Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jqUhTekGkW5qUOqwW-lrNzSR4xg.roa
File: jqUhTekGkW5qUOqwW-lrNzSR4xg.roa (raw, json)
Hash identifier: ozH0Lw/LuduImKD0pWW3Q4DB9tcOgmxMN9jyIggRjsU=
Subject key identifier: 8E:A5:21:4D:E9:06:91:6E:6A:50:EA:B0:5B:E9:6B:37:34:91:E3:18
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 018E0EA72EDC8804E2D6ACE3741FB17F1D04
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jqUhTekGkW5qUOqwW-lrNzSR4xg.roa
Signing time: Tue 05 Mar 2024 12:47:01 +0000
ROA not before: Tue 05 Mar 2024 12:47:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 46.143.204.0/22 maxlen: 22
46.143.204.0/24 maxlen: 24
46.143.205.0/24 maxlen: 24
46.143.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 14:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:a7:2e:dc:88:04:e2:d6:ac:e3:74:1f:b1:7f:1d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Mar 5 12:47:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ea5214de906916e6a50eab05be96b373491e318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:76:9b:82:a9:f0:c7:15:72:f9:4d:53:57:
4a:70:dd:d1:a8:3c:6b:61:bd:f8:3d:2c:65:3a:a0:
b6:8d:ec:84:74:08:bd:40:0f:a9:89:37:95:e4:42:
6c:fd:7f:90:08:25:d0:39:48:90:77:4d:94:9e:63:
8c:88:c7:ab:e8:1e:38:bd:9e:dc:87:e7:c6:83:86:
ac:0d:1f:de:56:0b:c7:5d:c1:53:59:a0:7b:20:b8:
78:71:f9:f4:dc:22:6e:26:22:f0:c6:94:8c:17:83:
3a:96:ba:62:fb:f4:b1:82:3b:90:ec:8c:14:d1:b0:
05:f8:9d:93:cb:7a:f2:cc:c8:de:a1:89:aa:f6:d5:
e1:ea:0a:d7:9f:03:6d:34:f2:b1:ff:73:06:80:2b:
5f:c9:21:84:6e:d2:73:b6:1b:8e:51:36:e6:95:0f:
fb:3f:09:ca:d6:ac:12:50:a2:f3:e5:f0:63:d3:5c:
98:c8:f6:9f:4a:69:0d:a0:1c:5b:d3:6c:9a:17:85:
f9:66:c1:1d:fa:37:cb:d0:cc:00:f7:c9:83:df:ef:
f2:f3:24:e5:89:61:f3:5a:8d:fa:94:99:ba:0b:6a:
f8:6a:fd:de:97:77:ba:f1:51:8e:b3:16:96:21:12:
65:a9:28:75:5f:88:f9:58:44:47:48:15:2d:6d:ff:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A5:21:4D:E9:06:91:6E:6A:50:EA:B0:5B:E9:6B:37:34:91:E3:18
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/jqUhTekGkW5qUOqwW-lrNzSR4xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.204.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b9:dd:af:c7:4e:bd:a2:a5:46:e5:fb:86:e5:ce:d6:c7:7b:
6a:25:6f:fa:6d:f4:3c:c6:a1:4b:55:62:48:1e:ee:bd:4e:bc:
f7:91:f3:40:ef:52:30:1a:16:aa:b2:f9:d8:54:73:ff:0d:ba:
00:80:40:9f:07:ef:5e:3d:ae:a8:e6:f4:69:46:51:68:b9:e3:
82:68:ed:eb:ca:b5:14:6c:e9:b1:d0:35:02:ef:32:5d:5f:0d:
17:eb:d1:35:34:c6:fb:5e:f2:ef:11:81:19:5e:4b:15:ab:e5:
2d:5d:5a:dc:4c:a2:23:99:80:b9:b9:03:60:69:5e:df:af:2a:
f9:e5:4f:cd:c6:81:cd:29:ce:26:59:d2:ef:66:07:21:f3:a6:
3a:37:c9:31:76:40:12:d0:77:fc:a2:80:eb:05:55:c6:a7:7a:
32:62:0b:fb:2a:e2:91:62:bc:11:35:d4:91:93:cf:fd:53:81:
e5:bb:61:57:ab:fe:a8:00:d3:f2:ad:b8:39:e5:d5:4e:2c:d8:
e3:42:e8:3e:3b:db:aa:ac:e4:f7:b9:0d:3d:b7:44:93:41:f0:
f5:1a:30:55:12:ed:82:81:a6:26:ca:12:3c:0f:80:48:d5:70:
f2:72:ec:c3:5b:49:44:b1:ae:02:b5:e1:be:08:26:a5:10:24:
18:b2:78:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4Opy7ciATi1qzjdB+xfx0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjQwMzA1MTI0NzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWE1MjE0ZGU5MDY5MTZlNmE1MGVhYjA1YmU5NmIzNzM0OTFlMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslN2m4Kp8McVcvlNU1dKcN3RqDxr
Yb34PSxlOqC2jeyEdAi9QA+piTeV5EJs/X+QCCXQOUiQd02UnmOMiMer6B44vZ7c
h+fGg4asDR/eVgvHXcFTWaB7ILh4cfn03CJuJiLwxpSMF4M6lrpi+/SxgjuQ7IwU
0bAF+J2Ty3ryzMjeoYmq9tXh6grXnwNtNPKx/3MGgCtfySGEbtJzthuOUTbmlQ/7
PwnK1qwSUKLz5fBj01yYyPafSmkNoBxb02yaF4X5ZsEd+jfL0MwA98mD3+/y8yTl
iWHzWo36lJm6C2r4av3el3e68VGOsxaWIRJlqSh1X4j5WERHSBUtbf+VsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6lIU3pBpFualDqsFvpazc0keMYMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvanFVaFRla0drVzVxVU9xd1ctbHJOelNSNHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLo/MMA0G
CSqGSIb3DQEBCwUAA4IBAQB4ud2vx069oqVG5fuG5c7Wx3tqJW/6bfQ8xqFLVWJI
Hu69Trz3kfNA71IwGhaqsvnYVHP/DboAgECfB+9ePa6o5vRpRlFoueOCaO3ryrUU
bOmx0DUC7zJdXw0X69E1NMb7XvLvEYEZXksVq+UtXVrcTKIjmYC5uQNgaV7fryr5
5U/NxoHNKc4mWdLvZgch86Y6N8kxdkAS0Hf8ooDrBVXGp3oyYgv7KuKRYrwRNdSR
k8/9U4Hlu2FXq/6oANPyrbg55dVOLNjjQug+O9uqrOT3uQ09t0STQfD1GjBVEu2C
gaYmyhI8D4BI1XDycuzDW0lEsa4CteG+CCalECQYsnjZ
-----END CERTIFICATE-----
Generated at Sun Mar 10 17:31:51 2024 by rpki-client on console-ams.rpki-client.org