Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tle4C85kuwbwZ3XJf5DdCHQ5YCU.roa
File: tle4C85kuwbwZ3XJf5DdCHQ5YCU.roa (raw, json)
Hash identifier: ptjM/Us5jxSsqFEfMGpgysGN3W0c6773VQQAzG7mFO8=
Subject key identifier: B6:57:B8:0B:CE:64:BB:06:F0:67:75:C9:7F:90:DD:08:74:39:60:25
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188DE8F0A308B2FD914F7E92E5CDCB10C62
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tle4C85kuwbwZ3XJf5DdCHQ5YCU.roa
Signing time: Wed 21 Jun 2023 15:24:56 +0000
ROA not before: Wed 21 Jun 2023 15:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 46.34.38.0/23 maxlen: 23
46.34.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:8f:0a:30:8b:2f:d9:14:f7:e9:2e:5c:dc:b1:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 21 15:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b657b80bce64bb06f06775c97f90dd0874396025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:8c:88:0c:4a:5b:ac:e8:24:be:43:25:3c:
17:89:53:b6:f0:22:e4:87:95:d9:7c:a8:b1:dc:2a:
4a:f8:17:56:04:f1:02:94:e7:a4:c9:59:b7:37:2c:
2b:dc:8b:4b:90:17:2c:2a:a7:44:f3:ff:a3:fd:60:
92:4a:45:14:cd:12:68:aa:8f:33:83:8a:c0:a6:9f:
c4:16:55:c0:b3:45:b3:c8:81:00:ea:d6:0f:2f:3e:
68:cf:0c:01:bc:47:03:ea:07:21:5d:2d:01:78:af:
9c:93:ea:c8:09:66:b0:57:2b:97:36:80:4e:8c:5e:
41:a0:29:a0:0d:97:7b:e9:c2:6e:47:7d:39:13:f5:
c2:18:96:60:06:2d:dd:cb:9f:ec:a7:70:b5:fd:67:
61:98:b8:7e:34:73:3e:55:26:35:b4:3b:70:ad:81:
28:c8:a0:37:d0:78:c8:84:6e:d0:45:f8:c4:05:25:
bd:cc:04:19:86:8b:9d:15:4a:a0:51:b8:02:97:7a:
03:07:1a:e7:33:3b:25:e2:d1:90:02:b0:86:c0:0c:
c9:0d:88:5f:3e:52:e1:0e:31:be:71:31:af:24:25:
12:82:a9:47:e3:79:68:d7:17:9b:4c:89:8f:20:3d:
7a:1d:1a:a1:36:40:6a:0b:c2:56:08:59:86:3a:7b:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:B8:0B:CE:64:BB:06:F0:67:75:C9:7F:90:DD:08:74:39:60:25
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tle4C85kuwbwZ3XJf5DdCHQ5YCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/23
46.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0d:3f:67:0a:de:04:42:e4:11:21:30:11:1b:7e:e2:0b:16:
c5:8b:fe:87:0d:69:a5:a7:c2:eb:1b:fe:56:9c:f6:ca:fa:bc:
ec:6f:f5:8d:b7:ba:da:72:e0:17:83:9a:87:2c:cf:e6:b7:86:
5a:1c:50:40:c9:7e:0c:1b:e0:70:b8:8a:c1:4b:ec:2c:aa:d4:
8b:95:81:d7:74:ce:f5:f7:d4:1f:22:af:76:a0:d8:ee:42:ee:
01:4f:89:26:d1:a5:47:85:02:e5:74:46:a3:13:4e:f5:92:dc:
1a:11:6b:50:e2:d3:20:87:b6:0f:01:34:72:30:8e:53:f1:63:
d6:2e:2f:2c:bf:c9:65:8b:01:26:47:ad:5e:41:0c:ba:95:80:
51:7c:b7:e3:c9:18:d3:f9:d4:fa:40:41:02:ca:8f:27:0e:05:
cf:a6:fc:04:94:d6:76:64:ed:ad:49:88:76:f2:d1:f5:29:5b:
d4:62:56:e5:aa:66:d2:e0:f7:ac:a1:5c:59:59:db:16:d1:c1:
8c:ab:9c:1a:f3:30:a3:66:7e:3e:98:2f:80:d0:05:bb:9b:bd:
5e:cf:82:b7:47:b0:8e:7b:b8:94:2e:c1:c6:8a:af:86:de:4b:
e5:ca:19:02:af:99:b3:8a:fc:3f:2e:6d:51:74:70:2d:72:05:
72:52:2b:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjejwowiy/ZFPfpLlzcsQxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwNjIxMTUyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjU3YjgwYmNlNjRiYjA2ZjA2Nzc1Yzk3ZjkwZGQwODc0Mzk2MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSMiAxKW6zoJL5DJTwXiVO28CLk
h5XZfKix3CpK+BdWBPEClOekyVm3Nywr3ItLkBcsKqdE8/+j/WCSSkUUzRJoqo8z
g4rApp/EFlXAs0WzyIEA6tYPLz5ozwwBvEcD6gchXS0BeK+ck+rICWawVyuXNoBO
jF5BoCmgDZd76cJuR305E/XCGJZgBi3dy5/sp3C1/WdhmLh+NHM+VSY1tDtwrYEo
yKA30HjIhG7QRfjEBSW9zAQZhoudFUqgUbgCl3oDBxrnMzsl4tGQArCGwAzJDYhf
PlLhDjG+cTGvJCUSgqlH43lo1xebTImPID16HRqhNkBqC8JWCFmGOnumhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZXuAvOZLsG8Gd1yX+Q3Qh0OWAlMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvdGxlNEM4NWt1d2J3WjNYSmY1RGRDSFE1WUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLiImAwQA
LiIxMA0GCSqGSIb3DQEBCwUAA4IBAQBIDT9nCt4EQuQRITARG37iCxbFi/6HDWml
p8LrG/5WnPbK+rzsb/WNt7racuAXg5qHLM/mt4ZaHFBAyX4MG+BwuIrBS+wsqtSL
lYHXdM7199QfIq92oNjuQu4BT4km0aVHhQLldEajE071ktwaEWtQ4tMgh7YPATRy
MI5T8WPWLi8sv8lliwEmR61eQQy6lYBRfLfjyRjT+dT6QEECyo8nDgXPpvwElNZ2
ZO2tSYh28tH1KVvUYlblqmbS4PesoVxZWdsW0cGMq5wa8zCjZn4+mC+A0AW7m71e
z4K3R7COe7iULsHGiq+G3kvlyhkCr5mzivw/Lm1RdHAtcgVyUisF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-fra.rpki-client.org