Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wqbB8dfTkj2CTJY_2b48uFNeuHs.roa
File: wqbB8dfTkj2CTJY_2b48uFNeuHs.roa (raw, json)
Hash identifier: Iq/DeTNhZ6MJzfA3MYXablsspIiJOV4n3XMIkIfHbyk=
Subject key identifier: C2:A6:C1:F1:D7:D3:92:3D:82:4C:96:3F:D9:BE:3C:B8:53:5E:B8:7B
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018DFA322D088C291CE6A64207907C1C3E0B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wqbB8dfTkj2CTJY_2b48uFNeuHs.roa
Signing time: Fri 01 Mar 2024 13:26:48 +0000
ROA not before: Fri 01 Mar 2024 13:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 46.182.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 09:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:fa:32:2d:08:8c:29:1c:e6:a6:42:07:90:7c:1c:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Mar 1 13:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2a6c1f1d7d3923d824c963fd9be3cb8535eb87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3e:80:c3:30:0d:e5:5b:f5:fd:dc:bf:5c:3d:
74:5d:16:21:c4:e7:19:cb:b4:61:d1:1b:af:13:16:
1b:78:b1:a2:5f:83:26:43:88:f8:9f:77:15:b2:32:
04:fa:c9:ef:ba:42:de:8e:b6:57:3c:1f:91:39:55:
c4:50:1c:e1:ca:de:43:5a:ce:66:00:e4:48:41:2b:
34:9a:8a:0c:ad:59:3e:d4:c2:f5:d5:b3:c3:34:49:
43:88:ed:0a:55:de:01:d4:7c:26:17:ab:66:4b:02:
1c:b7:66:ba:88:fa:d6:5c:ab:4b:ce:f4:c3:0a:bd:
5b:58:77:b8:da:42:6f:6a:4c:0b:cd:c0:97:77:06:
0e:3b:8f:57:9b:ea:a8:42:9b:54:38:eb:46:8a:83:
f0:46:cc:43:b8:26:c9:0a:71:a1:e1:bb:80:dc:26:
cd:9f:0a:c2:0b:7c:57:63:8b:92:3e:b5:48:4f:b5:
b5:b8:91:5f:3f:b3:da:57:6e:e8:d8:67:e4:f3:c1:
e6:a7:7f:62:b0:3d:1f:50:eb:13:5a:9e:a0:52:62:
d3:75:57:43:1a:67:ac:56:48:f1:48:f0:82:39:cc:
42:ad:fb:5b:42:d9:c5:fb:f8:91:7b:2c:68:52:22:
44:c7:e5:dd:09:e8:6a:aa:d5:1f:c8:05:3a:88:8d:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:C1:F1:D7:D3:92:3D:82:4C:96:3F:D9:BE:3C:B8:53:5E:B8:7B
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/wqbB8dfTkj2CTJY_2b48uFNeuHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.207.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ae:68:3f:d8:48:79:34:6b:2c:7e:aa:9b:94:66:54:02:c7:
06:7c:e3:ad:b4:be:27:a0:f8:7d:6e:31:01:b0:75:1e:94:cd:
2a:52:ae:03:fe:c3:a7:37:1e:1e:b2:36:94:ae:00:ed:63:e4:
26:7d:d4:b1:82:47:1c:6d:43:f7:09:8c:81:59:64:a3:55:30:
89:89:1c:a6:76:75:17:42:16:33:59:9a:1e:75:d9:a1:9e:9c:
53:11:6f:d7:47:6b:6d:8d:0d:b4:aa:96:36:38:2a:bd:2e:2f:
8a:18:f7:2e:bc:5b:88:c7:dd:e7:b7:24:17:3d:f9:18:6c:ab:
41:a8:85:ea:02:72:85:8c:35:0e:61:7a:be:25:ab:14:5b:a6:
e4:01:0d:f2:87:87:6b:69:1a:1d:6d:05:ef:8c:f1:62:0a:9b:
6d:f9:5b:94:4a:ae:ef:ce:ca:f2:3d:f7:24:4c:68:f3:57:b4:
b5:ea:ec:7f:91:93:1c:d1:51:f3:4e:11:95:0b:5a:c7:4e:3e:
d4:ff:1e:15:64:7c:8f:d4:b2:68:86:c7:11:8f:a7:66:43:cf:
1a:b1:20:b0:2f:41:d8:a7:42:3b:e0:9f:05:48:c0:58:e4:d1:
40:92:fb:b1:19:2f:1c:5d:e5:35:35:8c:1b:06:fb:9c:0a:2e:
3b:22:35:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY36Mi0IjCkc5qZCB5B8HD4LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjQwMzAxMTMyNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmE2YzFmMWQ3ZDM5MjNkODI0Yzk2M2ZkOWJlM2NiODUzNWViODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD6AwzAN5Vv1/dy/XD10XRYhxOcZ
y7Rh0RuvExYbeLGiX4MmQ4j4n3cVsjIE+snvukLejrZXPB+ROVXEUBzhyt5DWs5m
AORIQSs0mooMrVk+1ML11bPDNElDiO0KVd4B1HwmF6tmSwIct2a6iPrWXKtLzvTD
Cr1bWHe42kJvakwLzcCXdwYOO49Xm+qoQptUOOtGioPwRsxDuCbJCnGh4buA3CbN
nwrCC3xXY4uSPrVIT7W1uJFfP7PaV27o2Gfk88Hmp39isD0fUOsTWp6gUmLTdVdD
GmesVkjxSPCCOcxCrftbQtnF+/iReyxoUiJEx+XdCehqqtUfyAU6iI3w+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKmwfHX05I9gkyWP9m+PLhTXrh7MB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvd3FiQjhkZlRrajJDVEpZXzJiNDh1Rk5ldUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALrbPMA0G
CSqGSIb3DQEBCwUAA4IBAQA+rmg/2Eh5NGssfqqblGZUAscGfOOttL4noPh9bjEB
sHUelM0qUq4D/sOnNx4esjaUrgDtY+QmfdSxgkccbUP3CYyBWWSjVTCJiRymdnUX
QhYzWZoeddmhnpxTEW/XR2ttjQ20qpY2OCq9Li+KGPcuvFuIx93ntyQXPfkYbKtB
qIXqAnKFjDUOYXq+JasUW6bkAQ3yh4draRodbQXvjPFiCptt+VuUSq7vzsryPfck
TGjzV7S16ux/kZMc0VHzThGVC1rHTj7U/x4VZHyP1LJohscRj6dmQ88asSCwL0HY
p0I74J8FSMBY5NFAkvuxGS8cXeU1NYwbBvucCi47IjUj
-----END CERTIFICATE-----
Generated at Mon Mar 25 12:45:37 2024 by rpki-client on console-ams.rpki-client.org