Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/JTpepx4P9EqrE9TAnbTlYdib5bk.roa
File: JTpepx4P9EqrE9TAnbTlYdib5bk.roa (raw, json)
Hash identifier: CrZN1R9rQuL4SAV273Ce3EUrC4sSXJwi3A3gQWzEhGc=
Subject key identifier: 25:3A:5E:A7:1E:0F:F4:4A:AB:13:D4:C0:9D:B4:E5:61:D8:9B:E5:B9
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 018EF53D1A7FF074507C5DC125F561ADB4F4
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/JTpepx4P9EqrE9TAnbTlYdib5bk.roa
Signing time: Fri 19 Apr 2024 07:23:26 +0000
ROA not before: Fri 19 Apr 2024 07:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215234
IP address blocks: 46.102.118.0/23 maxlen: 23
46.102.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 08:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:3d:1a:7f:f0:74:50:7c:5d:c1:25:f5:61:ad:b4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Apr 19 07:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=253a5ea71e0ff44aab13d4c09db4e561d89be5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:9b:af:98:67:a1:12:f1:e5:f3:1a:54:0d:
91:eb:2b:77:e1:9d:7b:d9:86:c2:45:39:b8:5c:19:
5e:16:b5:af:2b:99:da:b5:d3:0b:10:b0:ac:c7:6d:
c4:fc:43:e5:7f:35:b0:06:b9:bb:48:de:1c:3c:79:
54:97:70:1b:c9:6c:d5:49:a6:ed:e5:09:be:c6:1d:
c0:89:2f:3d:55:89:60:71:dc:76:fc:28:d1:b4:7f:
c1:e0:cf:53:6d:80:d7:96:fb:af:ed:a3:dd:dc:bc:
1f:91:d2:15:51:4b:46:3e:fa:e5:c2:3f:9b:58:40:
41:7c:fe:fd:98:2b:84:03:80:a3:12:03:84:49:58:
e9:d9:de:8f:f1:7e:24:e3:61:70:b0:ac:04:4f:e0:
58:4d:ad:fb:f1:3b:36:59:1f:64:af:25:5b:73:71:
71:fa:ea:03:10:f5:9a:d8:a6:e2:31:ec:f5:76:99:
e9:d9:6a:a8:07:94:78:08:16:8b:a0:b4:f7:89:77:
fe:e9:42:ec:97:84:10:45:c9:fd:4e:8e:a8:0f:36:
f8:a2:e8:6d:d9:fe:10:51:51:88:62:3d:54:f1:08:
03:82:9b:0b:09:27:59:9f:e9:2e:02:cd:24:d3:7e:
53:a5:4f:e8:76:6d:de:53:1a:76:b7:ad:fc:20:78:
9f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:5E:A7:1E:0F:F4:4A:AB:13:D4:C0:9D:B4:E5:61:D8:9B:E5:B9
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/JTpepx4P9EqrE9TAnbTlYdib5bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.118.0/23
Signature Algorithm: sha256WithRSAEncryption
82:60:c8:16:31:9d:6b:3f:67:b4:60:5d:ce:bf:e6:03:a9:45:
b8:a3:79:90:27:e1:6b:4d:64:74:b5:a0:3a:93:c8:ee:8c:95:
28:7e:10:17:10:3a:9f:51:5b:4a:a0:57:03:00:e8:9a:76:b2:
0f:63:b4:25:b6:ad:5d:79:06:ad:94:16:cd:5e:d6:8d:b8:cb:
6b:dc:1b:17:6b:d5:30:17:bb:dd:4b:89:aa:9f:c8:4e:3c:b2:
eb:41:e6:92:9e:8a:00:dd:e4:a7:f4:ec:ba:01:5f:c3:24:dd:
ab:89:3b:29:d2:8d:77:78:82:aa:81:29:b4:c9:6b:46:2f:74:
0d:c5:07:57:49:ac:23:bb:9a:34:aa:5f:70:8a:14:71:14:fe:
ec:68:c2:ab:18:92:29:4e:5a:2d:7f:d7:4a:55:de:ff:f8:99:
73:1e:73:1e:dc:91:25:29:43:48:2d:e5:b8:ad:03:65:43:bf:
9e:97:33:c1:0e:0e:ad:8b:f8:6c:7a:09:5f:b7:61:be:d2:d1:
ae:75:be:44:a7:7b:a0:c7:23:57:f9:f9:1f:b5:59:12:69:28:
b2:b5:ae:b2:a8:74:a8:fb:38:4e:07:be:e6:14:5f:84:af:f9:
c1:62:17:1a:de:58:7f:24:7e:5f:2f:b2:4e:c1:d0:bd:c8:4d:
0c:07:a4:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY71PRp/8HRQfF3BJfVhrbT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1OTJhMDYwOTBmMDE2OTQwZDMxZWIxYjA5YmFlMTJkOTRi
MTk1YjAwHhcNMjQwNDE5MDcyMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTNhNWVhNzFlMGZmNDRhYWIxM2Q0YzA5ZGI0ZTU2MWQ4OWJlNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxebr5hnoRLx5fMaVA2R6yt34Z17
2YbCRTm4XBleFrWvK5natdMLELCsx23E/EPlfzWwBrm7SN4cPHlUl3AbyWzVSabt
5Qm+xh3AiS89VYlgcdx2/CjRtH/B4M9TbYDXlvuv7aPd3LwfkdIVUUtGPvrlwj+b
WEBBfP79mCuEA4CjEgOESVjp2d6P8X4k42FwsKwET+BYTa378Ts2WR9kryVbc3Fx
+uoDEPWa2KbiMez1dpnp2WqoB5R4CBaLoLT3iXf+6ULsl4QQRcn9To6oDzb4ouht
2f4QUVGIYj1U8QgDgpsLCSdZn+kuAs0k035TpU/odm3eUxp2t638IHifIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCU6XqceD/RKqxPUwJ205WHYm+W5MB8GA1UdIwQY
MBaAFMWSoGCQ8BaUDTHrGwm64S2UsZWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEt
YzQ1NjIwMzI2NDkxLzEvSlRwZXB4NFA5RXFyRTlUQW5iVGxZZGliNWJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEtYzQ1NjIwMzI2NDkx
LzEveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLmZ2MA0G
CSqGSIb3DQEBCwUAA4IBAQCCYMgWMZ1rP2e0YF3Ov+YDqUW4o3mQJ+FrTWR0taA6
k8jujJUofhAXEDqfUVtKoFcDAOiadrIPY7Qltq1deQatlBbNXtaNuMtr3BsXa9Uw
F7vdS4mqn8hOPLLrQeaSnooA3eSn9Oy6AV/DJN2riTsp0o13eIKqgSm0yWtGL3QN
xQdXSawju5o0ql9wihRxFP7saMKrGJIpTlotf9dKVd7/+JlzHnMe3JElKUNILeW4
rQNlQ7+elzPBDg6ti/hseglft2G+0tGudb5Ep3ugxyNX+fkftVkSaSiyta6yqHSo
+zhOB77mFF+Er/nBYhca3lh/JH5fL7JOwdC9yE0MB6QN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org