Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/nkv8F7ie_dCA6J5Pytf5AJrPHX8.roa
File: nkv8F7ie_dCA6J5Pytf5AJrPHX8.roa (raw, json)
Hash identifier: mmievHNz0JmVMW7JruDJG+2m0i+Zel+xbkUlUSPWFPk=
Subject key identifier: 9E:4B:FC:17:B8:9E:FD:D0:80:E8:9E:4F:CA:D7:F9:00:9A:CF:1D:7F
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018CCEAD139956DAA279DDF34569449C4D3E
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/nkv8F7ie_dCA6J5Pytf5AJrPHX8.roa
Signing time: Wed 03 Jan 2024 09:34:58 +0000
ROA not before: Wed 03 Jan 2024 09:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/24 maxlen: 32
2a14:2b80::/29 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:ad:13:99:56:da:a2:79:dd:f3:45:69:44:9c:4d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 3 09:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e4bfc17b89efdd080e89e4fcad7f9009acf1d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3a:e5:29:a9:fa:d4:e0:56:11:4d:80:4f:e5:
36:ed:29:8a:ac:8e:39:61:b2:f8:e5:06:2e:90:47:
4f:12:b2:f6:bc:2b:7a:29:53:4e:62:b1:e4:55:76:
7a:7f:ed:75:e2:3b:ee:ce:20:23:e3:99:cd:f8:26:
e1:b5:44:b3:d3:9b:7f:ca:54:27:dd:56:11:b6:c6:
f5:dd:a2:87:b3:ae:61:3d:c1:39:de:77:86:b4:ca:
8f:8e:ca:5a:e0:cd:8f:d8:76:8a:ad:09:1a:ee:cb:
21:b7:48:b4:41:cc:8e:e5:7e:ec:2f:da:68:91:0d:
16:1e:7a:63:f6:56:3c:45:8a:63:58:04:00:95:4a:
6c:72:89:3e:75:94:82:51:21:45:01:a5:8c:da:45:
fe:f3:a5:7e:6a:2c:5b:43:ba:c2:32:65:9f:40:99:
55:a2:9f:af:90:6a:94:66:11:8a:02:89:94:a5:d7:
91:3d:40:7b:58:18:f3:eb:70:d8:03:ba:1c:ef:c7:
2c:73:d1:7f:66:d6:53:69:5b:43:03:b3:77:c1:bd:
5b:0c:54:cd:23:9d:46:ba:15:59:44:6d:3b:a9:ce:
ed:d1:32:04:5d:57:fd:f3:63:c5:18:2e:65:1f:df:
a7:11:fe:97:80:c3:1d:59:96:e0:4a:f2:41:3f:08:
3d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:FC:17:B8:9E:FD:D0:80:E8:9E:4F:CA:D7:F9:00:9A:CF:1D:7F
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/nkv8F7ie_dCA6J5Pytf5AJrPHX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a14:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
17:df:ef:6b:fb:7a:24:70:9f:1e:f0:22:2b:0d:35:04:cf:e4:
a0:ed:e9:c0:60:a5:85:b7:09:c7:f6:4f:a0:a2:ab:c2:a0:8c:
7a:77:cf:77:d8:68:b3:85:b2:3f:ef:69:42:fc:0a:b2:18:74:
99:78:e0:11:53:ae:f3:30:9c:95:81:c0:b7:be:8b:e9:2d:f5:
6e:c4:d8:5d:8f:9c:77:cb:b2:ab:5e:bd:a5:0c:28:c4:79:b4:
6e:78:e7:58:f4:d2:42:ed:7f:22:ff:46:32:e6:4c:56:3a:2e:
ba:dd:1d:c9:d5:82:a7:54:ac:1d:a1:99:66:71:80:ad:bf:1c:
b2:f6:bf:65:fd:51:d3:ed:a7:0a:30:4c:bf:ea:0d:d0:e7:f9:
1e:2f:a9:d7:ba:06:96:7e:7e:08:af:1f:ad:07:fe:3d:96:7b:
c8:c4:26:42:0e:b2:b1:d4:38:d6:6a:bb:da:dd:1e:dd:52:6b:
3d:90:62:1f:de:15:10:53:67:9e:07:7c:67:67:ca:32:31:8c:
a0:ba:5a:3e:ac:c3:85:3b:f0:ac:36:75:45:f6:c8:88:c7:1e:
fb:0f:7a:27:71:68:f9:63:22:1b:6f:e0:4c:a6:b7:84:f1:77:
db:bd:ed:ee:66:a5:bd:4d:3b:ef:58:93:2d:c4:5c:ae:60:c4:
04:ef:2c:91
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzOrROZVtqied3zRWlEnE0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMWRkYzYwNzk5MjYzZmZiOWJkMGU1ZWViMDg3Mjg0M2Rl
ZTZhNzIwHhcNMjQwMTAzMDkzNDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTRiZmMxN2I4OWVmZGQwODBlODllNGZjYWQ3ZjkwMDlhY2YxZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTrlKan61OBWEU2AT+U27SmKrI45
YbL45QYukEdPErL2vCt6KVNOYrHkVXZ6f+114jvuziAj45nN+CbhtUSz05t/ylQn
3VYRtsb13aKHs65hPcE53neGtMqPjspa4M2P2HaKrQka7ssht0i0QcyO5X7sL9po
kQ0WHnpj9lY8RYpjWAQAlUpscok+dZSCUSFFAaWM2kX+86V+aixbQ7rCMmWfQJlV
op+vkGqUZhGKAomUpdeRPUB7WBjz63DYA7oc78csc9F/ZtZTaVtDA7N3wb1bDFTN
I51GuhVZRG07qc7t0TIEXVf982PFGC5lH9+nEf6XgMMdWZbgSvJBPwg9qQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ5L/Be4nv3QgOieT8rX+QCazx1/MB8GA1UdIwQY
MBaAFGAd3GB5kmP/ub0OXusIcoQ97mpyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUIzY1lIbVNZXy01dlE1ZTZ3aHloRDN1YW5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hNDVlN2UtNWRjMy00OWQzLWFhM2Yt
MzY3ZTE3MGU3MTI4LzEvbmt2OEY3aWVfZENBNko1UHl0ZjVBSnJQSFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hNDVlN2UtNWRjMy00OWQzLWFhM2YtMzY3ZTE3MGU3MTI4
LzEvWUIzY1lIbVNZXy01dlE1ZTZ3aHloRDN1YW5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALusPMA0E
AgACMAcDBQMqFCuAMA0GCSqGSIb3DQEBCwUAA4IBAQAX3+9r+3okcJ8e8CIrDTUE
z+Sg7enAYKWFtwnH9k+goqvCoIx6d8932GizhbI/72lC/AqyGHSZeOARU67zMJyV
gcC3vovpLfVuxNhdj5x3y7KrXr2lDCjEebRueOdY9NJC7X8i/0Yy5kxWOi663R3J
1YKnVKwdoZlmcYCtvxyy9r9l/VHT7acKMEy/6g3Q5/keL6nXugaWfn4Irx+tB/49
lnvIxCZCDrKx1DjWarva3R7dUms9kGIf3hUQU2eeB3xnZ8oyMYygulo+rMOFO/Cs
NnVF9siIxx77D3oncWj5YyIbb+BMpreE8Xfbve3uZqW9TTvvWJMtxFyuYMQE7yyR
-----END CERTIFICATE-----
Generated at Wed Jan 3 19:17:28 2024 by rpki-client on console-fra.rpki-client.org