Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/b0BY1mT6CR3X1NzBGMS7P3Tdz-Q.roa
File: b0BY1mT6CR3X1NzBGMS7P3Tdz-Q.roa (raw, json)
Hash identifier: 0qqEKjShlozq5agDv0N7ZYZXN1BOfKVRXb4xeYOV2f8=
Subject key identifier: 6F:40:58:D6:64:FA:09:1D:D7:D4:DC:C1:18:C4:BB:3F:74:DD:CF:E4
Certificate issuer: /CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Certificate serial: 018B3DA2E16CE3EF2154150181655AA12BA9
Authority key identifier: DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/b0BY1mT6CR3X1NzBGMS7P3Tdz-Q.roa
Signing time: Tue 17 Oct 2023 12:36:06 +0000
ROA not before: Tue 17 Oct 2023 12:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216139
IP address blocks: 46.30.42.0/24 maxlen: 24
46.30.43.0/24 maxlen: 24
46.30.41.0/24 maxlen: 24
46.30.47.0/24 maxlen: 24
46.30.45.0/24 maxlen: 24
46.30.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:a2:e1:6c:e3:ef:21:54:15:01:81:65:5a:a1:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Validity
Not Before: Oct 17 12:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f4058d664fa091dd7d4dcc118c4bb3f74ddcfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:2c:be:e1:cd:3a:ba:1a:f5:4e:c6:68:c8:
ff:3c:aa:4a:9d:f6:62:5c:70:d8:0c:9f:a5:f5:ad:
9d:6d:64:89:3c:7c:72:c8:97:17:ee:28:f5:ff:5e:
19:ea:91:33:e3:a7:e1:12:9e:88:29:94:d4:80:09:
eb:ac:f0:fb:2f:e3:88:72:24:e5:c8:58:c6:6a:13:
2d:7f:dc:11:2d:f3:fd:72:61:83:be:85:d9:a0:2d:
07:39:ea:9f:8b:db:ae:e3:7b:24:a7:0b:ac:69:20:
54:f0:4c:a0:24:32:06:f2:07:a5:13:3a:f2:32:8d:
c3:51:98:f8:22:8e:75:b9:fb:26:71:42:03:4e:75:
eb:5e:2a:6a:08:e9:f8:92:02:14:11:70:02:c4:a2:
5c:ca:25:47:a4:be:a6:17:86:97:2d:9e:0c:8a:8a:
a7:e7:d1:01:28:38:2b:4a:f3:0c:c0:b8:a9:1d:66:
39:6e:2d:56:cc:ed:b7:e5:92:50:8c:8b:3b:c8:bd:
ff:3f:27:30:d6:01:2a:3b:69:be:b5:6f:5c:f4:c3:
08:88:de:bb:fb:80:cd:6b:f7:31:43:87:ba:26:0b:
0e:56:1e:f3:88:64:0c:de:a5:ff:ed:ce:77:41:ca:
fd:fb:1f:d1:8c:1f:80:60:40:4d:63:bb:ac:0d:3a:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:40:58:D6:64:FA:09:1D:D7:D4:DC:C1:18:C4:BB:3F:74:DD:CF:E4
X509v3 Authority Key Identifier:
keyid:DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/b0BY1mT6CR3X1NzBGMS7P3Tdz-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.41.0-46.30.43.255
46.30.45.0-46.30.47.255
Signature Algorithm: sha256WithRSAEncryption
2a:5b:ba:32:4f:92:5c:00:ba:c2:35:54:97:ca:77:60:b5:c9:
