Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RkYLlMkAVUfnBp05DFvhf-eWOKk.roa
File: RkYLlMkAVUfnBp05DFvhf-eWOKk.roa (raw, json)
Hash identifier: VBE3cKFRNjtfFEloDSdI5U1cFvEGTwmlwcVoiMfAMjk=
Subject key identifier: 46:46:0B:94:C9:00:55:47:E7:06:9D:39:0C:5B:E1:7F:E7:96:38:A9
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 0185D446F4F5BD1456F0A4453D0D47764AD7
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RkYLlMkAVUfnBp05DFvhf-eWOKk.roa
Signing time: Sat 21 Jan 2023 12:21:38 +0000
ROA not before: Sat 21 Jan 2023 12:21:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51897
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.248.0/22 maxlen: 22
109.122.251.0/24 maxlen: 24
109.122.249.0/24 maxlen: 24
109.122.250.0/24 maxlen: 24
46.143.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:46:f4:f5:bd:14:56:f0:a4:45:3d:0d:47:76:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 21 12:21:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46460b94c9005547e7069d390c5be17fe79638a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e2:04:dd:1f:6e:5b:0e:4f:cc:15:34:3d:a4:
a4:a4:f2:81:8f:57:ea:38:e9:8b:8e:28:8f:14:8f:
a6:8c:34:1c:b9:c8:15:91:02:4c:d3:b1:ee:6a:36:
87:5d:7e:55:0b:29:9d:ee:7c:46:81:cd:52:db:51:
28:14:a1:75:0a:39:a5:08:c8:41:7e:1a:41:8c:e7:
cd:90:9f:72:0d:63:46:97:2f:00:df:e3:56:fc:86:
a5:1c:f9:5f:63:26:ad:a0:ea:9a:a9:58:bc:91:58:
35:d6:d9:40:d9:89:92:6c:a1:df:45:f5:e4:10:13:
39:ac:ea:ba:5f:b0:48:af:64:34:72:a7:ae:8e:e1:
fc:e3:30:4d:d8:0b:f2:ea:bb:7c:7c:ce:41:ef:c0:
36:50:7d:9e:d3:21:df:94:6a:c0:4b:2e:38:dc:af:
c1:dd:62:b4:5d:2c:0f:9c:d6:0d:cb:1f:c1:57:b3:
55:1c:5d:ba:63:6f:b0:c4:ab:52:f0:e0:83:fa:df:
4b:26:7e:7e:52:7b:7b:8d:1b:03:d8:4a:80:f5:37:
27:e4:b2:f0:32:ce:1f:a9:14:86:16:3a:46:45:c9:
e5:31:fc:82:31:d5:e2:46:65:8d:d5:5c:3e:ea:bd:
b5:f1:bb:a1:6e:51:92:c1:34:ae:74:fa:ed:14:db:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:0B:94:C9:00:55:47:E7:06:9D:39:0C:5B:E1:7F:E7:96:38:A9
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RkYLlMkAVUfnBp05DFvhf-eWOKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.192.0/19
109.122.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:46:9a:eb:df:b2:a1:e1:a8:25:19:0d:ff:88:93:3f:53:06:
01:bf:e2:1c:2c:00:03:ee:ff:e2:8f:62:9e:3b:5a:28:3a:9a:
ce:79:75:b0:a7:1a:78:c9:15:96:8d:31:f5:5e:5e:f2:54:7d:
bf:01:24:f6:78:fb:b5:71:01:fc:8a:d7:d2:e3:4d:e3:9d:8f:
95:07:71:b7:13:4f:d8:f6:bc:ec:89:19:6a:8a:1d:33:dc:06:
71:d5:a0:b7:9a:58:5d:b9:96:de:b3:b9:a1:47:d9:64:2d:d3:
01:5b:c8:88:2e:eb:40:e7:f8:23:9e:8f:99:8a:c8:01:9b:9d:
a5:81:bc:c3:39:2a:94:c7:43:ce:38:de:f2:ea:55:6d:61:b2:
db:5c:0d:2d:ff:38:55:1d:4b:5c:7c:6c:cc:d9:24:1a:9c:b6:
42:ec:cf:f5:b6:6a:f9:06:3e:49:2d:b4:a7:9d:e3:7f:f3:30:
33:36:74:ee:3d:16:ad:cb:d4:09:dc:7f:ad:87:ae:4b:7b:ae:
3b:ba:fd:3e:dc:e2:45:53:0c:da:cb:b3:fe:cf:b3:8a:fd:97:
4f:9a:26:82:83:de:9a:46:e7:d4:7b:1f:e3:99:15:39:c2:4f:
3e:44:ed:2f:19:2a:bd:86:bc:d1:7a:51:3f:2b:48:00:aa:58:
54:2b:2d:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXURvT1vRRW8KRFPQ1HdkrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjMwMTIxMTIyMTM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjQ2MGI5NGM5MDA1NTQ3ZTcwNjlkMzkwYzViZTE3ZmU3OTYzOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuIE3R9uWw5PzBU0PaSkpPKBj1fq
OOmLjiiPFI+mjDQcucgVkQJM07HuajaHXX5VCymd7nxGgc1S21EoFKF1CjmlCMhB
fhpBjOfNkJ9yDWNGly8A3+NW/IalHPlfYyatoOqaqVi8kVg11tlA2YmSbKHfRfXk
EBM5rOq6X7BIr2Q0cqeujuH84zBN2Avy6rt8fM5B78A2UH2e0yHflGrASy443K/B
3WK0XSwPnNYNyx/BV7NVHF26Y2+wxKtS8OCD+t9LJn5+Unt7jRsD2EqA9Tcn5LLw
Ms4fqRSGFjpGRcnlMfyCMdXiRmWN1Vw+6r218buhblGSwTSudPrtFNtYaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEZGC5TJAFVH5wadOQxb4X/nljipMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvUmtZTGxNa0FWVWZuQnAwNURGdmhmLWVXT0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLo/AAwQC
bXr4MA0GCSqGSIb3DQEBCwUAA4IBAQADRprr37Kh4aglGQ3/iJM/UwYBv+IcLAAD
7v/ij2KeO1ooOprOeXWwpxp4yRWWjTH1Xl7yVH2/AST2ePu1cQH8itfS403jnY+V
B3G3E0/Y9rzsiRlqih0z3AZx1aC3mlhduZbes7mhR9lkLdMBW8iILutA5/gjno+Z
isgBm52lgbzDOSqUx0POON7y6lVtYbLbXA0t/zhVHUtcfGzM2SQanLZC7M/1tmr5
Bj5JLbSnneN/8zAzNnTuPRaty9QJ3H+th65Le647uv0+3OJFUwzay7P+z7OK/ZdP
miaCg96aRufUex/jmRU5wk8+RO0vGSq9hrzRelE/K0gAqlhUKy28
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:37 2024 by rpki-client on console-ams.rpki-client.org