Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/VsPHBdMBM_UvKIrPFBWBaV982C4.roa
File: VsPHBdMBM_UvKIrPFBWBaV982C4.roa (raw, json)
Hash identifier: Fy0UQGfwxzOqwl6TbWuVr4AoZFoXPLLCMu2lKYlSTRY=
Subject key identifier: 56:C3:C7:05:D3:01:33:F5:2F:28:8A:CF:14:15:81:69:5F:7C:D8:2E
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 01856C413A8FCBE0610BE7F3CF91CD68BA0B
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/VsPHBdMBM_UvKIrPFBWBaV982C4.roa
Signing time: Sun 01 Jan 2023 07:34:52 +0000
ROA not before: Sun 01 Jan 2023 07:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35562
IP address blocks: 46.174.240.0/21 maxlen: 21
195.189.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:3a:8f:cb:e0:61:0b:e7:f3:cf:91:cd:68:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Jan 1 07:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56c3c705d30133f52f288acf141581695f7cd82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:60:29:fa:3f:db:22:93:63:4c:0d:84:ff:
06:b2:10:39:96:48:c1:d8:e8:40:4f:e3:f4:0d:e7:
c5:a9:e1:80:78:3a:8b:63:0c:a4:84:d6:dd:56:57:
24:c0:09:4e:61:ed:85:2a:f7:9d:c3:82:59:35:f3:
db:e5:eb:06:1c:27:3b:b0:c3:8f:7d:1c:8c:52:67:
03:01:dd:99:d6:60:3f:00:84:34:ca:74:ed:7d:50:
7e:76:4b:c8:5e:a1:c6:4b:b2:21:70:8d:76:18:c6:
67:cc:ec:56:9e:f4:5f:ac:02:01:93:28:cf:cd:82:
62:36:74:2b:5e:a0:1b:ef:08:08:04:db:66:b5:76:
bf:66:45:2e:ec:07:8a:9a:42:cb:86:bb:37:50:e4:
92:b3:24:27:b3:17:c6:9f:8f:cf:63:f3:a6:9b:27:
58:5c:d7:3d:96:59:d0:0a:95:c0:57:2b:2b:77:7b:
68:9d:d1:2c:48:f8:47:3f:4e:25:59:39:f9:14:4a:
e3:70:57:f7:8e:8c:57:fc:f3:aa:9e:04:5e:d4:15:
59:70:c9:b5:6e:a0:b9:b2:2a:1d:4d:09:d3:76:68:
7d:67:8e:d3:57:2f:dc:8e:60:ae:29:ad:dd:9d:f2:
1c:d5:6a:d6:20:84:28:80:6a:ec:02:69:87:30:16:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C3:C7:05:D3:01:33:F5:2F:28:8A:CF:14:15:81:69:5F:7C:D8:2E
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/VsPHBdMBM_UvKIrPFBWBaV982C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.240.0/21
195.189.248.0/23
Signature Algorithm: sha256WithRSAEncryption
19:75:8c:29:40:a1:e0:08:67:dc:3e:af:5c:c1:c0:a4:ea:7a:
71:51:3e:76:c0:86:08:8a:6c:09:6e:98:84:53:71:ad:9e:a5:
4a:c2:f5:77:a2:8b:fb:da:a2:ef:38:36:f7:04:03:66:65:54:
19:b0:14:77:1a:9a:49:c1:06:4e:b0:19:c8:7c:c9:22:14:88:
cf:34:8d:92:84:12:ed:20:5b:1f:81:f7:9a:d0:88:71:9e:57:
fc:30:b8:10:b3:41:c0:a9:86:56:cd:7f:5a:c0:9f:de:9f:c5:
4d:84:df:e7:f4:e4:a4:26:29:7a:39:a1:d0:11:11:49:75:4d:
6f:89:d6:76:fc:16:67:51:51:00:68:5e:c6:07:39:19:f7:f1:
95:31:2b:83:4d:a8:b1:cf:7f:19:1e:99:8b:df:fb:5a:31:fa:
d0:75:17:61:d8:be:35:64:d3:18:c7:58:c3:2a:a5:58:64:57:
3f:39:eb:fe:5d:a3:59:b1:2e:2b:7e:73:20:3e:69:94:5c:05:
09:61:da:af:2d:37:ea:be:3b:a8:3b:96:33:12:00:d1:87:2b:
6e:3c:28:f3:c8:05:67:f0:d0:a5:16:a1:73:21:50:26:21:7a:
1d:a4:63:3c:a8:08:c3:f5:01:9d:10:58:2c:5a:08:6e:a6:a3:
a7:c4:fa:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsQTqPy+BhC+fzz5HNaLoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTZmYTk5OWU4YTY3NGFhNTMzMmRlYjcxZjFiYWQwMjQ1
YzhkYzEwHhcNMjMwMTAxMDczNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmMzYzcwNWQzMDEzM2Y1MmYyODhhY2YxNDE1ODE2OTVmN2NkODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1gKfo/2yKTY0wNhP8GshA5lkjB
2OhAT+P0DefFqeGAeDqLYwykhNbdVlckwAlOYe2FKvedw4JZNfPb5esGHCc7sMOP
fRyMUmcDAd2Z1mA/AIQ0ynTtfVB+dkvIXqHGS7IhcI12GMZnzOxWnvRfrAIBkyjP
zYJiNnQrXqAb7wgIBNtmtXa/ZkUu7AeKmkLLhrs3UOSSsyQnsxfGn4/PY/OmmydY
XNc9llnQCpXAVysrd3tondEsSPhHP04lWTn5FErjcFf3joxX/POqngRe1BVZcMm1
bqC5siodTQnTdmh9Z47TVy/cjmCuKa3dnfIc1WrWIIQogGrsAmmHMBZNGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFbDxwXTATP1LyiKzxQVgWlffNguMB8GA1UdIwQY
MBaAFDym+pmeimdKpTMt63HxutAkXI3BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2Mt
MTUyYjBhYmQ3YzBjLzEvVnNQSEJkTUJNX1V2S0lyUEZCV0JhVjk4MkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mOTdkM2QtZWQ2NC00MGI3LThiN2MtMTUyYjBhYmQ3YzBj
LzEvUEtiNm1aNktaMHFsTXkzcmNmRzYwQ1JjamNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLq7wAwQB
w734MA0GCSqGSIb3DQEBCwUAA4IBAQAZdYwpQKHgCGfcPq9cwcCk6npxUT52wIYI
imwJbpiEU3GtnqVKwvV3oov72qLvODb3BANmZVQZsBR3GppJwQZOsBnIfMkiFIjP
NI2ShBLtIFsfgfea0Ihxnlf8MLgQs0HAqYZWzX9awJ/en8VNhN/n9OSkJil6OaHQ
ERFJdU1vidZ2/BZnUVEAaF7GBzkZ9/GVMSuDTaixz38ZHpmL3/taMfrQdRdh2L41
ZNMYx1jDKqVYZFc/Oev+XaNZsS4rfnMgPmmUXAUJYdqvLTfqvjuoO5YzEgDRhytu
PCjzyAVn8NClFqFzIVAmIXodpGM8qAjD9QGdEFgsWghupqOnxPqQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:08 2024 by rpki-client on console-ams.rpki-client.org