Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/UWdS1oAdaD63Zr_ZyogiG5lk7bE.roa
File: UWdS1oAdaD63Zr_ZyogiG5lk7bE.roa (raw, json)
Hash identifier: D3OiZBgu2j3tP6nYzBvxHEam4/rVlF720WWEDAwlJ2k=
Subject key identifier: 51:67:52:D6:80:1D:68:3E:B7:66:BF:D9:CA:88:22:1B:99:64:ED:B1
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01856BC108EF6FD8C0B6B7C792720E0D69A0
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/UWdS1oAdaD63Zr_ZyogiG5lk7bE.roa
Signing time: Sun 01 Jan 2023 05:14:50 +0000
ROA not before: Sun 01 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51582
IP address blocks: 185.89.124.0/22 maxlen: 24
46.55.216.0/21 maxlen: 24
46.55.224.0/20 maxlen: 24
46.55.128.0/18 maxlen: 24
46.55.242.0/23 maxlen: 24
46.55.244.0/22 maxlen: 24
46.55.241.0/24 maxlen: 24
46.55.248.0/22 maxlen: 24
185.240.144.0/22 maxlen: 24
46.55.192.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 23:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:08:ef:6f:d8:c0:b6:b7:c7:92:72:0e:0d:69:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jan 1 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=516752d6801d683eb766bfd9ca88221b9964edb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ec:0a:6b:76:d8:c5:26:44:2c:72:b8:25:52:
bc:03:56:ba:67:ca:95:a3:23:d0:fb:36:20:af:7b:
9e:c7:97:f0:f5:2a:f8:1b:f8:98:c9:11:51:8e:36:
ce:f9:97:d9:7e:15:67:6e:e9:da:d2:61:94:ed:78:
1d:76:c4:ed:f0:e3:52:57:20:6f:59:9b:53:3c:1b:
3a:57:f2:be:f6:82:be:9f:7c:9d:2d:6e:25:ca:c7:
b5:14:cc:ed:29:33:60:9b:56:36:e5:a3:be:5d:fc:
39:ad:b1:dc:8b:39:6e:b0:c8:40:35:9d:52:21:0e:
a8:60:27:ed:c7:5d:b3:8c:6e:1b:10:fe:70:a8:66:
00:2f:56:fd:e5:10:9d:21:a6:56:95:3b:5c:49:3c:
b7:5c:4c:00:98:d5:d1:d5:43:dc:f6:76:71:dc:16:
ee:f8:1d:aa:32:1e:a4:e6:6f:b5:b8:e5:7e:57:59:
87:b0:91:a5:cc:49:4c:c4:cd:37:40:b5:d1:b5:31:
da:88:cf:32:13:55:37:f3:b6:0d:f9:79:c6:4b:15:
f3:32:b4:a9:b5:5c:27:bd:e5:78:8c:be:48:d0:6f:
2d:7f:5b:8f:42:f1:68:af:bf:ef:3a:bc:20:aa:05:
d9:b3:2b:1e:1d:2b:2d:e4:59:af:d1:25:e0:16:70:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:52:D6:80:1D:68:3E:B7:66:BF:D9:CA:88:22:1B:99:64:ED:B1
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/UWdS1oAdaD63Zr_ZyogiG5lk7bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.128.0-46.55.207.255
46.55.216.0-46.55.239.255
46.55.241.0-46.55.251.255
185.89.124.0/22
185.240.144.0/22
Signature Algorithm: sha256WithRSAEncryption
10:27:84:9b:67:7e:a8:27:c2:0c:81:f7:fe:81:18:d8:45:99:
