Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/DLiBVQobx9Yz4UZ1Tz2iaRDg2y4.roa
File: DLiBVQobx9Yz4UZ1Tz2iaRDg2y4.roa (raw, json)
Hash identifier: O1eB1meQivqCMZ6LgZvfWbREZXApAquismEqa/puoPg=
Subject key identifier: 0C:B8:81:55:0A:1B:C7:D6:33:E1:46:75:4F:3D:A2:69:10:E0:DB:2E
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 018795268171A392CD5CFD1C033B5548668D
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/DLiBVQobx9Yz4UZ1Tz2iaRDg2y4.roa
Signing time: Tue 18 Apr 2023 16:15:41 +0000
ROA not before: Tue 18 Apr 2023 16:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47777
IP address blocks: 46.19.56.0/21 maxlen: 24
94.125.24.0/21 maxlen: 24
94.125.28.0/24 maxlen: 24
185.15.180.0/22 maxlen: 22
185.15.183.0/24 maxlen: 24
2a00:1b40::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:26:81:71:a3:92:cd:5c:fd:1c:03:3b:55:48:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Apr 18 16:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cb881550a1bc7d633e146754f3da26910e0db2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1d:bf:04:10:50:ad:e1:42:9a:7a:39:05:56:
d7:6c:51:c3:86:02:11:31:5c:9c:2a:04:31:9f:2e:
5d:23:03:60:34:66:9f:2f:27:bc:93:c7:1c:2b:db:
e3:81:b7:09:6a:e0:e2:1a:f6:da:a9:06:68:d6:41:
97:f0:bb:5e:d2:ca:8e:20:4f:09:b6:1e:3a:7d:ae:
85:d7:a4:da:b6:9a:4b:f7:01:87:3e:1d:ec:31:97:
dc:6d:64:c2:b9:44:0f:1c:38:7f:b2:eb:0c:ba:ef:
ad:fb:86:cb:73:19:00:30:09:f0:74:97:02:7b:42:
7c:16:42:71:da:65:72:1c:e7:c6:b8:a8:72:76:36:
a8:87:4f:42:a6:bc:da:17:80:6c:ce:48:d3:64:c3:
98:7b:5b:3d:83:9f:16:e9:fb:4d:33:10:85:51:51:
1c:08:51:06:e1:5c:73:91:76:22:1a:50:bb:5b:b8:
00:e8:14:97:98:5b:37:64:19:d2:b1:eb:1c:51:2a:
cf:df:0c:2e:50:6e:96:e7:0d:b7:d3:61:cf:8c:9b:
50:26:49:23:f1:0a:b1:3f:1c:90:33:56:65:49:ac:
b0:d2:fb:4b:3a:25:1b:25:7e:36:e7:56:d4:77:ad:
19:7d:34:dd:2b:a9:15:93:39:58:46:e0:82:39:3e:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:81:55:0A:1B:C7:D6:33:E1:46:75:4F:3D:A2:69:10:E0:DB:2E
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/DLiBVQobx9Yz4UZ1Tz2iaRDg2y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.56.0/21
94.125.24.0/21
185.15.180.0/22
IPv6:
2a00:1b40::/32
Signature Algorithm: sha256WithRSAEncryption
a6:98:e5:07:80:23:d3:7d:d2:41:cc:df:27:25:cd:a6:2f:f1:
9f:e2:f2:3f:06:1f:c1:cc:bd:db:d2:f7:24:84:57:c8:71:ec:
7c:65:03:a2:3d:12:bb:28:0d:ef:bf:50:53:c0:cf:86:09:1c:
72:72:a3:5e:3a:07:35:49:68:8f:9f:24:35:f5:cc:51:9d:de:
40:19:91:cd:50:5a:e6:18:be:eb:67:73:25:99:d6:5f:09:97:
7b:35:1b:e5:e5:d1:5a:72:26:e3:41:fc:5b:dd:03:93:48:e8:
66:be:d4:67:f7:c4:2f:7f:64:80:a4:ed:7e:b6:68:9e:93:24:
70:90:f6:0d:5e:52:97:0b:bc:f1:50:15:f3:bc:67:88:60:a3:
84:f8:b4:1d:a7:59:1f:e7:bb:82:f8:58:62:8e:88:fb:19:4b:
2c:5e:ee:96:af:1b:d0:8f:50:70:1f:a8:57:7e:11:0c:7a:79:
66:35:58:63:61:16:08:2e:64:ad:4a:05:e5:be:ec:1f:c2:a0:
b1:df:06:fa:5b:18:48:4c:96:e3:3e:fb:92:b7:29:d8:ee:e2:
ff:f3:75:5c:d2:ad:3c:cf:f0:7e:78:00:47:66:cb:c5:04:85:
a6:71:ba:28:d5:2e:5f:09:06:01:61:4c:3f:14:69:bf:c1:0d:
e6:61:54:43
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYeVJoFxo5LNXP0cAztVSGaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjMwNDE4MTYxNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2I4ODE1NTBhMWJjN2Q2MzNlMTQ2NzU0ZjNkYTI2OTEwZTBkYjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx2/BBBQreFCmno5BVbXbFHDhgIR
MVycKgQxny5dIwNgNGafLye8k8ccK9vjgbcJauDiGvbaqQZo1kGX8Lte0sqOIE8J
th46fa6F16TatppL9wGHPh3sMZfcbWTCuUQPHDh/susMuu+t+4bLcxkAMAnwdJcC
e0J8FkJx2mVyHOfGuKhydjaoh09CprzaF4BszkjTZMOYe1s9g58W6ftNMxCFUVEc
CFEG4VxzkXYiGlC7W7gA6BSXmFs3ZBnSsescUSrP3wwuUG6W5w2302HPjJtQJkkj
8QqxPxyQM1ZlSayw0vtLOiUbJX4251bUd60ZfTTdK6kVkzlYRuCCOT7CaQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAy4gVUKG8fWM+FGdU89omkQ4NsuMB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvRExpQlZRb2J4OVl6NFVaMVR6MmlhUkRnMnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLhM4AwQD
Xn0YAwQCuQ+0MA0EAgACMAcDBQAqABtAMA0GCSqGSIb3DQEBCwUAA4IBAQCmmOUH
gCPTfdJBzN8nJc2mL/Gf4vI/Bh/BzL3b0vckhFfIcex8ZQOiPRK7KA3vv1BTwM+G
CRxycqNeOgc1SWiPnyQ19cxRnd5AGZHNUFrmGL7rZ3MlmdZfCZd7NRvl5dFacibj
Qfxb3QOTSOhmvtRn98Qvf2SApO1+tmiekyRwkPYNXlKXC7zxUBXzvGeIYKOE+LQd
p1kf57uC+Fhijoj7GUssXu6WrxvQj1BwH6hXfhEMenlmNVhjYRYILmStSgXlvuwf
wqCx3wb6WxhITJbjPvuStynY7uL/83Vc0q08z/B+eABHZsvFBIWmcboo1S5fCQYB
YUw/FGm/wQ3mYVRD
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:42 2024 by rpki-client on console-fra.rpki-client.org