Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lr7Yhgpr-N0zlO6IoFzBnm_Y8ac.roa
File: lr7Yhgpr-N0zlO6IoFzBnm_Y8ac.roa (raw, json)
Hash identifier: yH5bXARtEJLWsViTpeB/T4ZQXSwH5hRD0C6LiOfsHm8=
Subject key identifier: 96:BE:D8:86:0A:6B:F8:DD:33:94:EE:88:A0:5C:C1:9E:6F:D8:F1:A7
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018BCF3D85DA1E9BDB10D79FCF37B65BB7A9
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lr7Yhgpr-N0zlO6IoFzBnm_Y8ac.roa
Signing time: Tue 14 Nov 2023 19:09:57 +0000
ROA not before: Tue 14 Nov 2023 19:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.20.212.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Dec 2023 07:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cf:3d:85:da:1e:9b:db:10:d7:9f:cf:37:b6:5b:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 14 19:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96bed8860a6bf8dd3394ee88a05cc19e6fd8f1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fe:08:df:c4:89:00:b2:74:59:94:2b:e4:2a:
98:ba:71:a1:aa:22:91:54:92:d1:99:a2:72:ce:a7:
cb:1c:b9:e3:86:60:51:8f:a9:45:69:6f:76:f3:b8:
8e:43:84:c8:f7:0f:7a:d7:41:47:21:d8:41:ee:1e:
a0:6f:1b:fd:02:a9:f6:54:a8:41:b4:60:6c:ae:d1:
b8:ba:09:2b:3f:1c:6d:9e:4f:61:f9:43:cc:d4:e6:
8c:c8:d2:d3:87:e5:b8:ba:a2:ee:c9:70:36:28:77:
cb:0a:03:4c:95:3b:55:2f:00:13:3b:ae:da:af:c8:
78:e3:fa:aa:ac:0e:fc:23:f8:ac:e7:48:83:84:17:
50:7c:13:81:0a:07:e0:08:08:1c:0b:61:95:4f:32:
fb:da:a1:2d:d2:e0:4e:a2:b1:d7:99:29:f8:b4:65:
a0:c8:dc:0a:2b:2b:75:7c:b7:c3:cc:32:32:4f:77:
22:28:48:52:da:5f:99:7e:dd:54:88:85:24:82:1c:
56:3f:43:1c:08:48:b2:cf:32:6b:8a:ba:c8:98:39:
71:8d:b8:d3:1e:25:e1:e8:d3:cd:39:50:8a:43:e0:
c4:15:41:36:92:b0:84:08:17:9f:14:ea:8c:ca:33:
71:42:07:9a:8f:34:f8:0b:af:c7:91:e1:9b:8b:3a:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BE:D8:86:0A:6B:F8:DD:33:94:EE:88:A0:5C:C1:9E:6F:D8:F1:A7
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/lr7Yhgpr-N0zlO6IoFzBnm_Y8ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5a:19:9a:e9:8c:b8:4b:c3:67:91:64:44:39:26:e6:6f:e5:
0a:04:3e:ab:33:ba:2c:13:56:76:a4:ef:6e:4a:bc:69:da:e9:
05:07:9e:4f:98:9e:ee:92:61:09:58:f5:21:90:09:d2:d1:91:
7c:fa:d7:80:73:ae:fb:f0:47:e3:f2:61:1b:3e:5e:4c:52:58:
64:97:52:40:3b:29:92:a6:c6:92:66:66:6b:a2:eb:f9:e6:c9:
07:68:15:46:91:43:9f:ef:51:c8:23:2b:b5:32:4b:1f:47:e6:
99:51:ff:3a:32:ee:64:83:18:81:bd:e2:24:c7:e2:31:e7:5f:
42:24:7c:82:f9:93:2c:bf:7c:04:60:ce:29:c3:72:39:6f:73:
01:00:0b:4f:b6:d5:87:51:fb:a4:6e:88:4e:83:d4:a4:ad:22:
fd:8c:00:b9:11:9d:9a:b2:75:60:75:55:28:ec:57:91:43:35:
cb:7d:45:57:3c:5c:c6:1c:54:fc:20:87:a5:19:36:26:8e:4e:
88:8c:0b:87:d9:5b:4c:54:63:9d:ab:77:d9:e1:40:33:75:7a:
79:54:e4:67:be:27:27:7c:24:13:47:61:e7:b5:e5:f2:79:a7:
24:1a:57:0d:f0:55:48:c9:14:18:c4:39:08:3f:c7:ff:1c:75:
99:f7:61:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvPPYXaHpvbENefzze2W7epMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjMxMTE0MTkwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmJlZDg4NjBhNmJmOGRkMzM5NGVlODhhMDVjYzE5ZTZmZDhmMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf4I38SJALJ0WZQr5CqYunGhqiKR
VJLRmaJyzqfLHLnjhmBRj6lFaW9287iOQ4TI9w9610FHIdhB7h6gbxv9Aqn2VKhB
tGBsrtG4ugkrPxxtnk9h+UPM1OaMyNLTh+W4uqLuyXA2KHfLCgNMlTtVLwATO67a
r8h44/qqrA78I/is50iDhBdQfBOBCgfgCAgcC2GVTzL72qEt0uBOorHXmSn4tGWg
yNwKKyt1fLfDzDIyT3ciKEhS2l+Zft1UiIUkghxWP0McCEiyzzJrirrImDlxjbjT
HiXh6NPNOVCKQ+DEFUE2krCECBefFOqMyjNxQgeajzT4C6/HkeGbizqQdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJa+2IYKa/jdM5TuiKBcwZ5v2PGnMB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEvbHI3WWhncHItTjB6bE82SW9GekJubV9ZOGFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhTUMA0G
CSqGSIb3DQEBCwUAA4IBAQBiWhma6Yy4S8NnkWREOSbmb+UKBD6rM7osE1Z2pO9u
Srxp2ukFB55PmJ7ukmEJWPUhkAnS0ZF8+teAc6778Efj8mEbPl5MUlhkl1JAOymS
psaSZmZrouv55skHaBVGkUOf71HIIyu1MksfR+aZUf86Mu5kgxiBveIkx+Ix519C
JHyC+ZMsv3wEYM4pw3I5b3MBAAtPttWHUfukbohOg9SkrSL9jAC5EZ2asnVgdVUo
7FeRQzXLfUVXPFzGHFT8IIelGTYmjk6IjAuH2VtMVGOdq3fZ4UAzdXp5VORnvicn
fCQTR2HnteXyeackGlcN8FVIyRQYxDkIP8f/HHWZ92G5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org