Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa
File: yc1TEPN1BLVkwo47NAkghSWkMpc.roa (raw, json)
Hash identifier: Jq0YyCeJ5ovMG6xgvhsK5WXw2Vv/s2r5ggMSETGs0qs=
Subject key identifier: C9:CD:53:10:F3:75:04:B5:64:C2:8E:3B:34:09:20:85:25:A4:32:97
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018896528B6E3D4E0DBDBC2D95E7C3D32781
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa
Signing time: Wed 07 Jun 2023 14:46:12 +0000
ROA not before: Wed 07 Jun 2023 14:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/24 maxlen: 24
46.228.128.0/23 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/23 maxlen: 23
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 14 Jun 2023 11:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:52:8b:6e:3d:4e:0d:bd:bc:2d:95:e7:c3:d3:27:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 7 14:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9cd5310f37504b564c28e3b3409208525a43297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:00:72:9a:b9:25:2c:09:2a:26:39:4c:42:
cd:d6:87:32:d5:5f:d6:9e:cd:94:43:0a:37:13:9a:
0d:ca:45:29:da:68:72:cd:d7:98:45:81:60:99:62:
dc:58:7f:25:c7:e9:57:8f:ae:24:2c:cf:c8:e3:aa:
13:9d:e1:2f:b2:d3:e9:67:1e:36:cb:ed:4f:13:f9:
8c:bf:8c:21:7c:ba:d1:47:5c:92:cc:32:aa:d2:38:
eb:18:7c:f8:1f:80:55:fb:af:d6:e7:1f:b1:d1:6a:
3c:78:14:c7:18:45:17:5d:d5:8d:cb:60:e0:41:33:
e7:13:34:3d:90:bf:3f:cb:d6:4b:4c:06:e3:be:c4:
26:d0:42:49:06:16:0a:08:d3:0f:c9:9b:f9:cc:9e:
a5:7c:ec:03:f6:d1:de:ac:06:19:b3:71:9a:6d:52:
0e:f7:68:bc:8f:fa:b1:c3:a5:ae:d6:e3:ad:9b:86:
5b:fe:40:07:a0:53:6a:d0:0f:1a:80:c3:fd:fb:71:
05:f8:5f:d8:55:b6:b8:33:ea:25:f0:54:a6:78:d1:
f3:44:af:d4:18:ce:07:05:16:e9:20:a4:3b:27:9c:
14:98:13:99:c9:32:6a:ae:fd:b7:3f:f0:39:1f:73:
f1:2b:54:7c:c6:f5:8a:1d:15:76:e8:6d:48:08:df:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:53:10:F3:75:04:B5:64:C2:8E:3B:34:09:20:85:25:A4:32:97
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/yc1TEPN1BLVkwo47NAkghSWkMpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
23:af:ae:77:81:2e:fd:54:6b:73:e6:1d:57:78:9b:f6:d0:c5:
97:9e:95:1c:ac:ea:b2:91:9b:d6:10:c7:5c:af:74:b6:24:9a:
a6:0d:1b:e1:64:f4:a8:53:0e:a6:0b:df:05:04:c7:74:26:ae:
4e:14:96:63:61:3a:26:73:0f:05:5c:3e:ee:3d:ff:76:e9:f6:
e7:b2:c0:89:3f:38:2a:2e:9b:dc:99:7a:51:bc:3f:59:97:52:
21:6a:23:0b:4e:da:e0:65:f2:6f:5e:43:75:73:98:4b:5a:79:
2f:42:bc:4f:9a:82:06:7d:e2:09:5f:40:e0:52:90:b5:54:5a:
30:12:08:2e:c9:51:5c:83:30:6f:fb:63:67:65:00:72:6c:4c:
88:73:11:02:0c:08:49:d0:4a:62:90:e8:32:46:ce:25:aa:cc:
c8:ff:b8:b5:df:67:58:4d:0a:03:ae:9c:1b:45:8f:a4:e4:d2:
5d:a2:97:7f:e4:52:b6:b4:d1:e9:0c:f8:46:1d:43:b5:33:b7:
49:f1:55:7f:49:7f:4d:83:96:37:e2:d1:a5:ad:39:0e:70:af:
51:9e:a3:00:ef:8b:d6:e6:ef:6c:33:88:c4:9c:9c:a4:59:22:
c7:12:5b:47:57:5e:94:be:33:94:24:cf:ee:38:42:db:29:7e:
4d:79:aa:84
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYiWUotuPU4NvbwtlefD0yeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz
MWUzZjkwHhcNMjMwNjA3MTQ0NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWNkNTMxMGYzNzUwNGI1NjRjMjhlM2IzNDA5MjA4NTI1YTQzMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYIAcpq5JSwJKiY5TELN1ocy1V/W
ns2UQwo3E5oNykUp2mhyzdeYRYFgmWLcWH8lx+lXj64kLM/I46oTneEvstPpZx42
y+1PE/mMv4whfLrRR1ySzDKq0jjrGHz4H4BV+6/W5x+x0Wo8eBTHGEUXXdWNy2Dg
QTPnEzQ9kL8/y9ZLTAbjvsQm0EJJBhYKCNMPyZv5zJ6lfOwD9tHerAYZs3GabVIO
92i8j/qxw6Wu1uOtm4Zb/kAHoFNq0A8agMP9+3EF+F/YVba4M+ol8FSmeNHzRK/U
GM4HBRbpIKQ7J5wUmBOZyTJqrv23P/A5H3PxK1R8xvWKHRV26G1ICN//JwIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMnNUxDzdQS1ZMKOOzQJIIUlpDKXMB8GA1UdIwQY
MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt
MWM3YjJiOTFkMzA4LzEveWMxVEVQTjFCTFZrd280N05Ba2doU1drTXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4
LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAeBAIAATAYAwQDLuSAAwQA
LuSNAwQALuSPAwQBwW5sMA4EAgACMAgDBgAqA3gACjANBgkqhkiG9w0BAQsFAAOC
AQEAI6+ud4Eu/VRrc+YdV3ib9tDFl56VHKzqspGb1hDHXK90tiSapg0b4WT0qFMO
pgvfBQTHdCauThSWY2E6JnMPBVw+7j3/dun257LAiT84Ki6b3Jl6Ubw/WZdSIWoj
C07a4GXyb15DdXOYS1p5L0K8T5qCBn3iCV9A4FKQtVRaMBIILslRXIMwb/tjZ2UA
cmxMiHMRAgwISdBKYpDoMkbOJarMyP+4td9nWE0KA66cG0WPpOTSXaKXf+RStrTR
6Qz4Rh1DtTO3SfFVf0l/TYOWN+LRpa05DnCvUZ6jAO+L1ubvbDOIxJycpFkixxJb
R1delL4zlCTP7jhC2yl+TXmqhA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:08 2024 by rpki-client on console-fra.rpki-client.org