Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PQTikqso5qsM-qhYKv8PNtHeRZY.roa
File: PQTikqso5qsM-qhYKv8PNtHeRZY.roa (raw, json)
Hash identifier: akIpcwr9jTEsD7fla79CAUXqOYybrLO4Eoxa0z1ZWOM=
Subject key identifier: 3D:04:E2:92:AB:28:E6:AB:0C:FA:A8:58:2A:FF:0F:36:D1:DE:45:96
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018FF708EA5E322AA68AFE49CD53E5E108B9
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PQTikqso5qsM-qhYKv8PNtHeRZY.roa
Signing time: Sat 08 Jun 2024 08:48:27 +0000
ROA not before: Sat 08 Jun 2024 08:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.182.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 07:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f7:08:ea:5e:32:2a:a6:8a:fe:49:cd:53:e5:e1:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jun 8 08:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d04e292ab28e6ab0cfaa8582aff0f36d1de4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:29:c9:3b:f8:76:6e:0d:c7:81:16:25:e8:
be:39:c3:5f:b3:30:28:13:1b:3f:6c:08:87:d9:ff:
6f:fa:0f:32:60:b5:79:a9:cf:45:8f:b3:4a:55:2e:
ab:0f:68:3f:63:39:14:c8:ef:a3:52:ae:1b:cc:43:
20:cc:9e:d3:74:fa:57:d5:b5:09:fc:1a:84:78:e2:
54:f1:99:f3:53:a8:8f:93:80:c6:7b:52:aa:c7:60:
80:05:3f:6a:5b:f5:5a:b5:a4:da:99:5d:8d:70:ba:
e8:bb:84:91:a9:db:59:04:76:2d:30:b7:8e:82:cb:
31:86:7d:1e:83:d0:a2:c4:b5:73:14:5a:9d:88:f4:
71:c6:4a:77:fe:97:a8:9f:2e:11:f3:72:9b:52:dd:
69:f3:52:b6:72:08:bd:21:7d:09:82:6c:9a:21:1a:
c6:4c:b1:ae:b0:1b:cf:21:4e:bf:b8:f1:ef:15:de:
2b:66:1b:00:6a:d7:88:65:41:ee:29:b1:aa:ce:b8:
ec:d6:3d:ee:9c:bd:85:5f:58:e4:4b:10:19:a4:0c:
80:ea:31:1a:df:81:b3:6b:dd:2d:eb:16:0e:e9:70:
19:64:7d:94:77:d7:a5:e9:65:c8:7a:21:00:77:c9:
bf:80:56:5c:7f:d3:37:a5:48:bc:ca:be:b7:f8:8c:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:E2:92:AB:28:E6:AB:0C:FA:A8:58:2A:FF:0F:36:D1:DE:45:96
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/PQTikqso5qsM-qhYKv8PNtHeRZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ad:53:7e:0d:8f:e7:ba:9c:86:1a:9b:fc:8c:83:b7:07:fa:
6c:3b:92:06:09:39:92:04:41:cf:71:3f:e2:07:e4:e6:31:e1:
9f:aa:ab:c0:12:fa:94:90:e9:59:64:1a:86:7a:3f:b9:89:7c:
ba:eb:9e:92:19:77:58:c2:7f:58:37:4e:4d:0c:29:9d:21:b8:
cc:1c:dc:02:99:d2:fa:88:b9:9c:df:65:c7:8e:d6:c0:34:ed:
ff:c0:c4:20:e9:63:25:61:7a:27:40:3a:49:9a:ba:e0:6c:f7:
de:14:d8:64:03:2c:1b:b8:34:c5:c4:47:9c:d0:26:8d:eb:0e:
84:5e:44:46:0f:ee:0b:62:33:f3:1b:84:50:09:67:a3:71:49:
2e:d2:14:c8:fe:8c:cc:34:93:aa:32:ff:59:f3:07:e8:29:ea:
c7:c1:36:39:31:0a:49:a7:00:bb:53:cb:fd:c0:5f:7a:eb:db:
32:0e:ba:90:39:73:0d:02:d2:62:54:31:c3:ce:13:6b:19:25:
95:f7:3c:00:68:e3:71:64:82:2e:35:2e:4f:be:db:18:bd:be:
6c:fb:12:6b:6f:c5:79:54:0a:f7:ce:95:bc:18:0a:e0:32:6a:
32:bc:ea:d2:4d:67:2d:3b:d0:4b:ac:45:73:27:fe:99:4a:91:
6b:20:bf:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/3COpeMiqmiv5JzVPl4Qi5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjQwNjA4MDg0ODI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDA0ZTI5MmFiMjhlNmFiMGNmYWE4NTgyYWZmMGYzNmQxZGU0NTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxYpyTv4dm4Nx4EWJei+OcNfszAo
Exs/bAiH2f9v+g8yYLV5qc9Fj7NKVS6rD2g/YzkUyO+jUq4bzEMgzJ7TdPpX1bUJ
/BqEeOJU8ZnzU6iPk4DGe1Kqx2CABT9qW/VataTamV2NcLrou4SRqdtZBHYtMLeO
gssxhn0eg9CixLVzFFqdiPRxxkp3/peony4R83KbUt1p81K2cgi9IX0JgmyaIRrG
TLGusBvPIU6/uPHvFd4rZhsAateIZUHuKbGqzrjs1j3unL2FX1jkSxAZpAyA6jEa
34Gza90t6xYO6XAZZH2Ud9el6WXIeiEAd8m/gFZcf9M3pUi8yr63+IyHnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0E4pKrKOarDPqoWCr/DzbR3kWWMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvUFFUaWtxc281cXNNLXFoWUt2OFBOdEhlUlpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALrbPMA0G
CSqGSIb3DQEBCwUAA4IBAQAqrVN+DY/nupyGGpv8jIO3B/psO5IGCTmSBEHPcT/i
B+TmMeGfqqvAEvqUkOlZZBqGej+5iXy6656SGXdYwn9YN05NDCmdIbjMHNwCmdL6
iLmc32XHjtbANO3/wMQg6WMlYXonQDpJmrrgbPfeFNhkAywbuDTFxEec0CaN6w6E
XkRGD+4LYjPzG4RQCWejcUku0hTI/ozMNJOqMv9Z8wfoKerHwTY5MQpJpwC7U8v9
wF9669syDrqQOXMNAtJiVDHDzhNrGSWV9zwAaONxZIIuNS5PvtsYvb5s+xJrb8V5
VAr3zpW8GArgMmoyvOrSTWctO9BLrEVzJ/6ZSpFrIL8v
-----END CERTIFICATE-----
Generated at Wed Jun 12 10:56:00 2024 by rpki-client on console-ams.rpki-client.org