Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/VbQxcsXKTyk_RJznjg_uapIz9Fg.roa
File: VbQxcsXKTyk_RJznjg_uapIz9Fg.roa (raw, json)
Hash identifier: jKMgeP/cgFOsMlNk/l7ZTnvMPFj0QdAPJarBIushroA=
Subject key identifier: 55:B4:31:72:C5:CA:4F:29:3F:44:9C:E7:8E:0F:EE:6A:92:33:F4:58
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 0187C81DB051021765801D418C4F9918F90B
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/VbQxcsXKTyk_RJznjg_uapIz9Fg.roa
Signing time: Fri 28 Apr 2023 13:46:41 +0000
ROA not before: Fri 28 Apr 2023 13:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44694
IP address blocks: 46.16.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:1d:b0:51:02:17:65:80:1d:41:8c:4f:99:18:f9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Apr 28 13:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55b43172c5ca4f293f449ce78e0fee6a9233f458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:83:3b:a6:2f:74:bc:c2:aa:ef:4a:1f:75:
a1:d9:bc:66:b5:3c:56:c2:8c:c9:6a:6c:ee:8d:30:
03:df:07:ab:af:ed:52:69:e3:65:40:9d:cb:92:48:
d3:d0:b3:27:45:84:4f:ae:0d:eb:ba:74:85:5b:ee:
97:f0:4c:db:35:fc:4a:4a:db:1d:10:47:40:96:1f:
b3:24:78:82:8f:9f:25:43:14:c2:37:e8:f3:12:db:
9b:b1:96:f0:da:b4:5a:07:b1:1f:d7:db:9f:fe:af:
c6:45:74:bf:ee:5f:68:f1:b1:c5:e3:c1:ff:18:a1:
39:8e:cd:5c:d6:c9:d7:bb:40:a6:9f:53:3b:11:ad:
80:42:10:0b:75:e3:b3:41:72:e0:07:a6:da:f7:c9:
bd:a6:ac:7b:3b:61:8b:7e:26:1c:7a:e5:a3:0f:7a:
25:06:a4:e6:11:1e:9c:6a:92:fe:fe:a4:3f:06:59:
70:32:7e:3f:45:41:2b:d7:90:94:0c:93:a9:2c:84:
76:70:90:e4:20:a9:93:c0:1c:c0:30:7d:a2:c9:e3:
2a:b8:5a:10:bc:5d:c7:62:94:c4:e0:8e:58:2d:1e:
57:c7:b7:72:81:6e:35:f1:55:59:5f:bd:02:c4:fc:
6a:0f:14:26:8d:76:cc:8e:cd:1c:47:47:e3:da:4b:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B4:31:72:C5:CA:4F:29:3F:44:9C:E7:8E:0F:EE:6A:92:33:F4:58
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/VbQxcsXKTyk_RJznjg_uapIz9Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.38.0/24
Signature Algorithm: sha256WithRSAEncryption
af:fe:77:0d:cb:2b:22:07:a7:f1:5f:65:a0:8d:05:6d:33:2c:
5f:81:17:d3:1f:91:04:8d:2e:cb:1a:0e:99:a5:b1:61:07:58:
d7:eb:44:ea:99:c6:b6:63:d8:a8:0d:20:da:f1:28:fe:6a:2d:
c4:6b:1a:70:bf:8b:e7:06:68:f1:03:80:f1:1b:d3:79:53:28:
bd:0e:66:a8:6b:dd:b8:8b:fc:c6:52:ec:3b:84:82:a7:35:bf:
34:b1:43:51:a8:d3:20:2d:c8:59:6c:18:26:1c:a9:1b:54:33:
f4:92:39:49:25:58:07:ab:c6:96:0f:32:91:5e:ba:37:f4:3a:
bc:48:95:57:5f:3d:ae:d7:57:19:db:aa:65:90:e0:1c:86:78:
db:64:13:e3:da:6a:93:2b:23:b6:1a:4b:61:e5:a6:2b:ba:25:
0a:e6:57:a7:b6:d6:ca:44:db:84:4d:f9:2e:ff:ac:63:54:f1:
17:c3:1d:13:ba:6b:5f:5f:36:6a:f6:54:ce:ca:37:83:ad:27:
c9:5a:32:0f:47:ce:ca:d2:52:94:15:81:2f:fa:56:dd:84:5b:
78:06:38:98:58:2c:bc:85:c6:06:cc:6b:55:7b:a6:e7:dd:33:
7e:70:40:18:82:d1:d5:7c:50:f2:78:1b:94:24:48:f1:4b:1f:
c4:b0:0d:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfIHbBRAhdlgB1BjE+ZGPkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjMwNDI4MTM0NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWI0MzE3MmM1Y2E0ZjI5M2Y0NDljZTc4ZTBmZWU2YTkyMzNmNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqWDO6YvdLzCqu9KH3Wh2bxmtTxW
wozJamzujTAD3werr+1SaeNlQJ3LkkjT0LMnRYRPrg3runSFW+6X8EzbNfxKStsd
EEdAlh+zJHiCj58lQxTCN+jzEtubsZbw2rRaB7Ef19uf/q/GRXS/7l9o8bHF48H/
GKE5js1c1snXu0Cmn1M7Ea2AQhALdeOzQXLgB6ba98m9pqx7O2GLfiYceuWjD3ol
BqTmER6capL+/qQ/BllwMn4/RUEr15CUDJOpLIR2cJDkIKmTwBzAMH2iyeMquFoQ
vF3HYpTE4I5YLR5Xx7dygW418VVZX70CxPxqDxQmjXbMjs0cR0fj2ktXMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFW0MXLFyk8pP0Sc544P7mqSM/RYMB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvVmJReGNzWEtUeWtfUkp6bmpnX3VhcEl6OUZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhAmMA0G
CSqGSIb3DQEBCwUAA4IBAQCv/ncNyysiB6fxX2WgjQVtMyxfgRfTH5EEjS7LGg6Z
pbFhB1jX60Tqmca2Y9ioDSDa8Sj+ai3Eaxpwv4vnBmjxA4DxG9N5Uyi9Dmaoa924
i/zGUuw7hIKnNb80sUNRqNMgLchZbBgmHKkbVDP0kjlJJVgHq8aWDzKRXro39Dq8
SJVXXz2u11cZ26plkOAchnjbZBPj2mqTKyO2Gkth5aYruiUK5lenttbKRNuETfku
/6xjVPEXwx0TumtfXzZq9lTOyjeDrSfJWjIPR87K0lKUFYEv+lbdhFt4BjiYWCy8
hcYGzGtVe6bn3TN+cEAYgtHVfFDyeBuUJEjxSx/EsA0c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org