Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/469NH7EXsY2B1H7EBOdVDbxxBBo.roa
File: 469NH7EXsY2B1H7EBOdVDbxxBBo.roa (raw, json)
Hash identifier: n0KchdOD1WtzAno9RkP1K7zZ8NHMbfPMSSeOu1MKWK4=
Subject key identifier: E3:AF:4D:1F:B1:17:B1:8D:81:D4:7E:C4:04:E7:55:0D:BC:71:04:1A
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01856D661F086D61963396CD8B1F68E0244E
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/469NH7EXsY2B1H7EBOdVDbxxBBo.roa
Signing time: Sun 01 Jan 2023 12:54:47 +0000
ROA not before: Sun 01 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43108
IP address blocks: 178.213.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:1f:08:6d:61:96:33:96:cd:8b:1f:68:e0:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Jan 1 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3af4d1fb117b18d81d47ec404e7550dbc71041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f7:85:6d:73:0b:f5:2c:db:d2:29:93:e9:33:
c1:83:f0:0f:58:cd:19:50:2a:cd:1f:59:0d:aa:12:
9c:8e:70:0c:57:cf:a0:1a:85:20:35:33:3a:96:9f:
aa:35:90:66:ca:40:a4:63:d2:89:a8:04:58:f8:32:
43:88:c6:a1:a0:06:35:25:33:9c:4e:6a:17:da:db:
40:c8:1f:da:72:f7:43:d1:89:76:23:c0:4f:4c:ad:
58:03:98:22:bb:3d:4a:22:b7:8f:a2:27:d1:dd:b6:
d5:ca:cc:ff:df:6f:bd:54:59:6b:34:15:8f:7b:9d:
8a:c1:d0:12:f7:f9:36:a0:24:b1:f5:aa:01:30:c9:
00:13:f5:87:57:d4:85:26:8c:0a:33:f5:65:cf:d6:
9a:77:ff:d3:6d:0a:f2:75:d1:f5:27:7d:14:f9:c1:
75:fe:19:fc:82:06:33:66:e8:aa:d5:3a:45:e9:33:
a7:de:b6:d1:86:5f:7d:6d:45:39:8f:c8:b8:b8:a4:
c1:e5:eb:9c:4d:bc:e3:33:5f:b5:2f:f2:54:b3:8d:
d1:e7:24:99:db:c4:3b:eb:dd:e7:56:1d:06:b6:4e:
2e:1a:c8:48:a3:27:52:66:2f:45:44:3d:61:a8:89:
e2:45:8f:6a:9c:b7:91:f2:67:b4:d4:a2:0c:59:0e:
09:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:4D:1F:B1:17:B1:8D:81:D4:7E:C4:04:E7:55:0D:BC:71:04:1A
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/469NH7EXsY2B1H7EBOdVDbxxBBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.48.0/21
Signature Algorithm: sha256WithRSAEncryption
67:1b:64:81:f8:bc:31:aa:bf:11:a4:9c:c3:d0:46:42:d1:14:
2f:a7:9f:9f:fe:02:e4:25:f9:5a:95:b0:f8:87:0f:92:9d:3f:
28:f2:d7:b1:c2:43:4e:bc:97:c2:2c:7c:9f:83:52:89:5d:29:
61:b4:85:2d:4c:0a:21:7d:43:1d:d2:aa:40:29:50:ae:7b:d5:
01:da:14:03:23:48:74:95:b6:e8:34:e6:42:94:4e:a4:84:eb:
cd:10:8a:11:76:8e:89:42:b8:c0:0d:81:37:1b:69:1a:bc:c4:
c3:fb:3c:39:19:04:13:b4:12:50:e5:e9:30:d3:78:da:a1:20:
ce:49:62:22:64:3a:14:68:42:f2:5b:eb:95:d8:89:eb:4e:ea:
fa:e3:47:01:6b:56:91:50:65:31:20:52:3e:76:95:c4:2c:d1:
3a:50:2b:19:ea:66:02:67:21:e7:9e:0c:72:3d:b0:22:5c:2a:
84:62:c9:c4:85:c1:37:4b:e6:56:4c:e8:72:d9:e3:29:e1:bb:
15:e9:34:4c:c4:64:ed:2f:c7:7f:45:f1:19:03:7f:bd:83:38:
ae:8b:93:e3:3f:78:7a:96:37:01:98:01:4d:39:84:00:94:e6:
2d:dd:34:c2:6a:91:8d:a7:fa:2f:ae:f6:1b:32:91:14:a6:c0:
f8:b9:a5:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtZh8IbWGWM5bNix9o4CROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0
YzA5MzQwHhcNMjMwMTAxMTI1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2FmNGQxZmIxMTdiMThkODFkNDdlYzQwNGU3NTUwZGJjNzEwNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/eFbXML9Szb0imT6TPBg/APWM0Z
UCrNH1kNqhKcjnAMV8+gGoUgNTM6lp+qNZBmykCkY9KJqARY+DJDiMahoAY1JTOc
TmoX2ttAyB/acvdD0Yl2I8BPTK1YA5giuz1KIrePoifR3bbVysz/32+9VFlrNBWP
e52KwdAS9/k2oCSx9aoBMMkAE/WHV9SFJowKM/Vlz9aad//TbQryddH1J30U+cF1
/hn8ggYzZuiq1TpF6TOn3rbRhl99bUU5j8i4uKTB5eucTbzjM1+1L/JUs43R5ySZ
28Q7693nVh0Gtk4uGshIoydSZi9FRD1hqIniRY9qnLeR8me01KIMWQ4JzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOvTR+xF7GNgdR+xATnVQ28cQQaMB8GA1UdIwQY
MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt
MDRkYmM5YWMxNDQ0LzEvNDY5Tkg3RVhzWTJCMUg3RUJPZFZEYnh4QkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0
LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDstUwMA0G
CSqGSIb3DQEBCwUAA4IBAQBnG2SB+Lwxqr8RpJzD0EZC0RQvp5+f/gLkJflalbD4
hw+SnT8o8texwkNOvJfCLHyfg1KJXSlhtIUtTAohfUMd0qpAKVCue9UB2hQDI0h0
lbboNOZClE6khOvNEIoRdo6JQrjADYE3G2kavMTD+zw5GQQTtBJQ5ekw03jaoSDO
SWIiZDoUaELyW+uV2InrTur640cBa1aRUGUxIFI+dpXELNE6UCsZ6mYCZyHnngxy
PbAiXCqEYsnEhcE3S+ZWTOhy2eMp4bsV6TRMxGTtL8d/RfEZA3+9gziui5PjP3h6
ljcBmAFNOYQAlOYt3TTCapGNp/ovrvYbMpEUpsD4uaWj
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:42 2024 by rpki-client on console-ams.rpki-client.org