyCCrTWHaANlauBdNl4FkL+HURPLO+dQ/w3Qf1Q8rpS+dEjZ8A=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org