Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gBSN4Xyz_nf212fSbGsAT-iiPLo.roa
File: gBSN4Xyz_nf212fSbGsAT-iiPLo.roa (raw, json)
Hash identifier: rzSGjjVEyF0AUIkN9AahLGVGtSsPKm3cRzf+WZe4u7I=
Subject key identifier: 80:14:8D:E1:7C:B3:FE:77:F6:D7:67:D2:6C:6B:00:4F:E8:A2:3C:BA
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018D16EC32107B43E8F904F2E45EFCB77E87
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gBSN4Xyz_nf212fSbGsAT-iiPLo.roa
Signing time: Wed 17 Jan 2024 10:16:34 +0000
ROA not before: Wed 17 Jan 2024 10:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/24 maxlen: 32
2a00:9940::/29 maxlen: 128
2a14:2b80::/29 maxlen: 128
2a14:5c80::/29 maxlen: 128
2a14:6580::/29 maxlen: 128
2a14:7080::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 18 Jan 2024 08:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:ec:32:10:7b:43:e8:f9:04:f2:e4:5e:fc:b7:7e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 17 10:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80148de17cb3fe77f6d767d26c6b004fe8a23cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:77:d2:11:3d:75:df:21:ed:d1:cb:1c:4b:
95:46:db:b5:90:3e:e2:53:f5:9e:33:cc:42:31:2b:
62:09:c5:59:c3:13:f9:0b:d9:91:ab:d0:d0:28:a2:
dd:b2:12:0e:15:ef:35:0d:c6:09:cd:8b:5b:19:43:
e2:0b:7e:a1:b9:ac:b3:0c:ab:26:2a:db:3f:e8:2e:
84:e3:7c:37:b2:fb:41:35:6c:c0:66:1c:c5:d7:37:
e1:e9:69:8f:98:1d:67:77:64:ec:cf:bb:3f:a4:db:
03:98:8a:59:f1:47:7a:6b:6e:22:3d:9a:22:a0:5c:
08:40:34:24:c9:93:34:e0:23:74:1c:a0:81:05:ad:
6c:c1:b9:0c:62:e3:4a:84:8e:39:11:60:c5:1c:71:
d8:c2:e0:b7:9e:c2:08:20:59:09:cf:01:80:63:0d:
63:00:6a:36:3a:89:ae:22:05:44:0e:49:fd:10:a1:
eb:65:55:84:b6:a2:19:89:6d:bb:e4:26:65:9b:b3:
00:e4:0f:c0:37:07:fd:9e:69:b5:0d:a3:17:8c:b4:
81:24:af:20:cf:14:04:de:11:24:b2:5f:52:81:25:
a2:6c:e4:40:6f:6e:80:f9:30:be:ec:ab:14:42:d8:
74:aa:0f:bd:d3:81:86:81:f3:7b:e6:d3:dd:e7:72:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:14:8D:E1:7C:B3:FE:77:F6:D7:67:D2:6C:6B:00:4F:E8:A2:3C:BA
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/gBSN4Xyz_nf212fSbGsAT-iiPLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a00:9940::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
55:85:8b:ca:59:67:b3:91:f4:a8:9d:ef:78:cc:74:c2:4e:98:
40:da:21:63:53:0d:b5:0e:8c:4c:87:d6:fb:cb:7c:5b:75:5a:
b4:68:25:6c:2e:e5:fb:ec:18:52:d0:37:03:6a:e1:a8:eb:7a:
99:01:20:91:92:b4:e6:5b:28:52:e4:59:b2:7e:34:45:c3:07:
