Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/1-N2tllY1RbILBVB5OD1LZ6yZ6UU.roa
File: 1-N2tllY1RbILBVB5OD1LZ6yZ6UU.roa (raw, json)
Hash identifier: O+Cc+FleTfUuOTmDPIWphyqygL3BnaawP9DLNuyev7E=
Subject key identifier: F8:DD:AD:96:56:35:45:B2:0B:05:50:79:38:3D:4B:67:AC:99:E9:45
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 01856F7969AEDCFF0241E972CBBE944C0A63
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/1-N2tllY1RbILBVB5OD1LZ6yZ6UU.roa
Signing time: Sun 01 Jan 2023 22:35:05 +0000
ROA not before: Sun 01 Jan 2023 22:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48426
IP address blocks: 91.209.154.0/24 maxlen: 24
46.183.49.0/24 maxlen: 24
46.183.50.0/23 maxlen: 23
46.183.52.0/24 maxlen: 24
2a00:4040::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:69:ae:dc:ff:02:41:e9:72:cb:be:94:4c:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Jan 1 22:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8ddad96563545b20b055079383d4b67ac99e945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:ab:79:3d:39:e3:70:4b:24:8e:a5:18:f5:
f2:a7:08:69:8f:f3:f7:a5:6a:26:d3:96:e6:96:52:
8a:ab:eb:38:0a:4c:e2:3e:c5:db:e5:5d:cc:a6:bc:
b0:a2:40:08:5c:f6:88:45:49:74:75:5a:c5:d4:bb:
05:56:71:71:ad:d2:1e:8a:c3:42:36:cd:65:bd:e5:
fc:ab:85:16:2f:2b:b6:36:15:d9:ba:2b:85:13:20:
20:ec:6b:73:22:7f:ce:6c:5b:db:84:e0:e2:12:68:
3b:e8:f4:81:e4:6d:83:cf:04:92:e2:23:26:22:24:
06:41:4f:91:97:e3:5a:cb:54:10:17:0a:1f:c1:e8:
d2:2c:bc:f4:ce:f7:04:be:e9:d3:f1:89:f3:bb:c7:
c6:53:b8:9e:ff:f5:00:2e:26:c1:22:1a:22:70:47:
44:f8:f3:1e:3b:61:df:68:08:9d:47:30:41:2b:7d:
35:ac:42:b8:66:74:04:72:89:91:51:fb:39:84:41:
96:8a:e7:bc:20:3b:ac:0c:e2:2c:72:5a:a2:22:0d:
7d:8b:ec:8a:0c:9d:09:17:b6:dc:a0:19:aa:b7:b9:
fa:1a:14:33:6b:1c:73:75:60:72:28:f4:a9:f0:7c:
5c:a2:61:2a:0f:3f:b7:03:d1:6a:be:58:74:d9:c9:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:AD:96:56:35:45:B2:0B:05:50:79:38:3D:4B:67:AC:99:E9:45
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/1-N2tllY1RbILBVB5OD1LZ6yZ6UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.49.0-46.183.52.255
91.209.154.0/24
IPv6:
2a00:4040::/48
Signature Algorithm: sha256WithRSAEncryption
1d:05:64:ac:a1:a0:a7:78:c2:d6:6c:d0:28:db:7c:04:5b:87:
ee:77:5d:5c:85:2d:71:13:eb:f0:53:06:ee:3c:b9:86:d6:10:
45:ae:e5:75:d8:81:70:ff:83:69:ce:99:20:5a:05:28:a7:19:
de:0e:26:5a:e1:26:30:49:a2:b2:ee:c2:61:9c:cb:2a:be:b8:
