Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/NeT2zUwGu32RbR25EVO8-FKws4k.roa
File: NeT2zUwGu32RbR25EVO8-FKws4k.roa (raw, json)
Hash identifier: jIxtD5l/s8cAtYO8r3Ab8FktnAriY1xKtQzgRYqIQVU=
Subject key identifier: 35:E4:F6:CD:4C:06:BB:7D:91:6D:1D:B9:11:53:BC:F8:52:B0:B3:89
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 018CC3B6D5094C58405B47990E684A6DB581
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/NeT2zUwGu32RbR25EVO8-FKws4k.roa
Signing time: Mon 01 Jan 2024 06:29:48 +0000
ROA not before: Mon 01 Jan 2024 06:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.8.195.0/24 maxlen: 24
46.8.198.0/24 maxlen: 24
188.130.224.0/22 maxlen: 24
46.8.203.0/24 maxlen: 24
46.8.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:d5:09:4c:58:40:5b:47:99:0e:68:4a:6d:b5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 06:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35e4f6cd4c06bb7d916d1db91153bcf852b0b389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:3c:57:38:75:9a:83:87:fd:27:bd:a9:16:
10:68:91:1e:8a:74:16:5e:7d:06:3c:57:ce:85:f6:
bd:c6:55:39:03:73:46:22:97:61:28:68:0e:c2:2e:
8b:60:bd:bf:be:89:2b:55:db:b9:96:9f:2c:f1:2e:
b5:45:97:e0:c1:98:13:76:13:21:76:34:b6:59:29:
bc:c7:3e:f3:59:5f:57:e6:77:bd:c8:8e:dd:45:30:
18:8d:1d:9b:49:91:02:13:83:ef:b5:31:6d:6c:d2:
cb:ba:11:1d:2d:01:c5:da:53:7e:70:8c:9e:1f:a2:
f9:7c:0c:cb:d3:2b:53:8e:2e:b9:ac:a5:38:0a:44:
df:8a:3a:8b:34:2b:c7:74:45:55:cd:5a:25:d6:42:
39:10:61:ff:bd:11:01:6e:83:69:fb:45:2b:a7:f7:
78:43:bb:3c:19:4d:fc:e0:bd:f8:31:85:57:bf:48:
12:0b:b5:40:ff:fd:1c:c0:3d:b1:43:bf:3e:be:63:
27:e8:c6:61:fe:84:3b:a9:7a:e9:13:21:2d:15:35:
68:59:43:0e:3f:ec:c0:48:f1:cd:28:7e:ca:9f:57:
7f:8b:a6:f5:54:16:ef:33:cd:3f:1d:af:6a:39:54:
29:82:43:a1:6b:7a:2f:26:56:7c:9b:97:73:ac:44:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E4:F6:CD:4C:06:BB:7D:91:6D:1D:B9:11:53:BC:F8:52:B0:B3:89
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/NeT2zUwGu32RbR25EVO8-FKws4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.100.0/22
46.8.195.0/24
46.8.198.0/24
46.8.203.0/24
188.130.224.0/22
Signature Algorithm: sha256WithRSAEncryption
48:6e:71:42:39:b2:82:de:9d:08:5c:1b:4c:bb:05:77:b2:9e:
7b:80:99:c8:71:a2:89:3f:c1:c3:b2:5d:c5:44:43:8b:c6:e2:
16:05:a5:27:ff:a2:3e:97:73:bd:f3:d4:93:88:70:10:9a:ad:
05:58:4a:d9:ac:dd:e7:b8:19:f3:f8:63:68:cc:a2:f3:ae:71:
85:2d:a3:99:f6:a5:88:5e:19:d1:68:13:97:57:1b:52:66:a6:
c7:ff:27:42:96:b4:4b:4e:36:43:1e:cd:3f:19:f9:16:7d:5f:
59:e7:4d:6f:f1:86:d9:8a:eb:f2:37:39:5a:16:dc:07:f7:00:
7b:a5:bb:7a:77:81:41:91:9c:bf:75:39:64:e0:78:b0:84:ad:
23:58:55:ee:d5:42:f8:c5:ed:e6:d1:57:ca:86:86:36:fb:fa:
77:7e:42:43:bc:69:8b:2e:18:c4:3a:f9:9a:a0:5b:6a:76:14:
6d:78:8b:57:40:c2:ba:a8:3c:56:12:2c:2a:b2:22:14:8c:7b:
c5:5e:69:ae:a3:5c:ea:6d:75:70:8d:86:37:d2:b0:e9:f0:ba:
29:fe:d8:33:28:a2:22:26:fb:29:e1:a2:a2:91:dd:3e:2e:9a:
18:f0:b4:d5:e0:d1:51:f3:8a:7d:42:8b:1d:e2:40:3b:f1:27:
16:9a:83:c0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzDttUJTFhAW0eZDmhKbbWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Mzc1ODE0MzQ0ZGYwYmY2ZDAxNzczM2FjZGM0ODhmMDAy
NjMxYjIwHhcNMjQwMTAxMDYyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWU0ZjZjZDRjMDZiYjdkOTE2ZDFkYjkxMTUzYmNmODUyYjBiMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5k8Vzh1moOH/Se9qRYQaJEeinQW
Xn0GPFfOhfa9xlU5A3NGIpdhKGgOwi6LYL2/vokrVdu5lp8s8S61RZfgwZgTdhMh
djS2WSm8xz7zWV9X5ne9yI7dRTAYjR2bSZECE4PvtTFtbNLLuhEdLQHF2lN+cIye
H6L5fAzL0ytTji65rKU4CkTfijqLNCvHdEVVzVol1kI5EGH/vREBboNp+0Urp/d4
Q7s8GU384L34MYVXv0gSC7VA//0cwD2xQ78+vmMn6MZh/oQ7qXrpEyEtFTVoWUMO
P+zASPHNKH7Kn1d/i6b1VBbvM80/Ha9qOVQpgkOha3ovJlZ8m5dzrER3mwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDXk9s1MBrt9kW0duRFTvPhSsLOJMB8GA1UdIwQY
MBaAFNQ3WBQ0TfC/bQF3M6zcSI8AJjGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2Yt
MzY3MWQ2N2ViOWY4LzEvTmVUMnpVd0d1MzJSYlIyNUVWTzgtRkt3czRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjRiMmQtMzUyMy00MjJlLTliY2YtMzY3MWQ2N2ViOWY4
LzEvMURkWUZEUk44TDl0QVhjenJOeElqd0FtTWJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLghkAwQA
LgjDAwQALgjGAwQALgjLAwQCvILgMA0GCSqGSIb3DQEBCwUAA4IBAQBIbnFCObKC
3p0IXBtMuwV3sp57gJnIcaKJP8HDsl3FREOLxuIWBaUn/6I+l3O989STiHAQmq0F
WErZrN3nuBnz+GNozKLzrnGFLaOZ9qWIXhnRaBOXVxtSZqbH/ydClrRLTjZDHs0/
GfkWfV9Z501v8YbZiuvyNzlaFtwH9wB7pbt6d4FBkZy/dTlk4HiwhK0jWFXu1UL4
xe3m0VfKhoY2+/p3fkJDvGmLLhjEOvmaoFtqdhRteItXQMK6qDxWEiwqsiIUjHvF
Xmmuo1zqbXVwjYY30rDp8Lop/tgzKKIiJvsp4aKikd0+LpoY8LTV4NFR84p9Qosd
4kA78ScWmoPA
-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:30 2024 by rpki-client on console-fra.rpki-client.org