Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/a1NFWSJ_V9eyCzkICSiYNsoOavc.roa
File: a1NFWSJ_V9eyCzkICSiYNsoOavc.roa (raw, json)
Hash identifier: ExOckQ+YG0vzjd0ZIiehnY5gWpBfgLliQ0UuwSZLRHs=
Subject key identifier: 6B:53:45:59:22:7F:57:D7:B2:0B:39:08:09:28:98:36:CA:0E:6A:F7
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A13A63FB47A243111562B5FD17A1B
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/a1NFWSJ_V9eyCzkICSiYNsoOavc.roa
Signing time: Sun 01 Jan 2023 04:14:49 +0000
ROA not before: Sun 01 Jan 2023 04:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208965
IP address blocks: 46.229.59.0/24 maxlen: 24
46.229.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:13:a6:3f:b4:7a:24:31:11:56:2b:5f:d1:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b534559227f57d7b20b390809289836ca0e6af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:c9:da:20:9e:78:98:f8:0f:84:c1:98:7f:
35:fc:d5:f1:7e:ee:e4:f9:d2:ce:61:0e:7f:74:da:
8f:42:5b:5a:2e:99:78:49:08:4f:91:df:b0:3c:b3:
58:98:bb:6f:df:3e:be:e1:29:2d:e7:46:08:33:c2:
5b:d6:5c:29:12:e4:e5:92:3d:fc:ac:00:63:45:a4:
e7:c6:56:54:67:c5:2a:c6:78:f0:6f:6b:ff:87:73:
28:b5:cc:11:ac:83:5b:3f:50:b3:01:56:2a:c1:cc:
b8:64:67:86:ff:7c:3f:45:7e:54:c6:fe:24:32:32:
2b:a1:4e:c1:44:42:b0:19:1a:b8:b5:ed:5c:4b:fc:
3e:06:3c:3f:26:f7:5f:c5:93:d0:21:4c:bf:bd:ce:
5d:d2:2a:f6:ea:a9:b6:d3:98:c5:42:32:04:ba:8c:
5a:d1:54:b2:5d:99:f2:20:12:d5:06:3c:5f:a9:80:
6e:a0:de:dc:87:3d:d7:c8:e2:d1:a2:6b:d1:c7:44:
11:3f:f4:44:35:86:33:8e:f4:6b:20:b2:62:90:28:
95:48:95:d8:66:82:37:88:6d:69:73:0e:ab:85:ad:
ab:8a:1b:85:a6:cd:7b:d2:64:1a:08:cb:7b:23:47:
d2:50:b4:c1:79:07:09:0b:9c:11:20:27:8c:d6:f7:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:45:59:22:7F:57:D7:B2:0B:39:08:09:28:98:36:CA:0E:6A:F7
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/a1NFWSJ_V9eyCzkICSiYNsoOavc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.59.0/24
46.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
11:40:c3:15:aa:60:eb:f1:1f:c7:44:28:f8:c2:3d:68:47:6e:
30:8d:66:57:c6:28:0a:66:12:e8:95:84:8a:9c:d1:8e:4f:34:
e5:7e:ce:f8:4b:c8:cf:aa:f1:25:f9:d4:0f:d5:0e:09:4e:97:
d2:f4:c9:d5:da:f5:cc:ef:36:ac:df:ae:85:67:6a:5d:41:19:
ec:54:e1:7b:f9:7c:cc:b3:49:f9:87:de:66:73:3d:82:b6:7a:
f0:ab:ae:c9:d0:b6:32:fc:ee:50:45:08:e9:52:1f:a1:97:3c:
0d:15:7c:d0:06:82:4d:fd:88:dd:73:6e:6b:10:ba:86:ba:47:
85:6b:8d:d7:c3:c4:80:b1:18:a8:1a:e7:3e:58:15:9c:ed:bf:
51:4e:7d:09:13:b3:c6:aa:ad:53:a2:fd:3a:77:6a:56:44:5f:
2b:2b:83:7c:78:ad:ff:bc:aa:bb:7a:b0:a9:dc:80:37:95:f3:
f3:fc:14:bc:64:ba:8d:8a:5d:35:05:ef:55:ad:db:28:ca:13:
07:8c:9b:70:eb:cd:cf:12:83:e6:e3:f8:80:0e:8a:c5:40:79:
4c:4e:97:ed:20:36:a9:93:9d:06:68:3f:a3:9c:77:7a:ed:51:
06:6f:f3:2d:ff:d1:1d:0c:0c:7e:93:fa:94:6c:a3:4d:93:07:
26:62:20:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrihOmP7R6JDERVitf0XobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw
ZDJlZDYwHhcNMjMwMTAxMDQxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjUzNDU1OTIyN2Y1N2Q3YjIwYjM5MDgwOTI4OTgzNmNhMGU2YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzJ2iCeeJj4D4TBmH81/NXxfu7k
+dLOYQ5/dNqPQltaLpl4SQhPkd+wPLNYmLtv3z6+4Skt50YIM8Jb1lwpEuTlkj38
rABjRaTnxlZUZ8Uqxnjwb2v/h3MotcwRrINbP1CzAVYqwcy4ZGeG/3w/RX5Uxv4k
MjIroU7BREKwGRq4te1cS/w+Bjw/JvdfxZPQIUy/vc5d0ir26qm205jFQjIEuoxa
0VSyXZnyIBLVBjxfqYBuoN7chz3XyOLRomvRx0QRP/RENYYzjvRrILJikCiVSJXY
ZoI3iG1pcw6rha2rihuFps170mQaCMt7I0fSULTBeQcJC5wRICeM1veE9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGtTRVkif1fXsgs5CAkomDbKDmr3MB8GA1UdIwQY
MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt
ODhiMDE2YmJkNTgxLzEvYTFORldTSl9WOWV5Q3prSUNTaVlOc29PYXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx
LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuU7AwQA
LuU+MA0GCSqGSIb3DQEBCwUAA4IBAQARQMMVqmDr8R/HRCj4wj1oR24wjWZXxigK
ZhLolYSKnNGOTzTlfs74S8jPqvEl+dQP1Q4JTpfS9MnV2vXM7zas366FZ2pdQRns
VOF7+XzMs0n5h95mcz2Ctnrwq67J0LYy/O5QRQjpUh+hlzwNFXzQBoJN/Yjdc25r
ELqGukeFa43Xw8SAsRioGuc+WBWc7b9RTn0JE7PGqq1Tov06d2pWRF8rK4N8eK3/
vKq7erCp3IA3lfPz/BS8ZLqNil01Be9VrdsoyhMHjJtw683PEoPm4/iADorFQHlM
TpftIDapk50GaD+jnHd67VEGb/Mt/9EdDAx+k/qUbKNNkwcmYiD4
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org