Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/2F1P-BZ-BA3UHf-ynu3fFXYbezY.roa
File: 2F1P-BZ-BA3UHf-ynu3fFXYbezY.roa (raw, json)
Hash identifier: eF1Oh/7DOC6anJnfe/kbuqpACl+1wkFTecuJIG1kByY=
Subject key identifier: D8:5D:4F:F8:16:7E:04:0D:D4:1D:FF:B2:9E:ED:DF:15:76:1B:7B:36
Certificate issuer: /CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Certificate serial: 018570E756B5EA2F046B46994C9472837C13
Authority key identifier: 68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/2F1P-BZ-BA3UHf-ynu3fFXYbezY.roa
Signing time: Mon 02 Jan 2023 05:14:47 +0000
ROA not before: Mon 02 Jan 2023 05:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.18.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:56:b5:ea:2f:04:6b:46:99:4c:94:72:83:7c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c6adf8eecabc1052e1f783d3bce4a1c5db5410
Validity
Not Before: Jan 2 05:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d85d4ff8167e040dd41dffb29eeddf15761b7b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:68:ea:90:55:7e:d8:08:eb:55:78:7d:84:
47:43:9b:26:75:30:31:7e:26:6f:6f:d7:49:48:f0:
2d:5e:b0:92:10:3a:78:f7:78:22:52:b2:65:09:4f:
57:71:b3:37:27:67:af:13:74:b6:37:f5:f6:34:e6:
05:6e:66:4c:2d:6e:41:9c:e7:44:91:93:8e:f5:fc:
ce:51:c3:1b:63:0e:5d:ee:f6:04:fc:50:bc:ef:e5:
13:23:4c:64:7e:9d:38:4f:2d:4a:95:f5:15:fd:8f:
b5:17:11:e9:81:4a:ba:ff:11:87:a2:4f:cf:a9:31:
61:dd:f8:58:ca:81:89:6e:bb:e3:d5:57:fc:a2:05:
9e:3e:1d:ed:be:6a:e2:9a:f4:d4:59:8b:bc:f3:82:
11:f3:29:ac:0f:a8:86:d3:05:51:c1:b1:6d:d1:9d:
fb:e8:fb:0a:d0:4c:87:11:c6:25:93:85:94:29:d4:
24:1d:9f:be:fd:e0:6e:db:cf:17:fc:fe:4c:b7:4e:
6f:0b:25:4a:7e:96:36:9a:b9:08:84:52:5a:e3:f7:
6e:76:a4:1a:20:ca:43:42:7d:5b:69:60:fe:b0:7f:
aa:6f:d8:de:2b:e0:70:fe:36:1c:e6:9a:df:df:73:
f9:e4:2d:e8:ce:b3:e8:4a:a2:ab:06:d0:c9:e9:84:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5D:4F:F8:16:7E:04:0D:D4:1D:FF:B2:9E:ED:DF:15:76:1B:7B:36
X509v3 Authority Key Identifier:
keyid:68:C6:AD:F8:EE:CA:BC:10:52:E1:F7:83:D3:BC:E4:A1:C5:DB:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMat-O7KvBBS4feD07zkocXbVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/2F1P-BZ-BA3UHf-ynu3fFXYbezY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e5d869-30bc-4465-bd6f-4773b6669716/1/aMat-O7KvBBS4feD07zkocXbVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.245.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e9:39:ca:17:4a:93:f0:a5:b2:54:33:a4:ee:37:a9:47:28:
