Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ywPplf0m2B6ZrrT0BKm0RpYtVec.roa
File: ywPplf0m2B6ZrrT0BKm0RpYtVec.roa (raw, json)
Hash identifier: LsD/wwDukDtyNMqfYoz54hmzAO/zxYAeoZwgYMTHIvY=
Subject key identifier: CB:03:E9:95:FD:26:D8:1E:99:AE:B4:F4:04:A9:B4:46:96:2D:55:E7
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0185703992B93475C456942BFE1FBF792447
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ywPplf0m2B6ZrrT0BKm0RpYtVec.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211705
IP address blocks: 46.38.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:92:b9:34:75:c4:56:94:2b:fe:1f:bf:79:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb03e995fd26d81e99aeb4f404a9b446962d55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e8:4f:c4:71:3e:f2:67:f0:47:00:52:aa:1e:
ed:59:ea:36:bb:12:9d:3b:58:d5:ba:9b:57:37:fd:
7d:02:53:c3:2a:fe:0d:c4:85:28:d9:22:33:d0:7e:
86:a1:f3:55:c2:0c:66:9c:42:87:ce:db:5c:3b:1e:
01:6f:7b:a0:fb:e6:ab:2d:8f:ab:44:3e:09:e1:52:
97:37:af:52:78:f9:af:6c:ee:50:c8:8f:32:58:f4:
00:b0:9f:43:ec:29:84:13:e7:dd:36:4d:22:4c:84:
c0:a3:3e:6b:21:30:43:a1:95:3e:62:6c:b0:f5:8a:
e9:fa:47:7b:11:11:6f:60:df:3d:90:44:cf:c8:f3:
04:e8:5f:11:ca:76:cd:b6:3b:43:1a:bc:ac:be:cb:
e8:72:4b:78:e4:a1:fb:46:86:be:6a:e3:b2:4a:43:
b9:54:82:35:50:30:f6:a4:e1:0f:72:c8:29:fc:1f:
7f:5a:a5:83:42:fd:89:94:23:dc:e3:ec:2e:94:4b:
ea:49:75:a2:c7:2b:72:94:ee:6b:04:9a:66:1e:ad:
96:61:25:58:d7:92:1a:8b:4c:94:cd:c4:60:ee:7c:
5c:cd:c1:6e:bb:3c:af:da:69:55:28:6d:92:94:e6:
62:a7:d1:24:26:7a:eb:ce:4b:3e:35:8d:7d:7f:09:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:03:E9:95:FD:26:D8:1E:99:AE:B4:F4:04:A9:B4:46:96:2D:55:E7
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ywPplf0m2B6ZrrT0BKm0RpYtVec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bc:9e:a4:64:5f:60:b1:ba:99:25:d0:88:3e:8b:62:6c:9b:
a8:04:1b:4e:23:60:79:ea:87:a7:12:84:12:31:d3:49:f2:f5:
d4:4d:70:5a:5d:1a:1a:85:c5:78:e9:7d:a8:64:2e:ae:1b:ea:
98:02:96:fa:5f:1f:7b:90:bb:dc:05:f7:59:18:7d:3f:0c:38:
26:2e:b9:f8:89:d2:3e:8c:ef:1b:b4:73:23:4b:67:75:aa:7a:
90:cd:c9:2b:d6:df:80:53:1c:7c:81:2b:7c:1d:69:a2:62:3e:
ec:96:b5:02:3d:c7:e8:04:8e:d3:ef:50:3d:85:d0:19:14:b7:
de:5c:4f:f8:4b:19:37:36:43:41:5e:a8:3c:ae:f0:b1:e9:53:
ae:b5:dc:cf:dd:38:0a:fa:70:91:bd:08:ea:a7:74:b0:2b:20:
21:c6:5a:e2:91:5f:6a:a5:d1:78:10:1e:dc:e1:b1:b7:1f:eb:
b9:e6:5d:e4:91:f5:ff:f1:7f:05:d9:bb:ba:b7:37:57:5d:75:
d2:d7:10:69:19:ec:58:e4:72:72:79:ff:a8:3d:d9:10:3e:d9:
bc:5d:e2:31:fa:59:9a:1f:12:92:7a:52:93:f9:4b:4e:9f:8b:
69:b0:08:62:de:8b:01:9d:65:84:05:0e:0c:4a:ca:72:fe:e9:
26:89:d5:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOZK5NHXEVpQr/h+/eSRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj
NWY0MzAwHhcNMjMwMTAyMDIwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjAzZTk5NWZkMjZkODFlOTlhZWI0ZjQwNGE5YjQ0Njk2MmQ1NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuhPxHE+8mfwRwBSqh7tWeo2uxKd
O1jVuptXN/19AlPDKv4NxIUo2SIz0H6GofNVwgxmnEKHzttcOx4Bb3ug++arLY+r
RD4J4VKXN69SePmvbO5QyI8yWPQAsJ9D7CmEE+fdNk0iTITAoz5rITBDoZU+Ymyw
9Yrp+kd7ERFvYN89kETPyPME6F8RynbNtjtDGrysvsvockt45KH7Roa+auOySkO5
VII1UDD2pOEPcsgp/B9/WqWDQv2JlCPc4+wulEvqSXWixytylO5rBJpmHq2WYSVY
15Iai0yUzcRg7nxczcFuuzyv2mlVKG2SlOZip9EkJnrrzks+NY19fwm3IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsD6ZX9Jtgema609ASptEaWLVXnMB8GA1UdIwQY
MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt
MmEwOWNjNTNhODA1LzEveXdQcGxmMG0yQjZacnJUMEJLbTBScFl0VmVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1
LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiafMA0G
CSqGSIb3DQEBCwUAA4IBAQB7vJ6kZF9gsbqZJdCIPotibJuoBBtOI2B56oenEoQS
MdNJ8vXUTXBaXRoahcV46X2oZC6uG+qYApb6Xx97kLvcBfdZGH0/DDgmLrn4idI+
jO8btHMjS2d1qnqQzckr1t+AUxx8gSt8HWmiYj7slrUCPcfoBI7T71A9hdAZFLfe
XE/4Sxk3NkNBXqg8rvCx6VOutdzP3TgK+nCRvQjqp3SwKyAhxlrikV9qpdF4EB7c
4bG3H+u55l3kkfX/8X8F2bu6tzdXXXXS1xBpGexY5HJyef+oPdkQPtm8XeIx+lma
HxKSelKT+UtOn4tpsAhi3osBnWWEBQ4MSspy/ukmidV9
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:58 2024 by rpki-client on console-fra.rpki-client.org