Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/J6FtjCjZ4GiS7XQH0guO143in1s.roa
File: J6FtjCjZ4GiS7XQH0guO143in1s.roa (raw, json)
Hash identifier: A9d8OeyYAHSECqlB+txeqRBzfSSrp1qBA+T92uEdHx4=
Subject key identifier: 27:A1:6D:8C:28:D9:E0:68:92:ED:74:07:D2:0B:8E:D7:8D:E2:9F:5B
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F9A023981E24605C5831E321F3A7B
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/J6FtjCjZ4GiS7XQH0guO143in1s.roa
Signing time: Sun 01 Jan 2023 16:34:51 +0000
ROA not before: Sun 01 Jan 2023 16:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49970
IP address blocks: 46.143.200.0/24 maxlen: 24
46.143.201.0/24 maxlen: 24
46.143.246.0/24 maxlen: 24
46.143.247.0/24 maxlen: 24
109.122.240.0/21 maxlen: 21
46.143.193.0/24 maxlen: 24
46.143.192.0/18 maxlen: 24
46.143.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:9a:02:39:81:e2:46:05:c5:83:1e:32:1f:3a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27a16d8c28d9e06892ed7407d20b8ed78de29f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3b:64:3e:0d:74:51:a8:80:af:c3:22:9c:b5:
24:27:ab:e0:f3:48:bc:0a:8e:7e:4e:7a:2c:57:42:
67:ae:3a:35:0a:1c:7f:e4:36:4d:f2:55:31:bd:21:
8a:09:01:5b:75:ee:e1:0d:a1:58:0b:98:d0:a4:0b:
ae:ef:82:d7:c9:a6:34:48:c7:90:c5:4f:48:76:ff:
4d:36:dd:bd:a9:60:bd:fd:47:72:ba:c0:ca:09:85:
76:76:f1:fc:00:7f:e1:29:e2:9d:81:a7:68:ef:ef:
e4:3e:0b:93:76:f5:a0:7f:b1:e1:92:91:b8:06:26:
ab:e4:cf:f5:3d:13:8c:52:da:bf:69:22:11:8f:5b:
0a:a1:2b:05:c1:7c:1c:85:3c:ce:89:cb:cb:75:8f:
cb:3c:6a:13:3f:2b:d6:40:33:54:86:f2:ee:2c:5d:
8d:c1:16:86:a5:ee:0b:45:88:a9:43:f2:7c:f7:92:
62:39:ce:2e:4a:76:6b:12:2f:c8:af:10:32:de:cd:
87:4c:bc:51:7c:f7:3d:7e:ba:d3:d0:db:ba:b4:6e:
88:a1:c2:0f:6b:da:26:b0:26:7f:e8:82:02:32:55:
96:fe:e0:fd:3e:a5:de:72:0e:6e:06:42:5b:ec:d0:
bf:a6:00:ad:8a:2b:2d:c2:8a:9a:63:de:e0:44:85:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:6D:8C:28:D9:E0:68:92:ED:74:07:D2:0B:8E:D7:8D:E2:9F:5B
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/J6FtjCjZ4GiS7XQH0guO143in1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/18
109.122.240.0/21
Signature Algorithm: sha256WithRSAEncryption
18:3e:e0:9f:e8:1f:81:6f:66:26:74:bf:a7:1d:ec:1b:ec:63:
f3:44:33:c8:6e:1c:af:62:63:bc:97:98:c5:a0:36:29:9d:82:
aa:d8:74:af:c4:ab:f9:00:dc:7d:3e:b3:d3:ab:ab:cb:59:20:
ff:9a:ac:f8:e3:1f:e2:37:01:39:f3:42:1a:7a:05:c4:53:00:
e2:df:eb:a0:1e:ef:93:46:33:54:09:32:3a:56:3c:79:05:e8:
fa:47:ed:da:1e:5e:41:84:2c:38:86:1f:54:3a:d6:3a:37:c9:
dc:91:fe:8b:60:d2:62:b3:5b:a2:80:f2:a8:35:69:de:1f:8d:
e0:9a:ec:56:c5:2e:25:c8:f9:4d:d2:0a:94:1f:8d:11:8b:ff:
cc:18:69:76:06:35:29:fd:5d:7f:00:62:5b:9c:2b:50:55:93:
05:dd:93:62:5e:5b:02:fb:f4:67:cc:9c:35:ce:70:2c:de:a0:
1d:19:84:91:02:51:28:2b:9c:91:e0:31:74:65:08:6c:33:c8:
e9:3d:a1:28:13:b9:82:f6:65:df:29:bc:84:5c:22:83:40:b7:
29:5e:6f:97:5b:8d:8e:af:0c:08:db:df:9d:2a:98:57:b4:9e:
cb:30:f3:fe:b5:1c:02:06:33:8c:16:af:16:78:71:09:73:44:
a1:05:c0:80
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuL5oCOYHiRgXFgx4yHzp7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjMwMTAxMTYzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2ExNmQ4YzI4ZDllMDY4OTJlZDc0MDdkMjBiOGVkNzhkZTI5ZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArztkPg10UaiAr8MinLUkJ6vg80i8
Co5+TnosV0Jnrjo1Chx/5DZN8lUxvSGKCQFbde7hDaFYC5jQpAuu74LXyaY0SMeQ
xU9Idv9NNt29qWC9/UdyusDKCYV2dvH8AH/hKeKdgado7+/kPguTdvWgf7HhkpG4
Biar5M/1PROMUtq/aSIRj1sKoSsFwXwchTzOicvLdY/LPGoTPyvWQDNUhvLuLF2N
wRaGpe4LRYipQ/J895JiOc4uSnZrEi/IrxAy3s2HTLxRfPc9frrT0Nu6tG6IocIP
a9omsCZ/6IICMlWW/uD9PqXecg5uBkJb7NC/pgCtiistwoqaY97gRIUB3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCehbYwo2eBoku10B9ILjteN4p9bMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvSjZGdGpDalo0R2lTN1hRSDBndU8xNDNpbjFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLo/AAwQD
bXrwMA0GCSqGSIb3DQEBCwUAA4IBAQAYPuCf6B+Bb2YmdL+nHewb7GPzRDPIbhyv
YmO8l5jFoDYpnYKq2HSvxKv5ANx9PrPTq6vLWSD/mqz44x/iNwE580IaegXEUwDi
3+ugHu+TRjNUCTI6Vjx5Bej6R+3aHl5BhCw4hh9UOtY6N8nckf6LYNJis1uigPKo
NWneH43gmuxWxS4lyPlN0gqUH40Ri//MGGl2BjUp/V1/AGJbnCtQVZMF3ZNiXlsC
+/RnzJw1znAs3qAdGYSRAlEoK5yR4DF0ZQhsM8jpPaEoE7mC9mXfKbyEXCKDQLcp
Xm+XW42OrwwI29+dKphXtJ7LMPP+tRwCBjOMFq8WeHEJc0ShBcCA
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:45 2024 by rpki-client on console-fra.rpki-client.org