Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ru1niIgKWcPvAl5cA9YZV86-NRo.roa
File: Ru1niIgKWcPvAl5cA9YZV86-NRo.roa (raw, json)
Hash identifier: /pICzrEOABv8sttsOQPcCcOMxHfk42CctrFPwm/PczI=
Subject key identifier: 46:ED:67:88:88:0A:59:C3:EF:02:5E:5C:03:D6:19:57:CE:BE:35:1A
Certificate issuer: /CN=3af7710df8add64bb9688e0f4581bea67e402c66
Certificate serial: 018BBB176F7CE954E656F2C169CEAAC52CF2
Authority key identifier: 3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ru1niIgKWcPvAl5cA9YZV86-NRo.roa
Signing time: Fri 10 Nov 2023 21:15:57 +0000
ROA not before: Fri 10 Nov 2023 21:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5398
IP address blocks: 31.44.32.0/20 maxlen: 20
193.221.216.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
46.21.16.0/23 maxlen: 23
46.21.22.0/24 maxlen: 24
46.21.18.0/23 maxlen: 23
46.21.21.0/24 maxlen: 24
46.21.29.0/24 maxlen: 24
193.222.104.0/23 maxlen: 23
185.155.176.0/22 maxlen: 22
185.155.184.0/23 maxlen: 24
77.220.64.0/19 maxlen: 19
2a00:bd00::/32 maxlen: 32
2a0f:e880::/29 maxlen: 29
2a02:210::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bb:17:6f:7c:e9:54:e6:56:f2:c1:69:ce:aa:c5:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af7710df8add64bb9688e0f4581bea67e402c66
Validity
Not Before: Nov 10 21:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ed6788880a59c3ef025e5c03d61957cebe351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:1b:b1:cd:f2:b4:d0:f1:78:02:cd:1e:4c:
69:03:9a:a7:58:8c:9a:2f:64:c1:bc:4d:fe:54:54:
04:bd:9c:26:17:57:4b:77:cd:b1:f4:9a:7f:de:39:
fb:a5:be:d6:f4:41:19:fd:da:94:18:2f:c7:18:52:
96:33:b0:59:8d:e9:65:08:93:47:fe:05:ff:6c:c7:
31:c0:07:50:3a:12:8a:3a:ae:85:70:4b:e0:a3:7b:
02:7c:b6:9e:db:80:01:78:4d:8f:f4:bb:a8:fd:f7:
42:42:12:12:a7:8e:d8:ec:4d:fc:d7:22:23:63:16:
c3:c1:bb:40:3e:be:49:79:f9:73:1c:fa:61:37:80:
ea:14:04:b9:af:de:05:86:ad:b7:f3:14:b6:71:aa:
86:0b:16:cf:74:0d:8d:8e:b1:c3:4b:d6:6b:a2:de:
1d:c4:3b:b0:9f:c2:59:df:89:7d:5b:c9:9b:6a:d1:
97:33:69:3b:b5:4d:d0:58:77:b2:aa:d2:96:c5:b1:
3b:60:39:15:31:27:68:32:d2:bf:88:24:f1:dc:f1:
59:40:83:17:c3:6e:c7:5c:70:bf:8c:d4:9c:15:01:
81:ae:58:2e:c7:15:9d:9f:10:74:ee:22:5d:28:7d:
8b:04:a2:28:91:a1:7c:b8:10:f2:1a:6a:2f:87:ab:
4e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:ED:67:88:88:0A:59:C3:EF:02:5E:5C:03:D6:19:57:CE:BE:35:1A
X509v3 Authority Key Identifier:
keyid:3A:F7:71:0D:F8:AD:D6:4B:B9:68:8E:0F:45:81:BE:A6:7E:40:2C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvdxDfit1ku5aI4PRYG-pn5ALGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/Ru1niIgKWcPvAl5cA9YZV86-NRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f59fe3-956e-4937-858d-eec416a886f7/1/OvdxDfit1ku5aI4PRYG-pn5ALGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/20
46.21.16.0/22
46.21.21.0-46.21.22.255
46.21.29.0/24
77.220.64.0/19
185.155.176.0/22
185.155.184.0/23
193.221.216.0/23
193.222.104.0/23
IPv6:
2a00:bd00::/32
2a02:210::/32
2a0f:e880::/29
Signature Algorithm: sha256WithRSAEncryption
99:2d:31:03:bf:5f:4d:23:52:80:d2:1d:7c:d9:18:94:71:5e:
e3:1f:68:b0:04:50:c8:6d:80:0d:33:67:cf:3f:86:40:dc:2e:
a3:63:92:2c:ae:10:04:6e:d4:fc:8d:8a:37:4a:96:36:15:aa:
70:07:94:f2:52:e1:e4:a3:9e:74:38:34:19:80:7e:de:11:06:
26:0d:26:42:ab:eb:fe:03:0e:dd:16:8b:87:96:cc:f6:86:fe:
72:a3:d1:6d:5e:e1:e5:30:60:ad:8a:37:90:06:ad:bf:bf:47:
4d:da:e0:36:1b:a0:59:cc:78:e9:4f:e2:fd:8f:09:31:8b:13:
ac:25:3c:84:16:c5:cd:b2:eb:a3:24:a3:a0:10:b0:58:9a:f4:
99:9b:be:9f:70:f9:f5:a8:28:ae:b8:e0:d1:86:5f:4e:9a:fb:
ad:ee:43:57:11:54:27:cc:1b:8a:e8:44:c4:b1:34:ca:19:f4:
3a:3a:4a:dd:28:68:03:82:5c:2c:b1:6c:99:dc:da:67:94:fc:
a2:ea:67:30:3b:40:09:0a:92:32:8e:8d:3c:69:e5:82:86:0d:
6c:b2:c6:d0:47:eb:f8:a3:52:b2:cd:b5:c6:06:4a:43:ef:f3:
d9:bc:f6:55:ab:57:34:d9:5c:0d:67:ba:1e:93:2b:fe:0e:1b:
a1:3c:6f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 09:26:56 2023 by rpki-client on console-fra.rpki-client.org