Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sawfJjHXAHGXS56qN2woHSOOKFk.roa
File: sawfJjHXAHGXS56qN2woHSOOKFk.roa (raw, json)
Hash identifier: pt8M38boB9O+OaCytqp06BLzHLntUak8aIdCTV0qfmU=
Subject key identifier: B1:AC:1F:26:31:D7:00:71:97:4B:9E:AA:37:6C:28:1D:23:8E:28:59
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018DD526387691F38E35BF64812B6CD071C0
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sawfJjHXAHGXS56qN2woHSOOKFk.roa
Signing time: Fri 23 Feb 2024 08:47:48 +0000
ROA not before: Fri 23 Feb 2024 08:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 46.38.156.0/24 maxlen: 24
185.143.73.0/24 maxlen: 24
212.16.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:26:38:76:91:f3:8e:35:bf:64:81:2b:6c:d0:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Feb 23 08:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ac1f2631d70071974b9eaa376c281d238e2859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:aa:ca:7a:f2:21:e9:0c:30:0b:d0:a5:a4:
2d:22:3c:4a:54:36:75:96:0d:e7:ef:25:7a:33:34:
3b:e1:ef:d7:da:95:46:4c:7a:3b:54:0d:e7:4d:6f:
83:5f:de:5a:d6:e6:35:2e:a6:ca:72:6b:fd:4a:4b:
1a:e6:81:74:a0:e6:e1:0a:c3:7e:2c:ae:68:d5:d3:
bd:52:f8:d8:a8:2d:2d:e1:95:79:fe:6c:89:17:94:
3c:03:f1:4a:45:7e:50:ec:1f:13:0c:ae:d5:17:61:
43:b3:a2:43:e1:4a:96:b2:c4:4a:13:40:06:75:72:
25:4e:ed:f3:ac:26:28:95:3b:65:cc:e7:09:fe:00:
90:37:0a:49:75:c8:84:4a:0e:71:41:e0:02:0d:f1:
5e:39:ac:9e:ab:4d:a8:0f:c4:0b:6b:c0:22:7e:40:
26:e4:8d:6a:86:0c:3a:3e:41:72:15:88:91:77:a4:
4a:be:77:ae:97:80:7d:81:99:d4:0b:5e:78:e7:f4:
28:5b:04:79:d1:39:69:42:59:ae:3e:5d:f7:c9:9d:
40:ab:b6:bf:06:7f:63:c2:e8:e9:51:fa:26:bd:6f:
bf:d0:10:37:e6:5e:16:83:13:0f:bb:0f:c1:ed:2f:
cb:06:1a:25:3b:a9:4a:12:20:c7:55:e8:9f:e0:2e:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:1F:26:31:D7:00:71:97:4B:9E:AA:37:6C:28:1D:23:8E:28:59
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/sawfJjHXAHGXS56qN2woHSOOKFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.156.0/24
185.143.73.0/24
212.16.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:72:da:0d:5c:33:4f:f9:84:89:50:57:40:e2:86:9c:3c:1c:
d3:55:74:c5:c1:05:7c:14:0c:20:31:4a:e0:81:c4:f3:28:c3:
8b:4d:aa:86:fb:21:f8:a0:0c:c2:53:38:55:68:d2:69:43:13:
d4:e8:43:51:12:f6:0a:c2:62:78:40:e2:94:62:0c:9f:6f:35:
a7:31:d7:b6:42:56:7a:8f:f1:ff:75:96:3e:da:9f:da:5e:cb:
53:6e:b5:47:14:3a:30:99:b6:be:04:1f:ce:7c:fd:24:1f:45:
ca:60:e7:00:18:c8:d3:3d:82:07:39:cb:f3:5e:31:33:8e:93:
64:9d:f5:24:b8:d5:5c:10:00:d4:1c:7a:aa:79:b9:4e:6e:6a:
d8:48:01:ea:e6:f9:49:71:51:f7:c6:5b:bf:33:ef:5c:17:42:
d5:29:9f:8d:89:ea:2b:ec:1b:1b:97:24:c8:70:dc:16:c7:8a:
8e:e0:bf:23:a6:03:fa:fc:ea:cf:d4:58:9e:c3:d5:65:16:42:
36:83:c0:42:e2:bf:bf:24:1d:fb:d0:e7:34:57:cb:41:f5:30:
66:ab:df:b2:55:cb:63:a4:09:e7:0d:56:b0:a2:b9:d2:64:05:
93:30:d1:7f:8a:45:6d:d1:35:31:42:65:ce:91:09:9e:9d:fc:
9a:63:1b:bb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY3VJjh2kfOONb9kgSts0HHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjQwMjIzMDg0NzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWFjMWYyNjMxZDcwMDcxOTc0YjllYWEzNzZjMjgxZDIzOGUyODU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQKqynryIekMMAvQpaQtIjxKVDZ1
lg3n7yV6MzQ74e/X2pVGTHo7VA3nTW+DX95a1uY1LqbKcmv9Sksa5oF0oObhCsN+
LK5o1dO9UvjYqC0t4ZV5/myJF5Q8A/FKRX5Q7B8TDK7VF2FDs6JD4UqWssRKE0AG
dXIlTu3zrCYolTtlzOcJ/gCQNwpJdciESg5xQeACDfFeOayeq02oD8QLa8AifkAm
5I1qhgw6PkFyFYiRd6RKvneul4B9gZnUC1545/QoWwR50TlpQlmuPl33yZ1Aq7a/
Bn9jwujpUfomvW+/0BA35l4WgxMPuw/B7S/LBholO6lKEiDHVeif4C7onwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLGsHyYx1wBxl0ueqjdsKB0jjihZMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEvc2F3ZkpqSFhBSEdYUzU2cU4yd29IU09PS0ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiacAwQA
uY9JAwQA1BBcMA0GCSqGSIb3DQEBCwUAA4IBAQChctoNXDNP+YSJUFdA4oacPBzT
VXTFwQV8FAwgMUrggcTzKMOLTaqG+yH4oAzCUzhVaNJpQxPU6ENREvYKwmJ4QOKU
YgyfbzWnMde2QlZ6j/H/dZY+2p/aXstTbrVHFDowmba+BB/OfP0kH0XKYOcAGMjT
PYIHOcvzXjEzjpNknfUkuNVcEADUHHqqeblObmrYSAHq5vlJcVH3xlu/M+9cF0LV
KZ+Nieor7BsblyTIcNwWx4qO4L8jpgP6/OrP1Fiew9VlFkI2g8BC4r+/JB370Oc0
V8tB9TBmq9+yVctjpAnnDVawornSZAWTMNF/ikVt0TUxQmXOkQmenfyaYxu7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:07 2024 by rpki-client on console-ams.rpki-client.org