Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VeNoLIX78zcpZgFJqwvWfdZUWFs.roa
File: VeNoLIX78zcpZgFJqwvWfdZUWFs.roa (raw, json)
Hash identifier: BCp0yxKe/H9nUT/XSGJBWwY702irxETDXHoaV6vX36E=
Subject key identifier: 55:E3:68:2C:85:FB:F3:37:29:66:01:49:AB:0B:D6:7D:D6:54:58:5B
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018F3368AB9DA2CA1B6ACD95E37E381D5689
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VeNoLIX78zcpZgFJqwvWfdZUWFs.roa
Signing time: Wed 01 May 2024 09:07:28 +0000
ROA not before: Wed 01 May 2024 09:07:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 46.38.154.0/24 maxlen: 24
46.38.156.0/24 maxlen: 24
212.16.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 16:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:68:ab:9d:a2:ca:1b:6a:cd:95:e3:7e:38:1d:56:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: May 1 09:07:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e3682c85fbf33729660149ab0bd67dd654585b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:de:56:c3:f8:f1:6e:5b:7e:b0:9e:04:f8:
8b:fb:ea:f1:35:3a:61:36:0f:09:4d:33:75:09:c1:
db:8a:d3:58:a3:5d:1b:74:b6:a9:a3:28:2b:95:b9:
c8:3f:79:68:53:17:2d:6e:29:10:91:61:7a:12:e5:
d6:1d:9f:9c:71:98:7e:5e:62:d9:3c:cb:d3:b7:bc:
d4:0c:ad:07:91:9f:27:f6:1f:fd:c1:4a:cc:31:40:
ab:0a:29:7f:4a:5b:ba:b6:55:b4:a9:ff:8f:3b:8b:
53:de:a6:86:48:45:98:4e:5c:3b:b4:8a:a1:1e:71:
3d:79:ac:13:f2:3f:52:2f:94:e8:03:d5:60:57:d9:
b7:01:41:11:af:77:4c:56:5e:62:2a:ad:f4:e2:ae:
28:68:7c:d7:01:e6:26:27:2f:8f:64:9a:e4:73:ca:
35:02:7e:a6:b2:3f:1b:da:ae:68:bc:0c:48:a3:8e:
8d:68:be:75:8e:fc:a7:85:3e:3a:87:03:0c:a9:07:
7e:d9:b6:a0:76:e9:21:2c:0d:69:7c:9b:45:a7:76:
8e:ef:74:ea:ad:24:d4:8d:84:91:f4:c9:4a:12:03:
0c:22:fa:74:59:22:d7:48:60:7b:12:1f:8c:f6:98:
fb:8e:68:96:03:bc:c8:14:0d:95:2f:c1:c2:40:f3:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E3:68:2C:85:FB:F3:37:29:66:01:49:AB:0B:D6:7D:D6:54:58:5B
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/VeNoLIX78zcpZgFJqwvWfdZUWFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.154.0/24
46.38.156.0/24
212.16.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e4:ce:10:48:f4:54:a0:be:59:b4:ad:ab:df:6e:04:75:f0:
5e:de:6a:c2:c1:87:0f:96:39:e5:96:d5:6d:df:df:53:53:74:
7d:68:ad:eb:05:0d:50:33:ad:2a:c0:0a:9d:e6:23:ad:75:f3:
4d:9a:16:ae:c3:ac:d9:ee:a7:b7:e2:40:e4:05:29:ae:77:a5:
ac:c0:c8:e6:26:1b:49:ee:45:2b:25:57:e2:23:4c:00:20:8c:
80:bc:63:df:03:ce:92:86:32:98:29:53:e6:98:79:e5:98:d4:
47:21:ab:bf:b6:79:a4:7f:cd:4f:8e:72:25:9e:b1:5e:0c:5f:
96:0f:f1:34:bd:bb:31:52:1e:18:62:c2:7c:b5:e3:67:cb:a7:
d0:00:f2:fa:47:06:21:97:31:a9:0d:eb:22:14:e9:83:5a:df:
73:1e:a1:ed:58:93:71:1c:05:02:2b:fb:99:f4:91:14:ea:fa:
c7:de:df:59:d1:6e:4e:4d:18:7c:7f:8a:e8:6c:7b:5e:bd:ec:
1c:b2:4c:c6:c5:e7:91:84:44:8e:fc:7f:f1:a1:3b:94:46:14:
89:d2:50:44:6c:b8:bc:98:c5:c1:20:4f:c6:c1:ff:91:2f:97:
b4:a6:ad:a4:7a:ef:cd:81:d9:b0:38:94:27:1e:e1:37:ef:33:
a8:6e:19:fe
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY8zaKudosobas2V4344HVaJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwNTAxMDkwNzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWUzNjgyYzg1ZmJmMzM3Mjk2NjAxNDlhYjBiZDY3ZGQ2NTQ1ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbreVsP48W5bfrCeBPiL++rxNTph
Ng8JTTN1CcHbitNYo10bdLapoygrlbnIP3loUxctbikQkWF6EuXWHZ+ccZh+XmLZ
PMvTt7zUDK0HkZ8n9h/9wUrMMUCrCil/Slu6tlW0qf+PO4tT3qaGSEWYTlw7tIqh
HnE9eawT8j9SL5ToA9VgV9m3AUERr3dMVl5iKq304q4oaHzXAeYmJy+PZJrkc8o1
An6msj8b2q5ovAxIo46NaL51jvynhT46hwMMqQd+2bagdukhLA1pfJtFp3aO73Tq
rSTUjYSR9MlKEgMMIvp0WSLXSGB7Eh+M9pj7jmiWA7zIFA2VL8HCQPNpTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFXjaCyF+/M3KWYBSasL1n3WVFhbMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvVmVOb0xJWDc4emNwWmdGSnF3dldmZFpVV0ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaaAwQA
LiacAwQA1BBPMA0GCSqGSIb3DQEBCwUAA4IBAQC05M4QSPRUoL5ZtK2r324EdfBe
3mrCwYcPljnlltVt399TU3R9aK3rBQ1QM60qwAqd5iOtdfNNmhauw6zZ7qe34kDk
BSmud6WswMjmJhtJ7kUrJVfiI0wAIIyAvGPfA86ShjKYKVPmmHnlmNRHIau/tnmk
f81PjnIlnrFeDF+WD/E0vbsxUh4YYsJ8teNny6fQAPL6RwYhlzGpDesiFOmDWt9z
HqHtWJNxHAUCK/uZ9JEU6vrH3t9Z0W5OTRh8f4robHtevewcskzGxeeRhESO/H/x
oTuURhSJ0lBEbLi8mMXBIE/Gwf+RL5e0pq2keu/NgdmwOJQnHuE37zOobhn+
-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:11 2024 by rpki-client on console-ams.rpki-client.org