95:f9:02:1c:e9:00:ab:a2:44:c9:b6:33:1d:a5:62:5c:fd:ef:
34:61:98:b5:83:eb:2a:64:bc:9e:b3:aa:af:5a:f5:35:52:a5:
7e:dc:d8:fb:72:8a:a3:13:5f:37:5c:73:f2:8a:c2:67:aa:79:
78:0a:e4:a0:3b:28:0d:1c:9f:cb:b5:7b:8f:a6:33:66:3f:18:
a7:e1:32:e7:5f:d0:9b:87:8c:d1:08:7a:b3:c3:4c:00:53:c4:
e7:d3:b6:3f:41:e5:e5:76:79:33:44:07:aa:c3:3f:2f:4a:77:
82:30:36:62:1f:55:0e:29:83:c6:22:6a:cd:a7:b9:8d:e2:7a:
84:c8:8d:fb:1e:1e:45:3c:4a:9d:30:c5:64:45:62:de:ed:5a:
fc:ee:be:94:5c:d4:d9:26:d7:70:d2:6d:25:5f:93:46:d2:10:
6a:ae:16:82:8a:70:af:f3:d4:b8:87:f4:56:12:7d:86:ed:59:
42:0c:c8:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAY0W7DIQe0Po+QTy5F78t36HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRkYzYwNzk5MjYzZmZiOWJkMGU1ZWViMDg3Mjg0M2Rl
ZTZhNzIwHhcNMjQwMTE3MTAxNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDE0OGRlMTdjYjNmZTc3ZjZkNzY3ZDI2YzZiMDA0ZmU4YTIzY2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMJ30hE9dd8h7dHLHEuVRtu1kD7i
U/WeM8xCMStiCcVZwxP5C9mRq9DQKKLdshIOFe81DcYJzYtbGUPiC36huayzDKsm
Kts/6C6E43w3svtBNWzAZhzF1zfh6WmPmB1nd2Tsz7s/pNsDmIpZ8Ud6a24iPZoi
oFwIQDQkyZM04CN0HKCBBa1swbkMYuNKhI45EWDFHHHYwuC3nsIIIFkJzwGAYw1j
AGo2OomuIgVEDkn9EKHrZVWEtqIZiW275CZlm7MA5A/ANwf9nmm1DaMXjLSBJK8g
zxQE3hEksl9SgSWibORAb26A+TC+7KsUQth0qg+904GGgfN75tPd53LsuwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFIAUjeF8s/539tdn0mxrAE/oojy6MB8GA1UdIwQY
MBaAFGAd3GB5kmP/ub0OXusIcoQ97mpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzY1lIbVNZXy01dlE1ZTZ3aHloRDN1YW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hNDVlN2UtNWRjMy00OWQzLWFhM2Yt
MzY3ZTE3MGU3MTI4LzEvZ0JTTjRYeXpfbmYyMTJmU2JHc0FULWlpUExvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hNDVlN2UtNWRjMy00OWQzLWFhM2YtMzY3ZTE3MGU3MTI4
LzEvWUIzY1lIbVNZXy01dlE1ZTZ3aHloRDN1YW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAMBAIAATAGAwQALusPMCkE
AgACMCMDBQMqAJlAAwUDKhQrgAMFAyoUXIADBQMqFGWAAwUDKhRwgDANBgkqhkiG
9w0BAQsFAAOCAQEAVYWLyllns5H0qJ3veMx0wk6YQNohY1MNtQ6MTIfW+8t8W3Va
tGglbC7l++wYUtA3A2rhqOt6mQEgkZK05lsoUuRZsn40RcMHlfkCHOkAq6JEybYz
HaViXP3vNGGYtYPrKmS8nrOqr1r1NVKlftzY+3KKoxNfN1xz8orCZ6p5eArkoDso
DRyfy7V7j6YzZj8Yp+Ey51/Qm4eM0Qh6s8NMAFPE59O2P0Hl5XZ5M0QHqsM/L0p3
gjA2Yh9VDimDxiJqzae5jeJ6hMiN+x4eRTxKnTDFZEVi3u1a/O6+lFzU2SbXcNJt
JV+TRtIQaq4Wgopwr/PUuIf0VhJ9hu1ZQgzI+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:27 2024 by rpki-client on console-fra.rpki-client.org