Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/upwa1GYXfT0-4IcLO_P5GrNHnn0.roa
File: upwa1GYXfT0-4IcLO_P5GrNHnn0.roa (raw, json)
Hash identifier: 1iy2hEnvteSgkxf8fq1Mb8ot137aONI0k9gN2xhiaKc=
Subject key identifier: BA:9C:1A:D4:66:17:7D:3D:3E:E0:87:0B:3B:F3:F9:1A:B3:47:9E:7D
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 0188DE7913B8F242E0161455E53EFA274D62
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/upwa1GYXfT0-4IcLO_P5GrNHnn0.roa
Signing time: Wed 21 Jun 2023 15:00:56 +0000
ROA not before: Wed 21 Jun 2023 15:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16322
IP address blocks: 46.224.64.0/19 maxlen: 19
46.225.32.0/19 maxlen: 19
46.224.96.0/20 maxlen: 20
46.225.64.0/19 maxlen: 19
46.224.224.0/19 maxlen: 19
46.225.192.0/19 maxlen: 19
46.224.32.0/19 maxlen: 19
46.225.0.0/19 maxlen: 19
46.225.121.0/24 maxlen: 24
46.224.160.0/19 maxlen: 19
46.225.120.0/24 maxlen: 24
46.224.192.0/19 maxlen: 19
46.167.128.0/19 maxlen: 19
46.225.160.0/19 maxlen: 19
46.224.112.0/20 maxlen: 20
46.225.96.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:79:13:b8:f2:42:e0:16:14:55:e5:3e:fa:27:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jun 21 15:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba9c1ad466177d3d3ee0870b3bf3f91ab3479e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:97:c5:db:e7:ea:ee:54:58:f2:63:df:1f:
e9:db:87:3b:91:3d:6d:ba:b2:80:4d:d2:86:0b:e8:
36:15:17:56:84:41:db:bb:26:01:bc:a7:05:bd:6d:
33:19:a9:28:1b:e7:e8:48:86:6e:02:0e:58:85:44:
3f:95:89:77:aa:84:5c:95:1c:27:95:26:b9:3f:1b:
1a:76:12:b5:85:f4:4d:fe:37:c4:3e:74:67:4a:37:
58:af:33:68:4d:dc:f9:ab:fc:e9:32:54:40:b3:f1:
da:c6:6c:fc:0c:67:14:cf:85:4b:11:95:77:27:5a:
58:cd:aa:cb:0d:f8:ec:4b:c0:1b:bd:32:1e:79:0f:
38:2d:3a:4d:cb:4f:28:98:e1:19:f0:aa:c2:1e:8a:
16:15:73:8d:85:76:5a:68:b9:06:c6:93:e2:cf:43:
c9:52:42:52:bb:e1:cd:3e:78:82:07:73:b3:b5:0f:
f5:16:85:8b:94:36:ae:1c:a6:8d:54:92:44:04:96:
48:a7:2e:df:86:5a:f8:92:f9:d1:3e:e1:19:4c:0a:
a4:7a:8b:6e:c5:d8:85:aa:8f:43:f6:f2:e6:bd:0f:
40:08:38:84:cb:71:56:8e:a6:42:af:10:d9:b7:d1:
4c:cd:a4:6e:37:dc:89:75:b6:7d:86:e4:11:5e:08:
78:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:1A:D4:66:17:7D:3D:3E:E0:87:0B:3B:F3:F9:1A:B3:47:9E:7D
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/upwa1GYXfT0-4IcLO_P5GrNHnn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.167.128.0/19
46.224.32.0-46.224.127.255
46.224.160.0-46.225.127.255
46.225.160.0-46.225.223.255
Signature Algorithm: sha256WithRSAEncryption
