Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WI3v-vNy_Rg_iHdVupPVmipYKvc.roa
File: WI3v-vNy_Rg_iHdVupPVmipYKvc.roa (raw, json)
Hash identifier: slX02OBAj7eqPl005Rrkdyn6wUBfj+8mJjty8bV52Io=
Subject key identifier: 58:8D:EF:FA:F3:72:FD:18:3F:88:77:55:BA:93:D5:9A:2A:58:2A:F7
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 018571D7E8E736E7D13850341382849F4F67
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WI3v-vNy_Rg_iHdVupPVmipYKvc.roa
Signing time: Mon 02 Jan 2023 09:37:33 +0000
ROA not before: Mon 02 Jan 2023 09:37:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48618
IP address blocks: 46.246.32.0/23 maxlen: 24
46.246.10.0/23 maxlen: 24
2a00:1a28:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:e8:e7:36:e7:d1:38:50:34:13:82:84:9f:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 2 09:37:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588deffaf372fd183f887755ba93d59a2a582af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:c7:93:4e:13:1c:a9:f1:6d:ed:49:a2:a7:
78:f6:a3:c0:22:b1:66:c0:68:20:e5:23:d0:62:4a:
bd:53:06:63:d6:3b:bf:25:fc:36:d1:9c:33:d0:0e:
e4:73:e7:5d:a9:b8:47:20:5d:99:c9:e4:5a:9b:4d:
49:c2:5d:73:cd:da:42:5e:23:d9:a6:24:30:48:8e:
cd:9b:ff:91:6e:09:a6:85:e4:52:db:70:46:bf:19:
4d:56:7b:a7:30:e6:e6:1d:a5:b4:d8:0e:4c:53:dc:
c3:ec:2e:97:cc:6a:94:e8:55:76:08:57:4b:29:ab:
82:76:d7:a5:ca:49:d8:a5:45:81:b2:90:ae:cd:50:
b9:ce:51:e1:1a:5c:ab:61:51:92:7c:5a:56:68:c9:
cf:5f:37:e4:63:be:8a:a3:37:36:5c:d3:f6:23:b0:
a3:4e:5e:bc:4a:08:06:ea:54:d4:e1:63:29:22:2b:
f3:43:3b:9e:07:48:bf:73:4e:07:f6:d2:3d:52:22:
b3:47:0b:fe:1d:16:4f:b6:aa:2f:ad:1d:21:5b:30:
36:58:73:7e:b7:d0:f5:13:ca:58:e4:99:b8:84:92:
64:c5:8c:e2:06:ee:a1:f7:45:60:28:a2:b2:e8:65:
42:55:fb:a2:db:ea:fb:0c:a6:be:72:10:bb:25:5e:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:EF:FA:F3:72:FD:18:3F:88:77:55:BA:93:D5:9A:2A:58:2A:F7
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/WI3v-vNy_Rg_iHdVupPVmipYKvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.246.10.0/23
46.246.32.0/23
IPv6:
2a00:1a28:100::/48
Signature Algorithm: sha256WithRSAEncryption
3e:0a:7f:8e:aa:4b:0c:53:a8:b9:9c:23:e8:ac:3a:e2:6e:43:
8d:6f:87:84:23:d4:d0:ff:4b:9f:2c:15:59:4b:69:63:27:39:
dd:0c:ea:e0:3d:49:10:bc:29:8c:d9:d4:5e:0c:9b:08:92:ce:
9e:eb:7d:fe:4a:0a:65:16:fc:78:b5:55:5f:d4:ba:9a:8a:c4:
61:23:36:bf:a8:b8:59:a1:9a:bb:ed:ce:6e:b6:9b:3f:02:80:
58:c0:a3:7b:aa:59:3c:1c:c2:9f:7a:11:3f:d1:9d:95:3f:84:
1c:a0:5c:b4:0f:59:44:13:8a:b2:1c:fa:ee:6a:6d:fc:0d:32:
07:dd:72:fc:ea:b2:88:d9:14:0a:f8:09:64:76:29:15:8a:0d:
7e:1b:3e:bf:c4:54:3e:90:fe:60:1b:ed:cc:ea:11:bb:e0:9d:
b6:8f:ad:17:19:5c:cb:bf:f2:39:d1:3b:46:4a:08:3e:36:fa:
61:02:1f:76:d2:ee:19:af:e3:95:d4:4f:bb:f5:65:c1:1c:b8:
93:90:4a:d7:3b:5f:7a:62:12:7c:0f:af:c5:16:26:26:16:34:
f8:fb:48:ef:7c:9b:aa:eb:b5:8f:f2:4d:64:1f:5d:7e:de:40:
df:c6:7c:c7:e9:1d:55:8f:73:08:e9:2d:1f:ac:ba:f0:21:07:
6b:d6:81:02
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVx1+jnNufROFA0E4KEn09nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjMwMTAyMDkzNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODhkZWZmYWYzNzJmZDE4M2Y4ODc3NTViYTkzZDU5YTJhNTgyYWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUnHk04THKnxbe1Joqd49qPAIrFm
wGgg5SPQYkq9UwZj1ju/Jfw20Zwz0A7kc+ddqbhHIF2ZyeRam01Jwl1zzdpCXiPZ
piQwSI7Nm/+RbgmmheRS23BGvxlNVnunMObmHaW02A5MU9zD7C6XzGqU6FV2CFdL
KauCdtelyknYpUWBspCuzVC5zlHhGlyrYVGSfFpWaMnPXzfkY76Kozc2XNP2I7Cj
Tl68SggG6lTU4WMpIivzQzueB0i/c04H9tI9UiKzRwv+HRZPtqovrR0hWzA2WHN+
t9D1E8pY5Jm4hJJkxYziBu6h90VgKKKy6GVCVfui2+r7DKa+chC7JV4MvwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFiN7/rzcv0YP4h3VbqT1ZoqWCr3MB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvV0kzdi12TnlfUmdfaUhkVnVwUFZtaXBZS3ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLvYKAwQB
LvYgMA8EAgACMAkDBwAqABooAQAwDQYJKoZIhvcNAQELBQADggEBAD4Kf46qSwxT
qLmcI+isOuJuQ41vh4Qj1ND/S58sFVlLaWMnOd0M6uA9SRC8KYzZ1F4MmwiSzp7r
ff5KCmUW/Hi1VV/UupqKxGEjNr+ouFmhmrvtzm62mz8CgFjAo3uqWTwcwp96ET/R
nZU/hBygXLQPWUQTirIc+u5qbfwNMgfdcvzqsojZFAr4CWR2KRWKDX4bPr/EVD6Q
/mAb7czqEbvgnbaPrRcZXMu/8jnRO0ZKCD42+mECH3bS7hmv45XUT7v1ZcEcuJOQ
Stc7X3piEnwPr8UWJiYWNPj7SO98m6rrtY/yTWQfXX7eQN/GfMfpHVWPcwjpLR+s
uvAhB2vWgQI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:17 2024 by rpki-client on console-fra.rpki-client.org