Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/6TSQGK7jUOObbj-tKNV4VKlS2Gs.roa
File: 6TSQGK7jUOObbj-tKNV4VKlS2Gs.roa (raw, json)
Hash identifier: 4VhOFVOlsCacUXHDPzUL6ch3nC7Rw1nr7q6aDdiyxPU=
Subject key identifier: E9:34:90:18:AE:E3:50:E3:9B:6E:3F:AD:28:D5:78:54:A9:52:D8:6B
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 01856F94B0A43F84DE27F927A23F0F59BD83
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/6TSQGK7jUOObbj-tKNV4VKlS2Gs.roa
Signing time: Sun 01 Jan 2023 23:04:53 +0000
ROA not before: Sun 01 Jan 2023 23:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42926
IP address blocks: 46.8.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b0:a4:3f:84:de:27:f9:27:a2:3f:0f:59:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 23:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9349018aee350e39b6e3fad28d57854a952d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:92:6e:86:76:a8:29:08:bf:b8:60:38:83:
ce:b2:3c:61:a8:cb:a0:04:45:01:2a:6d:56:dd:42:
31:fa:37:97:ed:3c:2b:26:16:48:00:76:5e:fb:28:
57:f8:32:ef:27:e8:8e:ce:e5:dc:4c:d8:a0:bb:29:
2e:d0:2f:b9:99:d3:a0:2a:b6:d6:c7:e7:ef:7e:1d:
19:ea:f0:30:95:f8:f2:28:41:89:f0:d7:ed:93:c9:
5e:63:5f:51:cf:ad:70:39:bf:ee:20:56:ad:7e:dd:
bd:bc:07:86:5e:0a:fe:d7:e0:c4:09:37:c6:82:5c:
7a:dc:f9:5b:bf:be:b6:c5:83:54:8c:e0:24:fc:1a:
51:c6:94:a8:83:bc:0c:c6:bd:84:58:22:f0:73:24:
03:e4:a4:a7:8a:12:9a:02:59:8b:fe:03:33:9a:43:
19:d2:df:ca:1f:b4:f8:40:a3:35:36:b5:dc:44:53:
41:38:ad:e3:0d:66:d0:5f:bf:29:53:58:e3:01:94:
3f:f9:61:25:48:ce:ff:a3:89:e8:7c:2e:19:38:a0:
cb:2a:54:8a:cc:d2:08:66:72:29:0b:cd:56:0c:e7:
d2:8c:7f:91:63:aa:1c:d6:b5:d0:b2:10:fc:5b:5f:
ff:7a:96:1e:5f:ab:4c:76:78:15:7a:98:60:59:2d:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:34:90:18:AE:E3:50:E3:9B:6E:3F:AD:28:D5:78:54:A9:52:D8:6B
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/6TSQGK7jUOObbj-tKNV4VKlS2Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.194.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f9:0e:4c:39:ed:28:0f:a1:54:ac:f9:b4:82:03:f6:86:7e:
86:66:f3:12:93:d9:b8:af:77:9f:97:38:69:03:8f:68:9d:c2:
08:b6:71:c7:9e:90:9e:ed:b9:90:1c:c7:cf:9d:79:25:02:ee:
68:00:ec:5b:6d:ec:84:95:dc:e0:07:60:41:f1:10:82:72:45:
79:47:92:3d:67:0b:bc:2b:a2:1e:69:bd:0f:c9:9d:04:07:74:
b9:73:c6:fd:b6:59:b6:cf:d2:d3:06:c3:63:ef:37:db:51:43:
8d:5b:e1:d8:37:fe:66:d5:a0:a5:d2:a5:7b:6a:9d:3e:3f:46:
24:a0:d7:9a:99:c4:41:51:22:fa:4d:e8:f7:e5:24:09:34:90:
2c:39:6f:7c:2f:86:25:1c:b5:e4:01:4e:78:71:29:8f:3f:21:
00:cb:14:e3:2a:10:66:ab:7f:e4:2b:e3:cf:49:65:da:d0:9c:
83:6c:10:93:a1:36:a9:94:02:f3:df:74:42:68:a5:2a:11:74:
e3:82:b8:d1:0b:88:df:d0:c9:d7:02:67:dc:94:6e:64:ae:65:
11:a0:14:26:1f:b9:77:1e:7a:2a:28:ca:66:07:35:6c:c2:a6:
bb:2b:81:d4:4c:58:d0:04:14:ac:f6:30:03:e5:d9:44:bf:41:
92:20:ad:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlLCkP4TeJ/knoj8PWb2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjMwMTAxMjMwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTM0OTAxOGFlZTM1MGUzOWI2ZTNmYWQyOGQ1Nzg1NGE5NTJkODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO+SboZ2qCkIv7hgOIPOsjxhqMug
BEUBKm1W3UIx+jeX7TwrJhZIAHZe+yhX+DLvJ+iOzuXcTNiguyku0C+5mdOgKrbW
x+fvfh0Z6vAwlfjyKEGJ8Nftk8leY19Rz61wOb/uIFatft29vAeGXgr+1+DECTfG
glx63Plbv762xYNUjOAk/BpRxpSog7wMxr2EWCLwcyQD5KSnihKaAlmL/gMzmkMZ
0t/KH7T4QKM1NrXcRFNBOK3jDWbQX78pU1jjAZQ/+WElSM7/o4nofC4ZOKDLKlSK
zNIIZnIpC81WDOfSjH+RY6oc1rXQshD8W1//epYeX6tMdngVephgWS1bywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk0kBiu41Djm24/rSjVeFSpUthrMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvNlRTUUdLN2pVT09iYmotdEtOVjRWS2xTMkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgjCMA0G
CSqGSIb3DQEBCwUAA4IBAQCC+Q5MOe0oD6FUrPm0ggP2hn6GZvMSk9m4r3eflzhp
A49oncIItnHHnpCe7bmQHMfPnXklAu5oAOxbbeyEldzgB2BB8RCCckV5R5I9Zwu8
K6Ieab0PyZ0EB3S5c8b9tlm2z9LTBsNj7zfbUUONW+HYN/5m1aCl0qV7ap0+P0Yk
oNeamcRBUSL6Tej35SQJNJAsOW98L4YlHLXkAU54cSmPPyEAyxTjKhBmq3/kK+PP
SWXa0JyDbBCToTaplALz33RCaKUqEXTjgrjRC4jf0MnXAmfclG5krmURoBQmH7l3
HnoqKMpmBzVswqa7K4HUTFjQBBSs9jAD5dlEv0GSIK2z
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:02 2024 by rpki-client on console-fra.rpki-client.org