Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/vPG9RM6k2xaHPwO5aDQNiiPG9R8.roa
File: vPG9RM6k2xaHPwO5aDQNiiPG9R8.roa (raw, json)
Hash identifier: oB8CvW5pxwvgdOyYg194HY3uKVvp7CNfvUPgA0BzXCY=
Subject key identifier: BC:F1:BD:44:CE:A4:DB:16:87:3F:03:B9:68:34:0D:8A:23:C6:F5:1F
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 01856C65ED725BD0A39A6E4DE44762E2A069
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/vPG9RM6k2xaHPwO5aDQNiiPG9R8.roa
Signing time: Sun 01 Jan 2023 08:14:57 +0000
ROA not before: Sun 01 Jan 2023 08:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199997
IP address blocks: 46.245.224.0/21 maxlen: 21
46.245.225.0/24 maxlen: 24
46.245.224.0/24 maxlen: 24
46.245.226.0/24 maxlen: 24
46.245.228.0/24 maxlen: 24
46.245.227.0/24 maxlen: 24
46.245.229.0/24 maxlen: 24
2a01:bfe0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:ed:72:5b:d0:a3:9a:6e:4d:e4:47:62:e2:a0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jan 1 08:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcf1bd44cea4db16873f03b968340d8a23c6f51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fd:5e:58:dd:ee:11:45:72:4e:61:8e:86:4d:
3f:92:3b:80:06:29:87:d4:d4:57:b8:84:e5:3d:c0:
df:92:b5:13:df:64:bd:c2:ea:88:3f:9e:9a:a8:f8:
68:0f:f0:05:91:63:34:d5:42:30:6a:05:0b:0c:35:
a6:bf:2a:27:d1:1c:1d:bb:ac:22:d7:bf:8b:57:34:
56:a6:b8:fb:dc:96:47:8a:ec:69:47:cc:bc:0a:66:
64:79:16:f6:ca:3b:21:5f:76:dc:b9:16:a4:56:03:
4f:d6:e1:a3:7c:1b:cf:9c:fb:67:78:3d:7a:c0:f7:
f3:81:e9:fd:df:6e:15:2d:1d:d5:21:a2:db:70:ee:
14:25:57:2a:e3:df:43:40:1d:16:72:54:b2:57:86:
57:f9:92:1c:ab:1a:cb:17:38:60:b2:45:c9:d9:11:
00:84:02:a3:ba:dd:b5:c6:45:69:9d:7e:ba:d5:cd:
6f:ed:36:fb:10:be:d6:fe:af:25:14:aa:68:8d:ef:
8b:79:80:be:c4:fb:1c:9d:a1:36:c2:d0:eb:08:6a:
81:2a:c4:e6:c6:09:62:91:eb:18:3e:59:10:7e:56:
bb:21:5e:c4:4a:f5:ae:74:f7:f7:07:b2:28:7f:6c:
39:f7:0a:b1:6e:cc:f2:07:50:ae:be:04:fd:48:3e:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:BD:44:CE:A4:DB:16:87:3F:03:B9:68:34:0D:8A:23:C6:F5:1F
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/vPG9RM6k2xaHPwO5aDQNiiPG9R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.224.0/21
IPv6:
2a01:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:45:19:79:c4:b2:ad:04:62:94:f2:ee:37:f1:cd:f9:13:ff:
11:53:60:d2:06:2e:ba:3f:f5:93:cc:fa:73:2d:b8:c0:f8:b4:
66:12:f0:a6:f2:9d:62:9e:41:48:95:9b:bc:43:4d:f9:93:25:
5a:91:72:dc:60:7b:bc:d4:1b:6e:e8:8f:55:a7:11:8a:62:45:
80:d7:0e:dd:92:4d:3f:28:a4:ae:fb:5e:18:ba:b9:7a:f0:1f:
e5:de:5d:e6:e8:36:fc:26:17:5e:ea:f8:32:f6:58:30:3c:f2:
34:13:3c:9e:6f:20:48:11:23:41:87:54:53:bb:86:35:d7:16:
67:bd:4b:da:d3:28:ec:2b:da:18:20:65:d5:b0:db:e6:0d:ae:
cd:aa:78:5c:6a:40:70:d8:8c:46:aa:15:65:43:1e:9c:e8:8f:
55:9f:fc:23:b7:f3:0a:80:43:68:bb:fe:d4:10:db:cc:e1:e5:
4f:b9:9d:86:f6:10:14:f2:98:6e:a1:b4:b2:7b:33:54:f0:07:
00:dc:4b:3c:57:c8:25:e4:1f:64:20:40:e3:38:7e:f2:7f:82:
7a:5c:04:1d:0d:44:d8:18:99:a0:81:e6:be:25:28:66:d8:c3:
26:b1:12:c7:50:27:cc:31:93:4b:2e:7c:7b:72:3f:c6:81:3b:
9d:58:16:8d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsZe1yW9Cjmm5N5Edi4qBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi
Y2Q2OWEwHhcNMjMwMTAxMDgxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2YxYmQ0NGNlYTRkYjE2ODczZjAzYjk2ODM0MGQ4YTIzYzZmNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP1eWN3uEUVyTmGOhk0/kjuABimH
1NRXuITlPcDfkrUT32S9wuqIP56aqPhoD/AFkWM01UIwagULDDWmvyon0Rwdu6wi
17+LVzRWprj73JZHiuxpR8y8CmZkeRb2yjshX3bcuRakVgNP1uGjfBvPnPtneD16
wPfzgen9324VLR3VIaLbcO4UJVcq499DQB0WclSyV4ZX+ZIcqxrLFzhgskXJ2REA
hAKjut21xkVpnX661c1v7Tb7EL7W/q8lFKpoje+LeYC+xPscnaE2wtDrCGqBKsTm
xglikesYPlkQfla7IV7ESvWudPf3B7Iof2w59wqxbszyB1CuvgT9SD7lcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLzxvUTOpNsWhz8DuWg0DYojxvUfMB8GA1UdIwQY
MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt
MWMyMmRhNDRhMjJkLzEvdlBHOVJNNmsyeGFIUHdPNWFEUU5paVBHOVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk
LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLvXgMA0E
AgACMAcDBQAqAb/gMA0GCSqGSIb3DQEBCwUAA4IBAQBMRRl5xLKtBGKU8u438c35
E/8RU2DSBi66P/WTzPpzLbjA+LRmEvCm8p1inkFIlZu8Q035kyVakXLcYHu81Btu
6I9VpxGKYkWA1w7dkk0/KKSu+14Yurl68B/l3l3m6Db8Jhde6vgy9lgwPPI0Ezye
byBIESNBh1RTu4Y11xZnvUva0yjsK9oYIGXVsNvmDa7NqnhcakBw2IxGqhVlQx6c
6I9Vn/wjt/MKgENou/7UENvM4eVPuZ2G9hAU8phuobSyezNU8AcA3Es8V8gl5B9k
IEDjOH7yf4J6XAQdDUTYGJmggea+JShm2MMmsRLHUCfMMZNLLnx7cj/GgTudWBaN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org