Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xS-EmKk2N0sLxwPTv0_ZUmELKUk.roa
File: xS-EmKk2N0sLxwPTv0_ZUmELKUk.roa (raw, json)
Hash identifier: Uk5WoyPpTupwoK/WCRq9BZ83uExkMjzBwWYWZsWLKNY=
Subject key identifier: C5:2F:84:98:A9:36:37:4B:0B:C7:03:D3:BF:4F:D9:52:61:0B:29:49
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3B8FA4DDABCDDADB1DB2652BE42E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xS-EmKk2N0sLxwPTv0_ZUmELKUk.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201244
IP address blocks: 46.243.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3b:8f:a4:dd:ab:cd:da:db:1d:b2:65:2b:e4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c52f8498a936374b0bc703d3bf4fd952610b2949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:c0:72:4b:4a:f7:7e:35:68:ee:02:fa:d6:
d6:73:10:70:ee:24:04:3a:cd:e4:61:d0:ac:15:80:
97:ad:a5:65:d3:20:34:7d:d3:cc:e9:8f:d9:e6:6d:
92:7d:ab:f2:7a:6d:de:96:9c:3a:c4:4f:f5:fc:2b:
28:17:25:00:02:b1:94:98:31:9b:95:8c:0b:25:ec:
9f:1a:96:64:87:be:42:11:40:6a:ab:f2:72:08:41:
fb:d0:33:2f:5b:4b:24:46:39:58:f3:72:78:85:dd:
ee:8a:13:86:bd:70:eb:a5:45:db:3c:50:c6:22:ed:
a1:01:62:38:3b:e7:13:8a:36:c7:66:56:52:2c:03:
1a:e6:9f:91:0c:3e:5e:22:85:a5:10:a8:19:43:a8:
7e:74:79:80:0c:c5:ea:92:3a:d9:c0:b5:00:ae:c6:
c3:b2:f3:68:7d:85:e9:1d:6f:3b:b2:42:a3:b3:7a:
bf:6d:b7:62:61:4b:8b:7c:d9:13:4e:06:bf:04:6f:
20:ae:b2:e3:5c:ad:27:0d:4c:41:fd:59:f6:0b:44:
33:cc:6b:c2:c9:12:00:60:8a:31:6f:de:46:4f:79:
33:7b:a9:35:15:4b:6c:e7:10:76:6a:3f:dc:f2:4b:
0f:b3:8f:0c:fe:52:40:16:26:8b:50:6a:58:12:f5:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:84:98:A9:36:37:4B:0B:C7:03:D3:BF:4F:D9:52:61:0B:29:49
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/xS-EmKk2N0sLxwPTv0_ZUmELKUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.175.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ba:b1:54:7e:74:63:3a:3c:30:c9:bd:28:21:51:f9:48:51:
cc:35:0d:27:3c:57:2a:94:8d:e6:cd:18:d9:c0:88:8e:1e:cf:
00:f9:7b:93:b8:f2:b1:07:0c:fd:a6:82:57:7d:14:5b:25:4a:
10:61:9e:b4:a8:19:9e:78:ff:6c:75:ac:d8:46:d7:ea:39:e7:
c9:ed:43:13:fa:2c:e7:1d:68:4d:9d:64:23:cc:fd:56:8c:5e:
6f:e0:0a:d5:38:66:62:36:06:64:33:79:59:96:cf:d6:94:cd:
96:8f:4b:67:09:1e:5b:38:4a:fc:f6:a4:a2:9c:3e:d1:95:e7:
50:8e:89:65:11:cb:a6:37:33:b4:ab:38:84:83:a7:29:de:5b:
97:de:49:13:de:9f:c3:fe:98:f3:f5:07:11:d7:69:4d:86:bf:
1f:54:fd:6b:1f:ea:55:48:f6:cb:85:44:b8:d1:1e:01:eb:37:
b6:c3:b4:b4:7b:e0:20:45:9d:d0:09:07:be:62:31:61:7c:39:
36:1d:f1:51:2c:fa:52:b3:01:b3:ee:da:de:23:cc:14:06:4d:
5f:ca:13:fc:2e:77:f7:41:92:71:37:87:70:84:20:3e:db:68:
2b:c3:82:e9:91:4d:7a:40:49:2f:ea:1a:fc:63:e6:3c:f2:47:
1c:8d:8b:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSjuPpN2rzdrbHbJlK+QuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTJmODQ5OGE5MzYzNzRiMGJjNzAzZDNiZjRmZDk1MjYxMGIyOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA/AcktK9341aO4C+tbWcxBw7iQE
Os3kYdCsFYCXraVl0yA0fdPM6Y/Z5m2Sfavyem3elpw6xE/1/CsoFyUAArGUmDGb
lYwLJeyfGpZkh75CEUBqq/JyCEH70DMvW0skRjlY83J4hd3uihOGvXDrpUXbPFDG
Iu2hAWI4O+cTijbHZlZSLAMa5p+RDD5eIoWlEKgZQ6h+dHmADMXqkjrZwLUArsbD
svNofYXpHW87skKjs3q/bbdiYUuLfNkTTga/BG8grrLjXK0nDUxB/Vn2C0QzzGvC
yRIAYIoxb95GT3kze6k1FUts5xB2aj/c8ksPs48M/lJAFiaLUGpYEvVZvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMUvhJipNjdLC8cD079P2VJhCylJMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEveFMtRW1LazJOMHNMeHdQVHYwX1pVbUVMS1VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvOvMA0G
CSqGSIb3DQEBCwUAA4IBAQB9urFUfnRjOjwwyb0oIVH5SFHMNQ0nPFcqlI3mzRjZ
wIiOHs8A+XuTuPKxBwz9poJXfRRbJUoQYZ60qBmeeP9sdazYRtfqOefJ7UMT+izn
HWhNnWQjzP1WjF5v4ArVOGZiNgZkM3lZls/WlM2Wj0tnCR5bOEr89qSinD7RledQ
jollEcumNzO0qziEg6cp3luX3kkT3p/D/pjz9QcR12lNhr8fVP1rH+pVSPbLhUS4
0R4B6ze2w7S0e+AgRZ3QCQe+YjFhfDk2HfFRLPpSswGz7treI8wUBk1fyhP8Lnf3
QZJxN4dwhCA+22grw4LpkU16QEkv6hr8Y+Y88kccjYvS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org