Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/06BYSczT23LzYZiCCFHlFVjOzUw.roa
File: 06BYSczT23LzYZiCCFHlFVjOzUw.roa (raw, json)
Hash identifier: iLzK2YWr2TBvn18lOCWxyt3ozDz+jE87IxjFJKkVjGE=
Subject key identifier: D3:A0:58:49:CC:D3:DB:72:F3:61:98:82:08:51:E5:15:58:CE:CD:4C
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018B611B39EEF75E4598A8D57D075663DC53
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/06BYSczT23LzYZiCCFHlFVjOzUw.roa
Signing time: Tue 24 Oct 2023 09:54:16 +0000
ROA not before: Tue 24 Oct 2023 09:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.162.7.0/24 maxlen: 24
46.162.27.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:1b:39:ee:f7:5e:45:98:a8:d5:7d:07:56:63:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Oct 24 09:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3a05849ccd3db72f36198820851e51558cecd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:82:4e:0f:22:8b:fc:ee:c4:5e:6d:46:49:
2f:af:2a:a7:d6:61:54:94:59:3e:7a:85:9b:c5:a6:
95:c6:53:89:83:03:0b:1f:6e:1d:82:b6:57:57:15:
4d:bd:52:15:1d:5b:9f:02:eb:55:ad:45:22:4d:d7:
30:05:9a:15:a1:3c:f1:9d:78:bb:0e:4f:69:4c:45:
4d:fc:ff:d2:0d:2e:26:03:e4:59:8d:fa:58:66:30:
05:e1:5d:a1:4b:b6:ce:31:b7:71:19:79:9a:e7:ff:
67:c3:68:6c:f2:df:cf:d4:08:37:79:29:40:27:69:
ae:2f:31:6d:50:96:e4:4f:b0:6c:9c:71:6b:97:02:
fa:19:21:08:e4:b9:45:5e:9e:5a:92:e9:5d:8e:df:
e0:86:b3:c3:b2:30:b9:d3:91:20:2d:ef:a8:50:25:
00:35:91:7d:f7:e8:90:ce:29:46:70:95:cb:36:56:
14:e9:22:68:0d:d4:84:96:7d:a6:1e:ec:68:ec:ea:
ec:f4:0c:36:2d:19:bc:e0:56:a0:e0:17:65:ad:3d:
a2:d2:35:33:c4:9b:5a:eb:0a:3a:c8:91:63:01:30:
10:b2:e5:ac:e7:ea:fa:aa:b4:99:92:16:a4:fc:ad:
39:fb:4f:95:96:51:b2:4c:be:c1:8a:ac:bb:5b:68:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A0:58:49:CC:D3:DB:72:F3:61:98:82:08:51:E5:15:58:CE:CD:4C
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/06BYSczT23LzYZiCCFHlFVjOzUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.7.0/24
46.162.27.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:c2:34:58:1b:41:e0:dd:de:88:6b:70:93:99:f1:a8:ce:
fb:cc:13:93:c7:3d:05:14:86:80:ed:28:0e:89:28:84:58:fc:
3a:07:52:31:bb:5a:8f:45:4f:85:a6:3e:44:02:e1:ea:01:f0:
91:84:e6:dd:18:5b:5c:11:77:35:a6:02:ad:ee:9a:0d:ec:d4:
ca:a6:f8:eb:f9:46:c6:cb:f5:5d:60:86:57:03:67:20:0c:07:
12:8b:2c:39:2c:54:8a:9f:c5:3d:57:2f:83:91:48:30:53:ee:
b3:7f:f1:3d:ca:f3:ed:ad:d8:0e:ff:47:96:19:41:4d:3f:76:
b6:3a:6b:45:f8:0e:9b:c1:f2:09:f2:5e:03:4c:ea:f8:b2:ab:
14:62:40:17:39:b4:b1:30:9e:ee:af:37:75:fc:78:e8:03:8f:
89:8f:44:a6:62:c9:83:03:53:82:fa:da:99:ce:e7:3d:3a:9a:
6d:ec:96:86:dc:b6:94:0a:c4:0c:4f:e9:81:b0:93:87:cb:21:
d0:95:3f:69:e9:94:38:b3:6c:63:9a:fe:24:69:f3:d4:f9:06:
24:e4:cb:66:cd:e4:5d:9a:87:f8:08:8e:3f:93:5f:e1:c3:23:
12:67:1d:52:61:6f:5c:fa:6b:31:d4:35:af:1f:57:0d:da:86:
6b:b3:79:08
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYthGznu915FmKjVfQdWY9xTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMxMDI0MDk1NDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2EwNTg0OWNjZDNkYjcyZjM2MTk4ODIwODUxZTUxNTU4Y2VjZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXmCTg8ii/zuxF5tRkkvryqn1mFU
lFk+eoWbxaaVxlOJgwMLH24dgrZXVxVNvVIVHVufAutVrUUiTdcwBZoVoTzxnXi7
Dk9pTEVN/P/SDS4mA+RZjfpYZjAF4V2hS7bOMbdxGXma5/9nw2hs8t/P1Ag3eSlA
J2muLzFtUJbkT7BsnHFrlwL6GSEI5LlFXp5akuldjt/ghrPDsjC505EgLe+oUCUA
NZF99+iQzilGcJXLNlYU6SJoDdSEln2mHuxo7Ors9Aw2LRm84Fag4BdlrT2i0jUz
xJta6wo6yJFjATAQsuWs5+r6qrSZkhak/K05+0+VllGyTL7Biqy7W2j1qwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNOgWEnM09ty82GYgghR5RVYzs1MMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvMDZCWVNjelQyM0x6WVppQ0NGSGxGVmpPelV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALqIHAwQA
LqIbAwQALqI9MA0GCSqGSIb3DQEBCwUAA4IBAQAbacI0WBtB4N3eiGtwk5nxqM77
zBOTxz0FFIaA7SgOiSiEWPw6B1Ixu1qPRU+Fpj5EAuHqAfCRhObdGFtcEXc1pgKt
7poN7NTKpvjr+UbGy/VdYIZXA2cgDAcSiyw5LFSKn8U9Vy+DkUgwU+6zf/E9yvPt
rdgO/0eWGUFNP3a2OmtF+A6bwfIJ8l4DTOr4sqsUYkAXObSxMJ7urzd1/HjoA4+J
j0SmYsmDA1OC+tqZzuc9Oppt7JaG3LaUCsQMT+mBsJOHyyHQlT9p6ZQ4s2xjmv4k
afPU+QYk5MtmzeRdmof4CI4/k1/hwyMSZx1SYW9c+msx1DWvH1cN2oZrs3kI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org