2d:37:2a:c3:d7:d3:21:4f:07:c1:02:79:7e:08:51:18:89:b3:
12:8f:11:99:65:8f:3f:31:ae:77:1f:c1:2c:a2:07:ec:94:80:
f1:30:f4:92:83:d2:e7:18:c8:27:79:6f:77:3a:02:2e:ac:5d:
95:f8:b5:95:15:f6:2a:d6:a2:54:38:df:4f:3f:d5:ab:0a:88:
b0:18:b4:97:ce:3a:34:77:0f:4b:68:c6:12:20:3a:95:08:70:
84:39:dc:10:ec:9b:8c:9f:13:59:10:a8:e7:6c:3d:32:f5:78:
7c:ec:d3:7e:06:55:68:66:4d:c1:ee:4c:4a:e5:e4:23:c0:6c:
61:c3:47:47:0b:f3:8c:8b:03:26:c8:de:9d:6a:97:3d:1f:b7:
38:25:20:cb:03:75:77:e9:86:57:17:f4:5b:ce:0d:6e:b4:9e:
71:3c:46:56:f2:f6:07:e8:ef:4c:0a:43:61:da:25:00:e0:86:
a7:38:bb:ca
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYVveWmu3P8CQelyy76UTApjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NTYwOGQwNzhkNmYzMWNmNzliZTc4NzM2YmY4ODQ2MDZh
MTdkYTQwHhcNMjMwMTAxMjIzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGRkYWQ5NjU2MzU0NWIyMGIwNTUwNzkzODNkNGI2N2FjOTllOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIareT0543BLJI6lGPXypwhpj/P3
pWom05bmllKKq+s4CkziPsXb5V3MprywokAIXPaIRUl0dVrF1LsFVnFxrdIeisNC
Ns1lveX8q4UWLyu2NhXZuiuFEyAg7GtzIn/ObFvbhODiEmg76PSB5G2DzwSS4iMm
IiQGQU+Rl+Nay1QQFwofwejSLLz0zvcEvunT8Ynzu8fGU7ie//UALibBIhoicEdE
+PMeO2HfaAidRzBBK301rEK4ZnQEcomRUfs5hEGWiue8IDusDOIsclqiIg19i+yK
DJ0JF7bcoBmqt7n6GhQzaxxzdWByKPSp8HxcomEqDz+3A9Fqvlh02clXvwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPjdrZZWNUWyCwVQeTg9S2esmelFMB8GA1UdIwQY
MBaAFDVWCNB41vMc95vnhza/iEYGoX2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZZSTBIalc4eHozbS1lSE5yLUlSZ2FoZmFRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iODQxOTUtY2Q0Ni00OWNiLTg1Zjgt
NmViNDNiNTU2ZTEzLzEvMS1OMnRsbFkxUmJJTEJWQjVPRDFMWjZ5WjZVVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvYjg0MTk1LWNkNDYtNDljYi04NWY4LTZlYjQzYjU1NmUx
My8xL05WWUkwSGpXOHh6M20tZUhOci1JUmdhaGZhUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA+BggrBgEFBQcBBwEB/wQvMC0wGgQCAAEwFDAMAwQALrcx
AwQALrc0AwQAW9GaMA8EAgACMAkDBwAqAEBAAAAwDQYJKoZIhvcNAQELBQADggEB
AB0FZKyhoKd4wtZs0CjbfARbh+53XVyFLXET6/BTBu48uYbWEEWu5XXYgXD/g2nO
mSBaBSinGd4OJlrhJjBJorLuwmGcyyq+uC03KsPX0yFPB8ECeX4IURiJsxKPEZll
jz8xrncfwSyiB+yUgPEw9JKD0ucYyCd5b3c6Ai6sXZX4tZUV9irWolQ4308/1asK
iLAYtJfOOjR3D0toxhIgOpUIcIQ53BDsm4yfE1kQqOdsPTL1eHzs034GVWhmTcHu
TErl5CPAbGHDR0cL84yLAybI3p1qlz0ftzglIMsDdXfphlcX9FvODW60nnE8Rlby
9gfo70wKQ2HaJQDghqc4u8o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:24 2024 by rpki-client on console-ams.rpki-client.org