Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eOi6uNGfPt7ZduZwA9C24C1tEs.roa
File: 8eOi6uNGfPt7ZduZwA9C24C1tEs.roa (raw, json)
Hash identifier: y48XIZWfQZcNslNXR0UH9W81DXqbv6r6ceHZPe5Cem0=
Subject key identifier: F1:E3:A2:EA:E3:46:7C:FB:7B:65:DB:99:C0:0F:42:DB:80:B5:B4:4B
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E1273FB29932570CA8B82605ED52B
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eOi6uNGfPt7ZduZwA9C24C1tEs.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52468
IP address blocks: 46.29.28.0/24 maxlen: 24
94.125.137.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
201.77.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:12:73:fb:29:93:25:70:ca:8b:82:60:5e:d5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e3a2eae3467cfb7b65db99c00f42db80b5b44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:5b:85:42:1a:69:30:30:54:84:2d:00:0e:
7b:1f:19:af:c0:e7:eb:b8:72:03:f2:2a:a2:25:9b:
2e:56:e7:1f:f3:19:19:61:cf:0a:40:ca:47:4c:3b:
9b:bc:28:65:8d:35:ec:fc:c3:63:94:6c:f0:fd:9a:
e8:23:ea:67:f3:12:c8:0b:28:96:c3:eb:0c:00:30:
78:01:65:5e:8c:fd:79:80:21:a0:03:c9:62:d9:56:
29:c9:d0:8b:fc:4a:70:a5:ed:2a:ce:59:68:8b:12:
df:67:23:ba:ca:35:56:3a:0a:ca:47:ba:f2:bf:41:
2b:79:a1:f7:66:f7:90:d6:09:2a:4b:1b:28:b4:1e:
11:fb:88:35:e7:70:c8:e2:df:b0:92:56:88:12:5e:
7e:8f:f6:69:49:18:cf:a8:c5:2f:22:69:72:dc:82:
1b:2b:53:c3:99:54:f4:78:06:af:ae:79:83:b9:1b:
2c:42:1d:f9:83:54:89:3c:4e:1a:7f:34:93:58:dd:
46:5f:2a:0b:8c:57:92:18:e1:29:93:04:d3:de:69:
36:72:ac:88:5f:c1:e1:a4:96:c2:a0:cf:40:65:36:
72:ce:e5:c2:e0:fa:c1:3b:a1:2b:b2:66:d5:0b:9b:
8a:7d:99:70:54:c3:f0:7e:5c:47:70:ae:8d:81:21:
1b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:A2:EA:E3:46:7C:FB:7B:65:DB:99:C0:0F:42:DB:80:B5:B4:4B
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8eOi6uNGfPt7ZduZwA9C24C1tEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.28.0/24
94.125.137.0/24
201.77.53.0/24
201.77.55.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6d:3b:eb:0f:df:0c:62:d4:66:79:e5:ae:cd:1b:c6:2b:fc:
80:34:81:c4:14:14:8e:10:e2:ce:06:13:4c:97:90:b4:fb:50:
57:45:dd:af:27:7a:26:93:70:68:6a:20:77:43:85:5c:07:1f:
78:c4:ab:03:71:ed:20:7a:2d:4b:a8:d2:e8:f6:d5:7c:7b:88:
7d:0c:76:e0:7d:b7:16:6c:3c:c2:b2:6f:76:71:e6:3b:98:3a:
25:91:7b:fe:cb:5f:f6:7d:2b:72:c4:d1:87:a5:b3:c1:6b:22:
1a:6a:e9:11:d2:fb:ce:26:1a:a5:5c:85:d3:fc:95:76:48:94:
22:f1:fd:83:b8:2f:76:b7:68:3f:ee:7b:0a:4b:b7:d6:5e:01:
e1:25:da:9f:60:94:bd:b9:86:4a:b1:38:94:58:6b:b9:17:db:
50:10:17:9f:09:0e:67:24:d3:67:9a:ce:18:5d:25:2b:bf:2e:
50:87:d0:61:2f:ee:92:1e:1a:46:45:ea:76:e3:e3:6e:c5:c7:
be:7a:71:14:6f:39:2f:39:46:a9:63:e6:7f:a4:68:90:59:19:
26:ea:f8:45:1f:e2:36:d6:15:8d:ef:ba:5e:a5:c4:55:64:f4:
76:e9:8b:90:8b:f0:6c:c2:d0:43:61:0c:21:17:45:44:c4:6e:
dc:d5:e2:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzFbhJz+ymTJXDKi4JgXtUrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwMTAxMTQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWUzYTJlYWUzNDY3Y2ZiN2I2NWRiOTljMDBmNDJkYjgwYjViNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPFbhUIaaTAwVIQtAA57HxmvwOfr
uHID8iqiJZsuVucf8xkZYc8KQMpHTDubvChljTXs/MNjlGzw/ZroI+pn8xLICyiW
w+sMADB4AWVejP15gCGgA8li2VYpydCL/Epwpe0qzlloixLfZyO6yjVWOgrKR7ry
v0EreaH3ZveQ1gkqSxsotB4R+4g153DI4t+wklaIEl5+j/ZpSRjPqMUvImly3IIb
K1PDmVT0eAavrnmDuRssQh35g1SJPE4afzSTWN1GXyoLjFeSGOEpkwTT3mk2cqyI
X8HhpJbCoM9AZTZyzuXC4PrBO6ErsmbVC5uKfZlwVMPwflxHcK6NgSEbsQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPHjourjRnz7e2XbmcAPQtuAtbRLMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvOGVPaTZ1TkdmUHQ3WmR1WndBOUMyNEMxdEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALh0cAwQA
Xn2JAwQAyU01AwQAyU03MA0GCSqGSIb3DQEBCwUAA4IBAQAibTvrD98MYtRmeeWu
zRvGK/yANIHEFBSOEOLOBhNMl5C0+1BXRd2vJ3omk3BoaiB3Q4VcBx94xKsDce0g
ei1LqNLo9tV8e4h9DHbgfbcWbDzCsm92ceY7mDolkXv+y1/2fStyxNGHpbPBayIa
aukR0vvOJhqlXIXT/JV2SJQi8f2DuC92t2g/7nsKS7fWXgHhJdqfYJS9uYZKsTiU
WGu5F9tQEBefCQ5nJNNnms4YXSUrvy5Qh9BhL+6SHhpGRep24+Nuxce+enEUbzkv
OUapY+Z/pGiQWRkm6vhFH+I21hWN77pepcRVZPR26YuQi/BswtBDYQwhF0VExG7c
1eIV
-----END CERTIFICATE-----
Generated at Wed Jan 3 20:26:16 2024 by rpki-client on console-fra.rpki-client.org