12:48:96:a4:25:ba:55:e8:9a:6d:8b:09:08:f7:02:df:a2:2e:
ce:2c:20:6a:f2:3e:3e:63:2d:fc:c4:c1:d6:f5:2d:a6:4b:98:
ae:23:eb:35:8e:19:cd:6f:69:56:88:f7:f7:85:27:19:85:80:
cd:a6:d3:53:d3:90:5d:17:47:24:b8:1f:40:b3:2d:07:d1:a0:
64:2d:00:26:42:72:4b:b8:a4:dc:7f:18:f1:11:42:ce:bc:97:
bf:db:e6:6c:1d:2c:de:3a:74:c5:b6:be:13:4c:fc:ba:d0:ad:
59:33:5a:a9:5b:38:ef:b7:20:bf:67:b5:cc:b1:53:b8:bf:f1:
ab:03:d4:f5:b4:a7:1c:7d:af:ee:2c:16:97:43:19:47:90:bc:
29:30:6d:2a:45:f0:c2:44:d3:78:2f:ba:4d:14:9f:c5:8c:c6:
7d:b3:9f:07:8d:da:13:76:be:e7:7d:85:80:72:9d:7b:be:d1:
13:8b:96:2b:61:b3:30:03:b1:5c:13:98:5c:00:d8:e0:87:7b:
42:ab:00:ba:7a:0b:7d:6a:d3:3f:e4:ee:c0:1e:f3:29:81:f1:
9b:df:0e:b3:0a:d7:cf:0f:5f:9a:1d:56:20:8c:f9:7d:b9:75:
a4:17:e7:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw51a16i8Ea0aZTJRyg3wTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzZhZGY4ZWVjYWJjMTA1MmUxZjc4M2QzYmNlNGExYzVk
YjU0MTAwHhcNMjMwMTAyMDUxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODVkNGZmODE2N2UwNDBkZDQxZGZmYjI5ZWVkZGYxNTc2MWI3YjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGpo6pBVftgI61V4fYRHQ5smdTAx
fiZvb9dJSPAtXrCSEDp493giUrJlCU9XcbM3J2evE3S2N/X2NOYFbmZMLW5BnOdE
kZOO9fzOUcMbYw5d7vYE/FC87+UTI0xkfp04Ty1KlfUV/Y+1FxHpgUq6/xGHok/P
qTFh3fhYyoGJbrvj1Vf8ogWePh3tvmrimvTUWYu884IR8ymsD6iG0wVRwbFt0Z37
6PsK0EyHEcYlk4WUKdQkHZ++/eBu288X/P5Mt05vCyVKfpY2mrkIhFJa4/dudqQa
IMpDQn1baWD+sH+qb9jeK+Bw/jYc5prf33P55C3ozrPoSqKrBtDJ6YSh2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhdT/gWfgQN1B3/sp7t3xV2G3s2MB8GA1UdIwQY
MBaAFGjGrfjuyrwQUuH3g9O85KHF21QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYt
NDc3M2I2NjY5NzE2LzEvMkYxUC1CWi1CQTNVSGYteW51M2ZGWFliZXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNWQ4NjktMzBiYy00NDY1LWJkNmYtNDc3M2I2NjY5NzE2
LzEvYU1hdC1PN0t2QkJTNGZlRDA3emtvY1hiVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhL1MA0G
CSqGSIb3DQEBCwUAA4IBAQBo6TnKF0qT8KWyVDOk7jepRygSSJakJbpV6JptiwkI
9wLfoi7OLCBq8j4+Yy38xMHW9S2mS5iuI+s1jhnNb2lWiPf3hScZhYDNptNT05Bd
F0ckuB9Asy0H0aBkLQAmQnJLuKTcfxjxEULOvJe/2+ZsHSzeOnTFtr4TTPy60K1Z
M1qpWzjvtyC/Z7XMsVO4v/GrA9T1tKccfa/uLBaXQxlHkLwpMG0qRfDCRNN4L7pN
FJ/FjMZ9s58HjdoTdr7nfYWAcp17vtETi5YrYbMwA7FcE5hcANjgh3tCqwC6egt9
atM/5O7AHvMpgfGb3w6zCtfPD1+aHVYgjPl9uXWkF+er
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:43 2024 by rpki-client on console-ams.rpki-client.org