Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OZc3shaZyXh_QkC6tbeyBWkX1Cg.roa
File: OZc3shaZyXh_QkC6tbeyBWkX1Cg.roa (raw, json)
Hash identifier: 1lBmskyrG6BjKhks3H7P3ZVmxzYwFdo8cMtXcpZ7pwc=
Subject key identifier: 39:97:37:B2:16:99:C9:78:7F:42:40:BA:B5:B7:B2:05:69:17:D4:28
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018BFB51C4C198E46DD2DC2C818C2A96BCB6
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OZc3shaZyXh_QkC6tbeyBWkX1Cg.roa
Signing time: Thu 23 Nov 2023 08:35:21 +0000
ROA not before: Thu 23 Nov 2023 08:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 46.17.73.0/24 maxlen: 24
46.17.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:51:c4:c1:98:e4:6d:d2:dc:2c:81:8c:2a:96:bc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Nov 23 08:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=399737b21699c9787f4240bab5b7b2056917d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:2c:2c:c1:f1:56:79:bc:00:16:01:fa:b3:
d7:22:2b:b3:c5:96:25:be:83:a0:0d:e8:fa:ec:51:
e2:b1:f5:1f:ab:c3:84:97:ac:1a:db:d1:36:dd:af:
89:d8:84:0a:47:e8:05:4c:eb:92:89:2d:d9:9b:e6:
84:23:7b:dc:34:c8:f7:03:3f:f2:7c:9b:49:e0:47:
d4:ce:94:28:ea:02:32:5c:ae:f0:9d:6c:cc:31:ac:
c1:c0:6a:9d:6f:de:77:49:1d:1f:0a:2a:d0:1c:b8:
ff:07:ef:bd:0a:7d:ea:03:d6:6e:10:43:57:d2:d9:
fc:d1:f7:00:6d:e1:87:b7:47:a1:88:9b:7f:9d:bc:
a8:42:b3:05:a7:5a:9c:12:63:43:0c:69:bd:4e:85:
49:ed:46:3e:e7:29:0c:9f:3c:ad:ec:48:a2:1a:83:
7c:1b:2e:94:63:09:0b:c0:3f:62:c3:23:15:f9:61:
fb:44:24:57:cf:cc:65:f5:79:2b:3c:b5:f0:54:87:
6a:01:8c:2c:cc:73:1b:5b:84:40:61:30:2c:7b:23:
1f:7f:11:61:25:f3:12:ca:47:75:aa:66:b9:4c:ee:
a7:c8:82:f4:c0:1d:55:93:10:c0:84:c1:f2:c9:f1:
8d:84:6a:e4:22:b3:12:85:69:a5:84:da:a7:31:4b:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:37:B2:16:99:C9:78:7F:42:40:BA:B5:B7:B2:05:69:17:D4:28
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OZc3shaZyXh_QkC6tbeyBWkX1Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:0d:14:c2:16:5c:97:9e:2e:cc:5c:fa:d9:8d:4d:45:b6:83:
f0:36:5f:90:15:15:e4:d5:4b:0f:32:5c:d8:2a:98:76:e2:f0:
be:cc:24:48:09:45:4e:39:ab:18:89:6e:6d:76:9b:a4:0e:b4:
85:1c:92:df:42:bc:c0:91:c9:17:a0:43:43:2a:58:36:37:49:
3e:62:ed:e8:82:c7:0f:60:ca:89:93:33:72:e0:5f:19:45:95:
f6:78:d2:bb:cd:29:c2:f4:ec:72:08:b7:9d:65:d6:9c:3d:16:
68:84:e4:c8:1c:6f:69:0e:3d:0f:a7:72:d5:8b:87:19:f4:0d:
a0:c1:eb:44:03:30:0f:53:13:cc:a9:f0:2b:38:52:21:b0:df:
1c:97:98:c0:ce:e0:04:01:cc:7f:48:43:ae:23:f0:26:e3:2f:
fd:c6:6c:bb:e6:25:15:55:9e:e6:3a:d2:30:0d:c5:0a:e3:62:
93:71:33:69:3b:9a:db:e9:7f:a1:73:66:b6:13:b6:55:a5:1f:
20:63:79:c8:72:4e:5b:37:7c:47:7f:84:46:be:29:47:74:88:
ce:28:25:9b:bc:d7:d4:73:6a:cf:65:3b:d0:a3:2a:06:d0:92:
e0:2c:e7:88:46:f8:05:c9:8b:c1:07:bf:4c:d2:dc:eb:b2:4c:
73:0c:60:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYv7UcTBmORt0twsgYwqlry2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjMxMTIzMDgzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTk3MzdiMjE2OTljOTc4N2Y0MjQwYmFiNWI3YjIwNTY5MTdkNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhAsLMHxVnm8ABYB+rPXIiuzxZYl
voOgDej67FHisfUfq8OEl6wa29E23a+J2IQKR+gFTOuSiS3Zm+aEI3vcNMj3Az/y
fJtJ4EfUzpQo6gIyXK7wnWzMMazBwGqdb953SR0fCirQHLj/B++9Cn3qA9ZuEENX
0tn80fcAbeGHt0ehiJt/nbyoQrMFp1qcEmNDDGm9ToVJ7UY+5ykMnzyt7EiiGoN8
Gy6UYwkLwD9iwyMV+WH7RCRXz8xl9XkrPLXwVIdqAYwszHMbW4RAYTAseyMffxFh
JfMSykd1qma5TO6nyIL0wB1VkxDAhMHyyfGNhGrkIrMShWmlhNqnMUuR1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmXN7IWmcl4f0JAurW3sgVpF9QoMB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvT1pjM3NoYVp5WGhfUWtDNnRiZXlCV2tYMUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhFIMA0G
CSqGSIb3DQEBCwUAA4IBAQA9DRTCFlyXni7MXPrZjU1FtoPwNl+QFRXk1UsPMlzY
Kph24vC+zCRICUVOOasYiW5tdpukDrSFHJLfQrzAkckXoENDKlg2N0k+Yu3ogscP
YMqJkzNy4F8ZRZX2eNK7zSnC9OxyCLedZdacPRZohOTIHG9pDj0Pp3LVi4cZ9A2g
wetEAzAPUxPMqfArOFIhsN8cl5jAzuAEAcx/SEOuI/Am4y/9xmy75iUVVZ7mOtIw
DcUK42KTcTNpO5rb6X+hc2a2E7ZVpR8gY3nIck5bN3xHf4RGvilHdIjOKCWbvNfU
c2rPZTvQoyoG0JLgLOeIRvgFyYvBB79M0tzrskxzDGBX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org