Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/sTElfXT3m7jXlAylp_VjpEKu8lE.roa
File: sTElfXT3m7jXlAylp_VjpEKu8lE.roa (raw, json)
Hash identifier: 5RGiNgpFB60Tj5HyGBWHA6ia3JLOkhUmOajzFUYGJGI=
Subject key identifier: B1:31:25:7D:74:F7:9B:B8:D7:94:0C:A5:A7:F5:63:A4:42:AE:F2:51
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 01856E6FA4E379C15580B34D2C5ECCE93AB2
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/sTElfXT3m7jXlAylp_VjpEKu8lE.roa
Signing time: Sun 01 Jan 2023 17:44:48 +0000
ROA not before: Sun 01 Jan 2023 17:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198291
IP address blocks: 185.124.44.0/22 maxlen: 24
46.232.138.0/24 maxlen: 24
46.232.139.0/24 maxlen: 24
46.232.136.0/21 maxlen: 24
46.232.136.0/24 maxlen: 24
46.232.137.0/24 maxlen: 24
46.232.141.0/24 maxlen: 24
46.232.142.0/24 maxlen: 24
46.232.140.0/24 maxlen: 24
46.232.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:a4:e3:79:c1:55:80:b3:4d:2c:5e:cc:e9:3a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Jan 1 17:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b131257d74f79bb8d7940ca5a7f563a442aef251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:d3:8a:ee:36:dd:ef:99:bd:71:0f:b7:91:
8e:e8:c7:09:aa:9b:45:19:04:9e:21:d4:fb:52:eb:
46:24:09:0f:c4:ce:63:72:07:f6:70:6a:02:de:7b:
34:75:13:fc:d6:fa:0a:45:07:07:27:d4:f9:21:f6:
ef:5c:fc:39:0d:f7:89:a7:88:d0:a2:d7:b4:0f:f3:
e5:eb:10:e0:fa:ee:b9:15:56:9c:b4:8d:75:3e:3e:
e6:22:1a:27:8f:66:bb:96:66:ac:2e:0e:93:c5:72:
f3:39:93:7f:3b:6c:27:ad:e0:65:b1:ef:24:92:1c:
3f:b0:0b:e5:2e:62:fd:54:74:49:76:a4:60:77:08:
f3:80:cd:dc:0c:40:87:d3:c1:0a:ab:b6:a0:20:7a:
4c:7c:b0:f0:ca:ef:49:03:35:26:0a:ae:dd:22:2d:
48:04:b3:be:b9:57:7e:bd:9e:d5:29:7d:50:86:fd:
a6:d2:f4:a0:75:9b:16:42:8c:72:1a:c8:1a:8b:27:
ba:35:a7:49:d9:cb:67:f7:e1:8f:61:b2:a2:18:46:
3b:d4:35:7a:bd:39:a4:47:70:44:0d:28:63:c8:49:
ab:2e:b7:bd:82:cc:57:94:ba:ea:88:96:17:6e:28:
88:7e:55:26:31:e2:c6:fd:b9:2e:c2:cc:09:2e:97:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:25:7D:74:F7:9B:B8:D7:94:0C:A5:A7:F5:63:A4:42:AE:F2:51
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/sTElfXT3m7jXlAylp_VjpEKu8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.136.0/21
185.124.44.0/22
Signature Algorithm: sha256WithRSAEncryption
95:55:ec:ae:57:bf:87:9f:b0:82:7a:e9:b9:c3:b7:86:53:60:
3b:50:97:6e:5b:fe:43:57:e3:28:be:33:d3:22:f6:d0:37:9d:
7f:3f:be:00:45:0c:a0:0f:6b:b7:f3:9f:b2:3c:5a:83:ef:e5:
06:df:5b:30:a9:2b:62:c6:82:43:8b:b1:73:0c:32:1e:c2:57:
ed:7e:be:7e:0a:4e:23:8e:38:e1:da:6c:61:df:9a:cb:8b:0e:
ba:8a:ec:38:15:42:ea:09:e4:dd:c5:5a:73:73:a7:90:f8:cc:
20:d2:13:e8:05:a4:e1:db:11:fd:1d:65:d5:ac:bf:65:fc:f5:
5c:6f:f8:84:16:be:48:01:2d:12:5e:ac:0c:38:e7:2f:73:53:
1d:c6:6f:a0:d5:aa:d0:b2:3e:9c:fd:10:b6:ac:39:06:34:1f:
9d:8b:7a:7a:6a:2a:64:23:02:b3:7c:ed:e6:90:ec:7b:e6:94:
c4:c3:26:34:62:70:40:bd:e3:65:10:c1:0e:58:4e:12:45:e0:
e4:6e:4d:32:53:43:94:b4:39:ad:9e:03:54:22:95:7b:e9:ac:
01:01:0d:d9:bf:be:2d:ff:76:88:e9:fe:f5:a8:b7:04:e9:8c:
b6:eb:76:4d:b6:95:3c:c3:37:f2:63:6c:4b:f1:d3:36:db:3b:
b1:36:ae:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVub6TjecFVgLNNLF7M6TqyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmQyYWM5YjY4YzMyNzExZjdlODdmZGU1MjM0NTg0ZjVi
Y2Y0ZjIwHhcNMjMwMTAxMTc0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTMxMjU3ZDc0Zjc5YmI4ZDc5NDBjYTVhN2Y1NjNhNDQyYWVmMjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg7Tiu423e+ZvXEPt5GO6McJqptF
GQSeIdT7UutGJAkPxM5jcgf2cGoC3ns0dRP81voKRQcHJ9T5IfbvXPw5DfeJp4jQ
ote0D/Pl6xDg+u65FVactI11Pj7mIhonj2a7lmasLg6TxXLzOZN/O2wnreBlse8k
khw/sAvlLmL9VHRJdqRgdwjzgM3cDECH08EKq7agIHpMfLDwyu9JAzUmCq7dIi1I
BLO+uVd+vZ7VKX1Qhv2m0vSgdZsWQoxyGsgaiye6NadJ2ctn9+GPYbKiGEY71DV6
vTmkR3BEDShjyEmrLre9gsxXlLrqiJYXbiiIflUmMeLG/bkuwswJLpdGEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLExJX1095u415QMpaf1Y6RCrvJRMB8GA1UdIwQY
MBaAFI9tKsm2jDJxH36H/eUjRYT1vPTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3Njkt
Zjk0ZjA4NGIxZWU3LzEvc1RFbGZYVDNtN2pYbEF5bHBfVmpwRUt1OGxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3NjktZjk0ZjA4NGIxZWU3
LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLuiIAwQC
uXwsMA0GCSqGSIb3DQEBCwUAA4IBAQCVVeyuV7+Hn7CCeum5w7eGU2A7UJduW/5D
V+MovjPTIvbQN51/P74ARQygD2u385+yPFqD7+UG31swqStixoJDi7FzDDIewlft
fr5+Ck4jjjjh2mxh35rLiw66iuw4FULqCeTdxVpzc6eQ+Mwg0hPoBaTh2xH9HWXV
rL9l/PVcb/iEFr5IAS0SXqwMOOcvc1Mdxm+g1arQsj6c/RC2rDkGNB+di3p6aipk
IwKzfO3mkOx75pTEwyY0YnBAveNlEMEOWE4SReDkbk0yU0OUtDmtngNUIpV76awB
AQ3Zv74t/3aI6f71qLcE6Yy263ZNtpU8wzfyY2xL8dM22zuxNq4g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org