f9:70:12:57:23:e0:e6:5d:77:a6:48:97:7b:c9:5a:3c:af:3a:
41:05:f8:ec:b2:c6:44:c6:e2:8c:80:e7:2b:c4:25:3e:63:7d:
b8:b6:ba:18:e6:08:80:9d:c3:7d:c1:7d:05:2b:fe:41:e2:a1:
6c:d2:f7:da:43:c8:4c:3b:2b:20:5f:d2:5b:c7:7f:f3:3e:4b:
44:0e:9d:b6:90:d7:d4:23:80:46:3e:33:71:2a:0d:d5:9b:c9:
53:f1:ec:07:55:3f:bc:12:8f:49:98:20:68:7a:78:f5:d2:e3:
5c:c8:d9:a0:9b:03:37:95:4d:2a:ec:ad:05:bc:e0:4e:69:7d:
66:ee:0d:5a:b1:03:88:99:29:1e:75:c5:ea:c3:d6:1d:a0:5a:
e7:4d:dd:71:69:9c:0a:32:93:93:34:33:12:10:09:cb:8b:b9:
5b:49:49:39:38:e6:9c:ea:f1:eb:fe:c7:f2:b6:db:ee:4e:fe:
2b:7a:65:5a:1b:a8:9f:66:6e:6a:b3:50:96:71:18:e1:29:cc:
46:35:30:3b:bb:e5:0d:c8:86:ec:e3:1e:94:7a:6c:bd:24:a7:
7d:bc:d4:0d:dd:b2:7f:25:3d:05:f7:13:c6:a8:e3:a0:5c:34:
18:5a:63:51
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYs9ouFs4+8hVBUBgWVaoSupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzhmMmZmOThmNjEwZmU4MzgzMGQxODkxOGY0YzkwMzcy
NzI0MTEwHhcNMjMxMDE3MTIzNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQwNThkNjY0ZmEwOTFkZDdkNGRjYzExOGM0YmIzZjc0ZGRjZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspAsvuHNOroa9U7GaMj/PKpKnfZi
XHDYDJ+l9a2dbWSJPHxyyJcX7ij1/14Z6pEz46fhEp6IKZTUgAnrrPD7L+OIciTl
yFjGahMtf9wRLfP9cmGDvoXZoC0HOeqfi9uu43skpwusaSBU8EygJDIG8gelEzry
Mo3DUZj4Io51ufsmcUIDTnXrXipqCOn4kgIUEXACxKJcyiVHpL6mF4aXLZ4Mioqn
59EBKDgrSvMMwLipHWY5bi1WzO235ZJQjIs7yL3/Pycw1gEqO2m+tW9c9MMIiN67
+4DNa/cxQ4e6JgsOVh7ziGQM3qX/7c53Qcr9+x/RjB+AYEBNY7usDTq5yQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFG9AWNZk+gkd19TcwRjEuz903c/kMB8GA1UdIwQY
MBaAFNvI8v+Y9hD+g4MNGJGPTJA3JyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAt
ZWQzOGY2NDllMzlmLzEvYjBCWTFtVDZDUjNYMU56QkdNUzdQM1Rkei1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAtZWQzOGY2NDllMzlm
LzEvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAAuHikD
BAIuHigwDAMEAC4eLQMEBC4eIDANBgkqhkiG9w0BAQsFAAOCAQEAKlu6Mk+SXAC6
wjVUl8p3YLXJ+XASVyPg5l13pkiXe8laPK86QQX47LLGRMbijIDnK8QlPmN9uLa6
GOYIgJ3DfcF9BSv+QeKhbNL32kPITDsrIF/SW8d/8z5LRA6dtpDX1COARj4zcSoN
1ZvJU/HsB1U/vBKPSZggaHp49dLjXMjZoJsDN5VNKuytBbzgTml9Zu4NWrEDiJkp
HnXF6sPWHaBa503dcWmcCjKTkzQzEhAJy4u5W0lJOTjmnOrx6/7H8rbb7k7+K3pl
Whuon2ZuarNQlnEY4SnMRjUwO7vlDciG7OMelHpsvSSnfbzUDd2yfyU9BfcTxqjj
oFw0GFpjUQ==
-----END CERTIFICATE-----
Generated at Tue Oct 17 15:38:03 2023 by rpki-client on console-fra.rpki-client.org