Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0Gr2afg-d2cRldXe73Ucq3HTPdk.roa
File: 0Gr2afg-d2cRldXe73Ucq3HTPdk.roa (raw, json)
Hash identifier: oETKi2dfjoJ4c1nFoq1fvv0hpbIszB40mnulA2Tn1qk=
Subject key identifier: D0:6A:F6:69:F8:3E:77:67:11:95:D5:DE:EF:75:1C:AB:71:D3:3D:D9
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01862D8DBEC3A34101E829CEE6713CC9A171
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0Gr2afg-d2cRldXe73Ucq3HTPdk.roa
Signing time: Tue 07 Feb 2023 20:25:09 +0000
ROA not before: Tue 07 Feb 2023 20:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 46.162.49.0/24 maxlen: 24
46.162.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 19:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:8d:be:c3:a3:41:01:e8:29:ce:e6:71:3c:c9:a1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 7 20:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d06af669f83e77671195d5deef751cab71d33dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:cc:03:ef:ed:c3:1f:f0:3f:c7:1d:f5:42:
1e:48:6e:ce:a8:17:39:01:f5:b5:c3:ea:54:f6:2a:
c5:e8:6a:a7:4f:61:34:ad:4f:66:38:e3:02:51:0d:
2a:0b:09:89:4f:93:90:c3:fd:62:c0:18:48:52:0e:
e0:88:3d:6e:4c:63:cb:b2:32:56:0e:fe:9b:a9:bb:
a5:c3:a7:43:50:be:52:43:48:fd:c5:d0:41:e1:4b:
3e:72:01:06:35:eb:6e:e2:0e:bf:a2:c6:38:bd:f7:
e9:09:bd:ca:6e:32:c8:b4:7d:53:0d:3f:06:4a:95:
9a:45:c1:c2:2d:7b:bf:bc:cc:25:13:68:55:8a:a2:
18:9c:b7:cc:c7:13:d8:a1:61:58:96:4a:b4:12:8f:
3f:e8:0b:25:c3:57:d3:d6:54:55:90:40:f7:f4:0c:
7d:c3:64:20:96:93:aa:3d:af:b0:7b:a5:8a:91:04:
42:d7:a1:82:4f:fa:e9:30:11:f8:f5:6e:e8:48:c3:
c5:63:bf:ab:1b:39:87:11:f4:dd:e0:54:7b:67:33:
3e:a1:c6:d8:9e:01:e9:13:50:e8:00:46:ae:0f:28:
6f:de:00:0a:71:aa:72:6f:b6:fb:e0:c5:8c:3c:d5:
21:45:74:34:ee:6c:62:bb:7b:58:d2:3c:b1:61:a6:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:F6:69:F8:3E:77:67:11:95:D5:DE:EF:75:1C:AB:71:D3:3D:D9
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/0Gr2afg-d2cRldXe73Ucq3HTPdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.49.0/24
46.162.56.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c0:ea:61:0b:7f:a0:98:ae:31:29:ee:9c:a2:91:4b:03:31:
5a:17:ce:97:ed:ed:b6:83:a3:f7:c6:d3:1e:f5:70:71:81:50:
f5:5d:3e:c8:be:c8:74:3c:ad:e6:96:eb:b2:66:78:72:20:e7:
7f:64:df:6b:88:df:f1:e4:0b:3e:66:71:62:f9:9d:18:9e:f9:
05:55:72:39:42:cc:50:77:55:72:05:08:11:13:1b:81:01:be:
84:7c:86:fd:47:90:27:cf:41:bb:ff:22:26:70:3c:65:7d:83:
82:36:dd:95:a9:01:25:c0:f0:36:63:80:d7:bc:fb:a1:c5:44:
4b:cf:4d:17:72:08:c5:4c:8d:eb:24:51:a6:0b:d1:30:fb:09:
e6:61:8e:01:af:5a:48:8b:13:19:e0:9f:50:13:59:bb:7c:a5:
73:ac:11:3e:57:06:85:3a:03:64:67:10:b9:00:a7:29:97:98:
e5:63:62:23:4c:2f:91:c3:84:0c:ab:6f:a0:f8:ed:ad:a2:dc:
0e:32:f2:a9:35:88:68:bb:f8:d1:7e:01:38:c0:be:ec:8b:cd:
72:6a:6f:8d:ce:7b:e3:f3:62:e5:81:c4:cb:20:c7:97:f7:7b:
a7:1c:55:95:ae:47:74:9d:fe:e4:9f:44:6c:b1:af:8f:08:1e:
34:20:79:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYtjb7Do0EB6CnO5nE8yaFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMjA3MjAyNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDZhZjY2OWY4M2U3NzY3MTE5NWQ1ZGVlZjc1MWNhYjcxZDMzZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNDMA+/twx/wP8cd9UIeSG7OqBc5
AfW1w+pU9irF6GqnT2E0rU9mOOMCUQ0qCwmJT5OQw/1iwBhIUg7giD1uTGPLsjJW
Dv6bqbulw6dDUL5SQ0j9xdBB4Us+cgEGNetu4g6/osY4vffpCb3KbjLItH1TDT8G
SpWaRcHCLXu/vMwlE2hViqIYnLfMxxPYoWFYlkq0Eo8/6Aslw1fT1lRVkED39Ax9
w2QglpOqPa+we6WKkQRC16GCT/rpMBH49W7oSMPFY7+rGzmHEfTd4FR7ZzM+ocbY
ngHpE1DoAEauDyhv3gAKcapyb7b74MWMPNUhRXQ07mxiu3tY0jyxYaYFbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNBq9mn4PndnEZXV3u91HKtx0z3ZMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvMEdyMmFmZy1kMmNSbGRYZTczVWNxM0hUUGRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqIxAwQA
LqI4MA0GCSqGSIb3DQEBCwUAA4IBAQB5wOphC3+gmK4xKe6copFLAzFaF86X7e22
g6P3xtMe9XBxgVD1XT7Ivsh0PK3mluuyZnhyIOd/ZN9riN/x5As+ZnFi+Z0YnvkF
VXI5QsxQd1VyBQgRExuBAb6EfIb9R5Anz0G7/yImcDxlfYOCNt2VqQElwPA2Y4DX
vPuhxURLz00XcgjFTI3rJFGmC9Ew+wnmYY4Br1pIixMZ4J9QE1m7fKVzrBE+VwaF
OgNkZxC5AKcpl5jlY2IjTC+Rw4QMq2+g+O2totwOMvKpNYhou/jRfgE4wL7si81y
am+Nznvj82LlgcTLIMeX93unHFWVrkd0nf7kn0Rssa+PCB40IHkS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org