Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/46SHTW_0e6ZcAKUC3bAgnjabIMY.roa
File: 46SHTW_0e6ZcAKUC3bAgnjabIMY.roa (raw, json)
Hash identifier: f4rmwcGz6/KAU745JDceQjarjpkFTH9cC0c/EOJVO08=
Subject key identifier: E3:A4:87:4D:6F:F4:7B:A6:5C:00:A5:02:DD:B0:20:9E:36:9B:20:C6
Certificate issuer: /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial: 01856C53D5C7967AC5BED0C7AE7844E27C34
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/46SHTW_0e6ZcAKUC3bAgnjabIMY.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.51.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d5:c7:96:7a:c5:be:d0:c7:ae:78:44:e2:7c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a4874d6ff47ba65c00a502ddb0209e369b20c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:5c:8b:65:86:7b:56:43:06:ee:f3:e8:bf:
6c:f4:1c:6c:0a:58:fa:5b:23:2b:84:25:42:8a:ce:
b9:34:dc:98:2f:a2:6c:b7:69:87:92:2c:11:af:87:
0d:df:3c:82:30:1b:39:d1:d5:38:f7:47:6f:13:b8:
a6:ee:ef:bc:22:7f:04:17:e0:69:c9:2c:91:7e:db:
c7:e8:4b:9b:2c:4c:60:fb:01:f9:5a:35:16:ef:f9:
dd:7d:8f:98:5b:2d:3b:89:b8:f8:17:d7:f9:d8:03:
93:dd:1c:9e:55:4a:91:c5:1a:e8:ed:20:0a:7c:6c:
98:c5:b8:32:b0:94:ca:36:3a:58:a1:2a:8b:13:2e:
3a:a7:c6:29:4d:d6:69:98:2f:34:21:7b:81:28:7d:
33:30:86:d4:ba:81:f7:b1:c5:42:2b:43:ac:1b:0c:
6e:4d:a6:18:1f:a4:8e:c0:04:61:09:89:b3:17:ab:
b0:04:e0:41:bf:8d:c4:9d:b6:9b:46:63:12:ec:ba:
ca:80:a9:22:f6:32:c0:fb:84:bb:25:f1:73:83:e4:
0e:d6:04:31:77:73:17:6a:21:5d:8c:fa:67:69:30:
c4:38:73:b8:51:34:ef:45:dc:20:4f:8e:6b:a2:21:
58:5c:dc:3c:76:72:5f:2f:c8:cd:cb:2a:f8:48:68:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:87:4D:6F:F4:7B:A6:5C:00:A5:02:DD:B0:20:9E:36:9B:20:C6
X509v3 Authority Key Identifier:
keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/46SHTW_0e6ZcAKUC3bAgnjabIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:42:13:4b:09:68:08:83:3a:47:51:8d:e2:7a:24:3b:b0:cd:
f1:26:ed:e2:50:65:e3:4d:0b:bf:16:14:ca:54:50:a9:88:f8:
b8:47:f0:b0:b7:30:64:20:e2:59:2a:d7:75:97:9a:f1:be:d3:
cf:c9:33:a2:df:4f:4d:b8:3a:38:6c:28:28:d4:e9:f2:91:d0:
4a:3a:82:03:27:ea:b1:b5:1e:92:af:b1:b9:a6:c4:a3:80:23:
d5:b1:77:da:f7:2f:83:b9:b2:4f:7b:c6:7d:05:59:0a:4a:28:
d8:35:1c:b0:bb:66:8c:76:e0:bf:21:e8:77:24:e5:0f:ec:50:
45:d8:85:1b:ff:5c:c2:a2:7e:0f:a3:3f:88:0c:21:2d:15:2f:
c5:ef:f3:c2:47:f3:24:20:89:15:88:b1:59:03:85:8a:25:ce:
5f:b2:70:d1:26:b6:63:2a:af:75:7a:b7:fd:89:11:4e:e4:bb:
59:ab:b1:ff:f3:55:3e:ad:08:37:8f:69:40:2d:8e:31:0c:3b:
83:a4:c8:40:ec:99:d7:2c:2d:77:c3:b1:34:25:94:30:2c:c3:
a5:5d:7b:07:94:65:60:2d:9b:33:86:a8:53:fd:17:00:66:e1:
f6:14:1f:47:19:ef:5a:db:a5:21:d2:ec:2f:6e:77:10:2f:c3:
9d:2e:5c:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9XHlnrFvtDHrnhE4nw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxOWJmMjllMWFjYTIzYTUxNWUxMWY2Njk2MGI0ZWI5NWM4
MGNmYjkwHhcNMjMwMTAxMDc1NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E0ODc0ZDZmZjQ3YmE2NWMwMGE1MDJkZGIwMjA5ZTM2OWIyMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiJci2WGe1ZDBu7z6L9s9BxsClj6
WyMrhCVCis65NNyYL6Jst2mHkiwRr4cN3zyCMBs50dU490dvE7im7u+8In8EF+Bp
ySyRftvH6EubLExg+wH5WjUW7/ndfY+YWy07ibj4F9f52AOT3RyeVUqRxRro7SAK
fGyYxbgysJTKNjpYoSqLEy46p8YpTdZpmC80IXuBKH0zMIbUuoH3scVCK0OsGwxu
TaYYH6SOwARhCYmzF6uwBOBBv43EnbabRmMS7LrKgKki9jLA+4S7JfFzg+QO1gQx
d3MXaiFdjPpnaTDEOHO4UTTvRdwgT45roiFYXNw8dnJfL8jNyyr4SGgq6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOkh01v9HumXAClAt2wIJ42myDGMB8GA1UdIwQY
MBaAFJGb8p4ayiOlFeEfZpYLTrlcgM+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2Mt
MGJiM2FmZmNjMmQzLzEvNDZTSFRXXzBlNlpjQUtVQzNiQWduamFiSU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lNTdkY2YtMzZmOS00YTRhLWFlM2MtMGJiM2FmZmNjMmQz
LzEva1p2eW5ocktJNlVWNFI5bWxndE91VnlBejdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTN4MA0G
CSqGSIb3DQEBCwUAA4IBAQBZQhNLCWgIgzpHUY3ieiQ7sM3xJu3iUGXjTQu/FhTK
VFCpiPi4R/CwtzBkIOJZKtd1l5rxvtPPyTOi309NuDo4bCgo1OnykdBKOoIDJ+qx
tR6Sr7G5psSjgCPVsXfa9y+DubJPe8Z9BVkKSijYNRywu2aMduC/Ieh3JOUP7FBF
2IUb/1zCon4Poz+IDCEtFS/F7/PCR/MkIIkViLFZA4WKJc5fsnDRJrZjKq91erf9
iRFO5LtZq7H/81U+rQg3j2lALY4xDDuDpMhA7JnXLC13w7E0JZQwLMOlXXsHlGVg
LZszhqhT/RcAZuH2FB9HGe9a26Uh0uwvbncQL8OdLlyb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:19 2023 by rpki-client on console-fra.rpki-client.org