31:53:dd:1e:ec:ff:b1:bd:f6:89:fd:99:b9:c1:10:01:66:78:
77:6e:44:2f:ba:11:f6:70:5c:7a:36:15:f6:b9:1e:75:db:48:
b0:39:9c:aa:a3:90:1b:fa:61:f8:03:65:a5:c1:56:38:b4:1f:
62:3c:ab:70:60:35:0a:37:61:49:16:f0:b1:be:d3:51:f3:ff:
14:4f:b0:de:f8:bb:76:a2:e1:5f:09:92:90:bd:4b:ca:92:cb:
44:4a:24:d5:f8:61:d2:78:bb:79:56:ee:ea:c1:99:71:38:76:
a4:7c:9d:99:43:86:16:78:5b:80:7c:e7:b1:3b:b7:89:73:13:
f2:d1:d2:7d:6d:c9:16:1f:cf:f6:33:51:47:57:1e:41:b4:0b:
c4:63:70:1e:5d:f8:42:c7:c7:0d:c5:b4:bc:a1:2b:49:7c:b7:
9d:ad:50:e0:06:ce:19:37:66:d1:53:fe:ac:d5:44:f3:b0:67:
47:0f:78:a7:d4:f4:2c:e2:57:26:f4:65:d6:13:00:7c:b9:9b:
21:d3:74:d2:5b:0f:4a:c1:a5:4b:24:8a:17:1f:fb:e3:fb:c8:
bb:a4:f5:2d:08:ac:13:5b:06:aa:80:3b:d8:2e:42:5b:e4:b8:
97:f1:81:a4
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYVrwQjvb9jAtrfHknIODWmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjA4N2IwZjY3MTZkMjNjOGQyM2ViM2QwMzkyYjZiZjY0
MmFkNGIwHhcNMjMwMTAxMDUxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTY3NTJkNjgwMWQ2ODNlYjc2NmJmZDljYTg4MjIxYjk5NjRlZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhewKa3bYxSZELHK4JVK8A1a6Z8qV
oyPQ+zYgr3uex5fw9Sr4G/iYyRFRjjbO+ZfZfhVnbuna0mGU7XgddsTt8ONSVyBv
WZtTPBs6V/K+9oK+n3ydLW4lyse1FMztKTNgm1Y25aO+Xfw5rbHcizlusMhANZ1S
IQ6oYCftx12zjG4bEP5wqGYAL1b95RCdIaZWlTtcSTy3XEwAmNXR1UPc9nZx3Bbu
+B2qMh6k5m+1uOV+V1mHsJGlzElMxM03QLXRtTHaiM8yE1U387YN+XnGSxXzMrSp
tVwnveV4jL5I0G8tf1uPQvFor7/vOrwgqgXZsyseHSst5Fmv0SXgFnAbiwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFFFnUtaAHWg+t2a/2cqIIhuZZO2xMB8GA1UdIwQY
MBaAFA0gh7D2cW0jyNI+s9A5K2v2Qq1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQt
YTIwZDJkNzUxZWI1LzEvVVdkUzFvQWRhRDYzWnJfWnlvZ2lHNWxrN2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mY2I3MjktYzI4OC00ZTE1LTkzODQtYTIwZDJkNzUxZWI1
LzEvRFNDSHNQWnhiU1BJMGo2ejBEa3JhX1pDclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAcuN4AD
BAQuN8AwDAMEAy432AMEBC434DAMAwQALjfxAwQCLjf4AwQCuVl8AwQCufCQMA0G
CSqGSIb3DQEBCwUAA4IBAQAQJ4SbZ36oJ8IMgff+gRjYRZkxU90e7P+xvfaJ/Zm5
wRABZnh3bkQvuhH2cFx6NhX2uR5120iwOZyqo5Ab+mH4A2WlwVY4tB9iPKtwYDUK
N2FJFvCxvtNR8/8UT7De+Lt2ouFfCZKQvUvKkstESiTV+GHSeLt5Vu7qwZlxOHak
fJ2ZQ4YWeFuAfOexO7eJcxPy0dJ9bckWH8/2M1FHVx5BtAvEY3AeXfhCx8cNxbS8
oStJfLedrVDgBs4ZN2bRU/6s1UTzsGdHD3in1PQs4lcm9GXWEwB8uZsh03TSWw9K
waVLJIoXH/vj+8i7pPUtCKwTWwaqgDvYLkJb5LiX8YGk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:54 2024 by rpki-client on console-fra.rpki-client.org