Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/PWYTCsAXZ_Pu9coGyyIV4biX-Wo.roa
File: PWYTCsAXZ_Pu9coGyyIV4biX-Wo.roa (raw, json)
Hash identifier: VTr31zrFwgfpXSvEmotomxhqz79IdFQwqi2Z3wAN5gw=
Subject key identifier: 3D:66:13:0A:C0:17:67:F3:EE:F5:CA:06:CB:22:15:E1:B8:97:F9:6A
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01856B8A2914948193D30B67D43499BEDB48
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/PWYTCsAXZ_Pu9coGyyIV4biX-Wo.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44318
IP address blocks: 91.201.144.0/22 maxlen: 23
46.173.96.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:29:14:94:81:93:d3:0b:67:d4:34:99:be:db:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d66130ac01767f3eef5ca06cb2215e1b897f96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:41:7d:25:3e:a5:00:33:f9:6b:95:43:2e:
d9:ec:27:ec:cd:9a:2f:bd:2e:d8:06:f8:fb:e9:7d:
c3:ab:31:0b:56:bd:00:30:6b:c9:40:5c:73:c0:63:
6e:f7:ad:9d:dc:30:7c:90:da:ec:ef:93:eb:df:6c:
89:6b:41:3c:d3:05:d8:27:dc:40:4f:28:b8:0b:b2:
f7:21:38:3a:83:c8:f0:bf:fa:db:12:15:e1:c0:19:
d8:63:b3:69:7c:45:3f:3a:27:8e:f7:f5:2d:81:7b:
60:a5:64:4f:44:cb:00:78:fd:76:da:57:0e:4d:1d:
d7:3f:29:af:8d:ba:fc:90:7b:c6:a9:62:67:db:b7:
5f:f5:5e:2e:9f:8b:bc:51:4c:f0:cf:c0:49:54:cc:
5f:7f:99:4b:0b:ae:8c:37:2c:50:29:e1:1d:93:fc:
3b:9f:c2:86:ee:9f:d9:b6:c2:87:ee:2d:5e:bd:f7:
a1:ea:c5:cb:14:9a:9b:ff:ee:c8:e7:4c:8b:61:f8:
33:7e:8d:eb:69:94:3c:90:53:e4:db:d4:de:1a:aa:
83:6f:7a:0d:f5:bf:ee:83:00:83:e7:e6:39:21:f4:
c6:f6:4f:1d:33:04:43:10:e6:e9:07:6d:34:99:9b:
98:9d:8f:ec:c9:52:2e:9a:54:83:e8:64:28:ad:99:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:66:13:0A:C0:17:67:F3:EE:F5:CA:06:CB:22:15:E1:B8:97:F9:6A
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/PWYTCsAXZ_Pu9coGyyIV4biX-Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.96.0/19
91.201.144.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a1:c5:31:a6:0e:0f:c6:f3:2c:54:dd:85:11:49:fb:cc:2f:
d2:59:2a:a2:1d:2e:5e:a9:38:12:2e:46:0f:0e:39:8a:c7:06:
2e:73:5c:73:54:c1:68:ca:94:1d:37:0c:dd:d6:f2:10:28:04:
04:0c:0c:20:b3:65:bf:02:9a:f7:2c:27:ac:d4:56:6c:f0:7d:
e8:01:7e:31:c5:03:ed:25:6d:22:d5:83:b3:6b:64:63:00:11:
a7:f3:22:ac:c6:d7:68:83:56:8b:7e:09:07:13:07:f6:d8:31:
b1:66:04:77:e0:96:8d:be:ea:63:ab:40:a0:84:0a:5c:06:47:
64:ca:6b:ca:04:d4:56:d4:30:aa:14:7f:1a:6a:80:dd:f3:b4:
42:de:80:d9:49:94:57:5e:a7:84:dd:15:17:8c:7a:f3:4c:03:
88:ee:9d:fa:13:22:46:79:87:a5:0f:11:75:56:1b:00:ec:39:
31:f2:cd:13:d4:10:05:b4:52:05:7c:db:63:e7:0c:3b:4c:76:
b9:16:01:60:df:fa:1d:35:96:39:90:6c:16:5e:33:4d:85:75:
15:0d:63:e9:96:ab:8e:a9:42:b9:52:f0:22:88:83:96:96:dd:
c0:29:0d:2c:d7:d7:cb:c7:ae:a4:af:aa:0d:bc:61:d6:99:23:
fb:cc:e4:80
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVriikUlIGT0wtn1DSZvttIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjMwMTAxMDQxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDY2MTMwYWMwMTc2N2YzZWVmNWNhMDZjYjIyMTVlMWI4OTdmOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu1BfSU+pQAz+WuVQy7Z7CfszZov
vS7YBvj76X3DqzELVr0AMGvJQFxzwGNu962d3DB8kNrs75Pr32yJa0E80wXYJ9xA
Tyi4C7L3ITg6g8jwv/rbEhXhwBnYY7NpfEU/OieO9/UtgXtgpWRPRMsAeP122lcO
TR3XPymvjbr8kHvGqWJn27df9V4un4u8UUzwz8BJVMxff5lLC66MNyxQKeEdk/w7
n8KG7p/ZtsKH7i1evfeh6sXLFJqb/+7I50yLYfgzfo3raZQ8kFPk29TeGqqDb3oN
9b/ugwCD5+Y5IfTG9k8dMwRDEObpB200mZuYnY/syVIumlSD6GQorZn0FwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFD1mEwrAF2fz7vXKBssiFeG4l/lqMB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xL1BXWVRDc0FYWl9QdTljb0d5eUlWNGJpWC1Xby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw
NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAUurWAD
BAJbyZAwDQYJKoZIhvcNAQELBQADggEBAAKhxTGmDg/G8yxU3YURSfvML9JZKqId
Ll6pOBIuRg8OOYrHBi5zXHNUwWjKlB03DN3W8hAoBAQMDCCzZb8CmvcsJ6zUVmzw
fegBfjHFA+0lbSLVg7NrZGMAEafzIqzG12iDVot+CQcTB/bYMbFmBHfglo2+6mOr
QKCEClwGR2TKa8oE1FbUMKoUfxpqgN3ztELegNlJlFdep4TdFReMevNMA4junfoT
IkZ5h6UPEXVWGwDsOTHyzRPUEAW0UgV822PnDDtMdrkWAWDf+h01ljmQbBZeM02F
dRUNY+mWq46pQrlS8CKIg5aW3cApDSzX18vHrqSvqg28YdaZI/vM5IA=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:51 2024 by rpki-client on console-fra.rpki-client.org