10:e3:fe:ec:0a:9f:67:10:66:04:29:5a:c9:a9:9f:38:8e:eb:
a1:5e:c7:82:f9:08:a5:20:46:60:7e:da:27:70:fa:fa:36:07:
1a:9e:3e:f8:e3:4b:7d:ee:45:41:7e:4c:f3:2e:ba:7c:ca:1e:
de:85:ba:0e:28:9d:c3:4c:eb:6c:14:15:da:ab:46:b1:7f:57:
4c:84:55:d5:97:a5:93:4d:e9:66:c8:ff:85:54:86:2a:cf:a5:
4c:05:61:bc:63:64:c3:24:f4:67:7e:6c:64:8f:07:7e:67:46:
9e:8f:56:5d:cd:11:9c:a9:87:8d:bf:10:31:99:84:a1:cc:ab:
f2:07:ef:f5:83:cd:55:f8:64:aa:e5:7c:52:27:ef:31:9e:63:
b3:25:37:23:d9:62:ae:62:01:b1:13:7e:98:28:81:59:13:02:
b1:f3:80:6f:0e:4a:53:60:b2:50:23:52:57:bd:9c:fd:45:0d:
e6:26:19:91:c7:bf:2c:7f:f2:c2:ad:87:47:98:e5:04:eb:c7:
c0:cd:11:4b:8c:b8:8e:f1:a8:00:1a:16:29:56:fb:e0:7b:89:
e9:ed:45:12:66:5a:8f:b5:2d:a5:70:0c:da:c7:55:78:48:40:
fd:20:7e:d2:f0:43:c2:35:d7:c8:fa:22:bb:2e:e2:7e:35:8d:
97:1b:b2:03
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYjeeRO48kLgFhRV5T76J01iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODNhOGM2OWEyNjMwY2Q4ZjZmYTcwYWYyYTUzZmUwMTlm
MmNjMDcwHhcNMjMwNjIxMTUwMDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTljMWFkNDY2MTc3ZDNkM2VlMDg3MGIzYmYzZjkxYWIzNDc5ZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqXxdvn6u5UWPJj3x/p24c7kT1t
urKATdKGC+g2FRdWhEHbuyYBvKcFvW0zGakoG+foSIZuAg5YhUQ/lYl3qoRclRwn
lSa5PxsadhK1hfRN/jfEPnRnSjdYrzNoTdz5q/zpMlRAs/Haxmz8DGcUz4VLEZV3
J1pYzarLDfjsS8AbvTIeeQ84LTpNy08omOEZ8KrCHooWFXONhXZaaLkGxpPiz0PJ
UkJSu+HNPniCB3OztQ/1FoWLlDauHKaNVJJEBJZIpy7fhlr4kvnRPuEZTAqkeotu
xdiFqo9D9vLmvQ9ACDiEy3FWjqZCrxDZt9FMzaRuN9yJdbZ9huQRXgh47wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLqcGtRmF309PuCHCzvz+RqzR559MB8GA1UdIwQY
MBaAFAKDqMaaJjDNj2+nCvKlP+AZ8swHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTkt
NTkyYzBkY2RhZjc5LzEvdXB3YTFHWVhmVDAtNEljTE9fUDVHck5Ibm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYzI0YWQtMjRiNC00Yzk4LWE2NTktNTkyYzBkY2RhZjc5
LzEvQW9Pb3hwb21NTTJQYjZjSzhxVV80Qm55ekFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQFLqeAMAwD
BAUu4CADBAcu4AAwDAMEBS7goAMEBy7hADAMAwQFLuGgAwQFLuHAMA0GCSqGSIb3
DQEBCwUAA4IBAQAQ4/7sCp9nEGYEKVrJqZ84juuhXseC+QilIEZgftoncPr6Ngca
nj7440t97kVBfkzzLrp8yh7ehboOKJ3DTOtsFBXaq0axf1dMhFXVl6WTTelmyP+F
VIYqz6VMBWG8Y2TDJPRnfmxkjwd+Z0aej1ZdzRGcqYeNvxAxmYShzKvyB+/1g81V
+GSq5XxSJ+8xnmOzJTcj2WKuYgGxE36YKIFZEwKx84BvDkpTYLJQI1JXvZz9RQ3m
JhmRx78sf/LCrYdHmOUE68fAzRFLjLiO8agAGhYpVvvge4np7UUSZlqPtS2lcAza
x1V4SED9IH7S8EPCNdfI+iK7LuJ+NY2XG7ID
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:08 2024 by rpki-client on console-ams.rpki-client.org