Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/6E8ECXvo4NhPHMyBQTZJ6XMWrP0.roa
File: 6E8ECXvo4NhPHMyBQTZJ6XMWrP0.roa (raw, json)
Hash identifier: vTO2ZwHOxrnm7v7IWeHDQI+iNYT+ZvQh1ARUQ9SmpK4=
Subject key identifier: E8:4F:04:09:7B:E8:E0:D8:4F:1C:CC:81:41:36:49:E9:73:16:AC:FD
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 01857959BB3632B4761B01282C7228156785
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/6E8ECXvo4NhPHMyBQTZJ6XMWrP0.roa
Signing time: Tue 03 Jan 2023 20:36:41 +0000
ROA not before: Tue 03 Jan 2023 20:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40994
IP address blocks: 46.102.157.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
31.14.17.0/24 maxlen: 24
94.177.8.0/23 maxlen: 24
86.106.182.0/23 maxlen: 24
2a0d:f302::/32 maxlen: 32
2a0d:f301::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:59:bb:36:32:b4:76:1b:01:28:2c:72:28:15:67:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 3 20:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e84f04097be8e0d84f1ccc81413649e97316acfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:34:09:4d:43:6a:75:53:de:26:da:2c:37:
f0:98:68:df:7d:51:f2:78:2b:90:e9:9b:bb:0d:39:
95:5d:f0:8d:55:51:e9:8c:15:90:13:aa:2c:bd:03:
74:f2:14:dd:68:4f:f4:ff:46:ef:33:25:ac:dc:80:
d8:18:84:e2:9f:5f:47:b8:9b:49:cd:41:70:96:e5:
03:9d:40:73:bc:b6:ec:85:d9:6c:31:b3:09:33:0e:
31:78:69:24:64:02:78:8e:75:09:de:17:82:ad:65:
8a:40:59:c7:2a:2b:a3:66:97:cd:16:dd:c9:6e:14:
82:c9:43:1f:b7:5c:34:7d:72:40:81:ac:85:9d:04:
17:ef:07:50:c7:9e:5a:eb:53:8e:16:48:71:67:be:
93:72:df:0e:4c:c3:c6:77:e5:87:c1:e3:ac:3b:7b:
e4:f8:c6:1e:75:88:9b:77:66:94:fa:d6:b0:ab:9c:
f3:0d:6d:46:e9:61:4c:5d:be:b2:ce:77:99:fa:91:
e5:d1:ed:e7:2e:91:17:52:70:56:4e:69:54:5a:a4:
a2:92:c0:35:94:43:cb:3b:0d:32:27:33:1d:14:1e:
9e:3c:bf:d2:ec:79:fe:01:f7:2c:b2:99:b7:3f:7f:
f7:e3:5f:fc:86:77:be:52:1b:98:d4:46:8f:fa:1b:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:04:09:7B:E8:E0:D8:4F:1C:CC:81:41:36:49:E9:73:16:AC:FD
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/6E8ECXvo4NhPHMyBQTZJ6XMWrP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
86.106.182.0/23
94.177.8.0/23
IPv6:
2a0d:f301::/48
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
68:16:13:fb:b3:39:7c:88:a9:47:28:a0:ed:65:87:c9:73:cd:
c7:15:98:37:a3:9a:4f:80:6d:b6:21:b5:ea:01:46:49:8d:e8:
a8:7d:68:4d:6d:55:ba:75:11:76:52:3f:7c:4b:52:e3:12:26:
f6:39:f3:13:b3:af:97:57:44:06:ed:4d:54:f1:0b:9f:a9:93:
68:48:97:33:74:91:44:a4:4a:6e:67:e0:45:82:99:05:5e:55:
42:81:41:a4:ba:8a:91:17:d5:4a:1e:3f:6f:52:e8:06:6b:33:
5d:18:5e:ba:77:b7:a0:30:94:71:c6:53:46:99:a5:d6:81:54:
f3:53:aa:39:3a:33:6e:85:34:33:23:d9:88:f9:81:3a:72:68:
9d:a0:51:80:80:46:c6:22:13:3a:96:55:7f:3a:ab:13:26:54:
e6:d5:a8:44:69:f0:cd:b9:1a:7e:b4:d4:ed:dc:df:22:02:f7:
80:f4:28:ff:b9:02:f2:26:4c:91:cb:70:95:40:32:73:57:9d:
27:ea:d4:bc:82:1e:53:9a:b4:5a:cd:5c:9c:cf:e9:82:6e:cd:
5b:3d:78:33:a4:69:d2:7b:6c:2d:07:08:8e:f0:6a:d8:77:4c:
98:1d:d7:00:be:78:35:62:61:ec:f7:47:77:c3:00:0b:ec:7c:
f9:ef:68:46
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYV5Wbs2MrR2GwEoLHIoFWeFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjMwMTAzMjAzNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODRmMDQwOTdiZThlMGQ4NGYxY2NjODE0MTM2NDllOTczMTZhY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxo0CU1DanVT3ibaLDfwmGjffVHy
eCuQ6Zu7DTmVXfCNVVHpjBWQE6osvQN08hTdaE/0/0bvMyWs3IDYGITin19HuJtJ
zUFwluUDnUBzvLbshdlsMbMJMw4xeGkkZAJ4jnUJ3heCrWWKQFnHKiujZpfNFt3J
bhSCyUMft1w0fXJAgayFnQQX7wdQx55a61OOFkhxZ76Tct8OTMPGd+WHweOsO3vk
+MYedYibd2aU+tawq5zzDW1G6WFMXb6yzneZ+pHl0e3nLpEXUnBWTmlUWqSiksA1
lEPLOw0yJzMdFB6ePL/S7Hn+Afcsspm3P3/341/8hne+UhuY1EaP+hunHQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFOhPBAl76ODYTxzMgUE2SelzFqz9MB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvNkU4RUNYdm80TmhQSE15QlFUWko2WE1XclAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAeBAIAATAYAwQAHw4RAwQB
LmacAwQBVmq2AwQBXrEIMBYEAgACMBADBwAqDfMBAAADBQAqDfMCMA0GCSqGSIb3
DQEBCwUAA4IBAQBoFhP7szl8iKlHKKDtZYfJc83HFZg3o5pPgG22IbXqAUZJjeio
fWhNbVW6dRF2Uj98S1LjEib2OfMTs6+XV0QG7U1U8QufqZNoSJczdJFEpEpuZ+BF
gpkFXlVCgUGkuoqRF9VKHj9vUugGazNdGF66d7egMJRxxlNGmaXWgVTzU6o5OjNu
hTQzI9mI+YE6cmidoFGAgEbGIhM6llV/OqsTJlTm1ahEafDNuRp+tNTt3N8iAveA
9Cj/uQLyJkyRy3CVQDJzV50n6tS8gh5TmrRazVycz+mCbs1bPXgzpGnSe2wtBwiO
8GrYd0yYHdcAvng1YmHs90d3wwAL7Hz572hG
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org