Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/zyoqEJi1AXD-vdYUdQf0bUdtAjM.roa
File: zyoqEJi1AXD-vdYUdQf0bUdtAjM.roa (raw, json)
Hash identifier: bYCv7dU1gbwE6mUd87eD1GFEkqtR9IWFy7JVfSM/vtU=
Subject key identifier: CF:2A:2A:10:98:B5:01:70:FE:BD:D6:14:75:07:F4:6D:47:6D:02:33
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 0185D444329997B5D80DE131C777239BD41F
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/zyoqEJi1AXD-vdYUdQf0bUdtAjM.roa
Signing time: Sat 21 Jan 2023 12:18:37 +0000
ROA not before: Sat 21 Jan 2023 12:18:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.143.206.0/24 maxlen: 24
46.143.205.0/24 maxlen: 24
46.143.204.0/22 maxlen: 22
46.143.204.0/24 maxlen: 24
109.122.240.0/22 maxlen: 22
109.122.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:44:32:99:97:b5:d8:0d:e1:31:c7:77:23:9b:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 21 12:18:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf2a2a1098b50170febdd6147507f46d476d0233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:77:ef:80:b1:c1:98:b2:cc:bc:38:46:8b:
7f:50:ef:11:15:00:0e:ba:da:30:10:2e:85:9f:a1:
18:9c:6f:4d:b5:b0:e8:72:57:0b:03:a7:1f:bd:3c:
78:1b:17:6b:29:48:ec:21:35:16:87:d7:1d:b7:e1:
07:dd:a3:d9:77:22:d9:62:e2:c2:2a:6e:53:be:a3:
7c:84:4a:f9:da:0d:59:d9:7d:69:4d:2d:a8:eb:35:
cc:f6:fe:0a:94:89:a8:e4:5b:e9:01:dd:84:0c:f9:
a9:4f:bf:01:1d:5b:f5:97:cf:38:d5:fc:34:dc:f8:
b4:98:2b:aa:db:e0:d0:e1:6b:06:13:cb:04:91:04:
96:81:d9:f5:6a:a6:3a:4f:f9:90:a4:52:f4:4d:d5:
26:36:57:b8:55:0f:48:d7:8d:6c:1a:bc:8d:a8:6a:
59:eb:c7:67:bc:5a:2d:06:a2:8a:67:6b:87:58:09:
45:c4:2b:fe:05:09:3a:4c:8c:e7:4c:6a:b8:f7:85:
f2:fe:2d:82:89:81:49:78:b1:6c:ae:fc:98:a2:11:
d2:40:3b:61:9e:35:ca:4b:1e:d3:78:85:7c:af:64:
12:57:5d:3e:34:a7:31:75:9b:95:4c:3c:fb:b9:e7:
32:e7:3d:ac:9f:85:ee:38:af:64:ac:16:0e:10:cb:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2A:2A:10:98:B5:01:70:FE:BD:D6:14:75:07:F4:6D:47:6D:02:33
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/zyoqEJi1AXD-vdYUdQf0bUdtAjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.204.0/22
109.122.240.0/21
Signature Algorithm: sha256WithRSAEncryption
13:f5:35:df:7e:94:5e:a4:53:cf:97:6c:60:3d:86:78:85:d4:
1c:9f:0c:0a:cb:e5:d7:73:0d:fb:ed:ce:c2:98:13:cc:f9:9a:
d4:6c:10:6d:43:67:86:7d:c7:3e:27:0f:33:5a:54:ee:82:7e:
51:ca:eb:5f:5a:19:b7:17:52:c1:5c:8d:94:24:0c:7e:d3:ed:
cc:51:64:09:b1:4f:96:b1:2b:2f:00:fa:03:3c:01:01:4e:0a:
d8:04:49:ab:1a:ca:b6:66:37:0e:f1:28:b5:4c:2a:e2:53:fa:
20:2f:9a:f9:0c:ae:f8:5d:6d:4c:76:3e:00:3d:8c:1c:fa:1a:
14:64:f0:3f:23:98:cf:0b:f6:f8:84:5d:55:af:52:94:98:c6:
d4:ce:22:b8:3a:1b:20:b4:1b:78:84:a2:1c:81:11:2d:4f:9d:
8d:d2:1e:b0:9b:dd:46:71:5f:08:e1:59:e5:ba:88:e8:30:52:
55:f4:29:73:9e:d1:c9:c9:ed:c6:93:d1:9e:94:09:54:df:25:
b8:26:c9:30:17:19:86:9f:5a:fe:32:a0:b9:28:8b:30:d5:8b:
65:ad:dc:05:e4:4a:f6:b2:af:2c:1c:a8:6e:8f:b0:5c:3b:f8:
85:d0:e3:d4:c2:ba:01:42:5a:0d:e8:33:a9:42:2a:85:41:1d:
d3:00:f9:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXURDKZl7XYDeExx3cjm9QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0
MTUwOGMwHhcNMjMwMTIxMTIxODM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjJhMmExMDk4YjUwMTcwZmViZGQ2MTQ3NTA3ZjQ2ZDQ3NmQwMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKJ374CxwZiyzLw4Rot/UO8RFQAO
utowEC6Fn6EYnG9NtbDoclcLA6cfvTx4GxdrKUjsITUWh9cdt+EH3aPZdyLZYuLC
Km5TvqN8hEr52g1Z2X1pTS2o6zXM9v4KlImo5FvpAd2EDPmpT78BHVv1l8841fw0
3Pi0mCuq2+DQ4WsGE8sEkQSWgdn1aqY6T/mQpFL0TdUmNle4VQ9I141sGryNqGpZ
68dnvFotBqKKZ2uHWAlFxCv+BQk6TIznTGq494Xy/i2CiYFJeLFsrvyYohHSQDth
njXKSx7TeIV8r2QSV10+NKcxdZuVTDz7uecy5z2sn4XuOK9krBYOEMvWFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM8qKhCYtQFw/r3WFHUH9G1HbQIzMB8GA1UdIwQY
MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt
MjlmMWJlYjJmMjgyLzEvenlvcUVKaTFBWEQtdmRZVWRRZjBiVWR0QWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy
LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLo/MAwQD
bXrwMA0GCSqGSIb3DQEBCwUAA4IBAQAT9TXffpRepFPPl2xgPYZ4hdQcnwwKy+XX
cw377c7CmBPM+ZrUbBBtQ2eGfcc+Jw8zWlTugn5RyutfWhm3F1LBXI2UJAx+0+3M
UWQJsU+WsSsvAPoDPAEBTgrYBEmrGsq2ZjcO8Si1TCriU/ogL5r5DK74XW1Mdj4A
PYwc+hoUZPA/I5jPC/b4hF1Vr1KUmMbUziK4OhsgtBt4hKIcgREtT52N0h6wm91G
cV8I4VnluojoMFJV9ClzntHJye3Gk9GelAlU3yW4JskwFxmGn1r+MqC5KIsw1Ytl
rdwF5Er2sq8sHKhuj7BcO/iF0OPUwroBQloN6DOpQiqFQR3TAPlI
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:03 2024 by rpki-client on console-ams.rpki-client.org