Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/29TiBPUITPsuURWD4kwCKI9JtD8.roa
File: 29TiBPUITPsuURWD4kwCKI9JtD8.roa (raw, json)
Hash identifier: dlpAjLOgXTw9HQDQgFpLXg7IO2O2G+/5wKY3BJOCMHA=
Subject key identifier: DB:D4:E2:04:F5:08:4C:FB:2E:51:15:83:E2:4C:02:28:8F:49:B4:3F
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018588BB6BE027FAEEA8BCF0909A15B8F3A7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/29TiBPUITPsuURWD4kwCKI9JtD8.roa
Signing time: Fri 06 Jan 2023 20:17:42 +0000
ROA not before: Fri 06 Jan 2023 20:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24881
IP address blocks: 46.162.0.0/20 maxlen: 20
46.162.0.0/19 maxlen: 19
46.162.0.0/18 maxlen: 18
46.162.4.0/24 maxlen: 24
46.162.16.0/20 maxlen: 20
193.111.156.0/22 maxlen: 22
46.162.32.0/19 maxlen: 19
46.162.32.0/20 maxlen: 20
46.162.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Wed 01 Feb 2023 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:88:bb:6b:e0:27:fa:ee:a8:bc:f0:90:9a:15:b8:f3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jan 6 20:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd4e204f5084cfb2e511583e24c02288f49b43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:93:21:b9:1c:10:fc:b5:2c:b9:6b:42:76:
f5:b3:16:e1:0e:c0:6e:df:b1:24:0b:32:2d:1d:78:
75:98:59:45:c1:18:ae:d0:0a:52:5f:a4:2a:0b:18:
45:5d:47:ff:fa:a8:71:12:68:a7:a4:de:a4:9f:35:
60:0e:4d:27:5d:15:a1:71:99:29:76:46:fa:30:a4:
17:90:c9:03:0b:4b:93:de:d4:23:1e:fd:89:88:9f:
43:3d:1a:e1:b1:4e:d4:65:38:05:c6:a2:76:d8:be:
e7:a8:9a:05:d1:ce:1b:94:32:1f:7b:2d:d4:03:42:
ca:64:da:9b:19:24:f5:48:bf:0c:9b:89:60:7c:36:
c3:79:7c:c5:61:38:c4:64:18:99:85:71:6a:c0:d3:
17:6d:fa:0e:4a:85:44:a9:36:ed:fe:2e:77:2b:8d:
59:34:2d:70:f1:c8:d0:c1:28:68:de:7e:7b:77:2d:
c3:86:45:3b:0f:81:19:8d:a2:15:96:8b:61:e0:d5:
4f:91:b9:cf:a1:5b:50:fe:e5:2c:35:ae:a0:4f:8d:
0a:6e:0d:c6:65:ca:ef:16:3a:dc:b2:09:05:de:7f:
ef:08:09:c0:50:94:b1:14:69:57:e1:8b:1d:0c:d7:
4e:22:b5:10:08:a6:c5:ce:19:3f:33:3f:f8:8f:04:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D4:E2:04:F5:08:4C:FB:2E:51:15:83:E2:4C:02:28:8F:49:B4:3F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/29TiBPUITPsuURWD4kwCKI9JtD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/18
193.111.156.0/22
Signature Algorithm: sha256WithRSAEncryption
31:51:38:05:4b:e0:02:c2:20:1e:9b:a1:c2:6a:e7:4a:4a:2b:
01:81:b2:74:d7:60:0e:b8:a1:47:f3:37:8a:58:99:59:0c:55:
53:1c:20:90:13:d3:de:50:85:8e:b3:6a:12:9d:b2:37:a9:ae:
bd:8c:cb:6c:ad:f4:07:8e:18:fd:49:8a:4c:20:a0:6b:e4:5f:
d6:26:2d:3e:e6:3d:24:a1:a8:a6:37:87:a4:4d:3d:a6:36:5e:
99:46:21:d8:ba:c2:76:b7:85:9a:94:41:cc:07:04:1a:b0:75:
18:49:ea:c4:e5:c1:bd:75:e6:3e:30:bf:5d:c8:00:63:b3:73:
06:c6:72:d6:8f:2d:12:94:eb:ec:12:f6:50:d6:59:6a:50:3e:
07:ae:75:b8:6b:06:66:c6:e7:0a:49:e1:59:00:64:f1:7f:6b:
af:4e:d1:61:d7:95:3b:94:56:a7:d0:84:22:f6:1a:79:3d:16:
12:67:c9:c3:fc:4f:55:0a:6b:9c:7d:80:cb:25:ee:9f:b9:8c:
c6:bf:19:22:5a:1e:99:f2:5d:fb:c2:6c:d3:a8:fb:de:a4:62:
d3:04:e4:e2:86:7f:98:23:90:42:cd:3b:a5:ec:3f:32:05:8f:
3f:62:e6:74:c3:53:30:c8:95:df:84:bd:9e:f4:0b:b2:4b:aa:
2d:1a:20:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWIu2vgJ/ruqLzwkJoVuPOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMTA2MjAxNzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmQ0ZTIwNGY1MDg0Y2ZiMmU1MTE1ODNlMjRjMDIyODhmNDliNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVGTIbkcEPy1LLlrQnb1sxbhDsBu
37EkCzItHXh1mFlFwRiu0ApSX6QqCxhFXUf/+qhxEminpN6knzVgDk0nXRWhcZkp
dkb6MKQXkMkDC0uT3tQjHv2JiJ9DPRrhsU7UZTgFxqJ22L7nqJoF0c4blDIfey3U
A0LKZNqbGST1SL8Mm4lgfDbDeXzFYTjEZBiZhXFqwNMXbfoOSoVEqTbt/i53K41Z
NC1w8cjQwSho3n57dy3DhkU7D4EZjaIVloth4NVPkbnPoVtQ/uUsNa6gT40Kbg3G
ZcrvFjrcsgkF3n/vCAnAUJSxFGlX4YsdDNdOIrUQCKbFzhk/Mz/4jwQheQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNvU4gT1CEz7LlEVg+JMAiiPSbQ/MB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvMjlUaUJQVUlUUHN1VVJXRDRrd0NLSTlKdEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGLqIAAwQC
wW+cMA0GCSqGSIb3DQEBCwUAA4IBAQAxUTgFS+ACwiAem6HCaudKSisBgbJ012AO
uKFH8zeKWJlZDFVTHCCQE9PeUIWOs2oSnbI3qa69jMtsrfQHjhj9SYpMIKBr5F/W
Ji0+5j0koaimN4ekTT2mNl6ZRiHYusJ2t4WalEHMBwQasHUYSerE5cG9deY+ML9d
yABjs3MGxnLWjy0SlOvsEvZQ1llqUD4HrnW4awZmxucKSeFZAGTxf2uvTtFh15U7
lFan0IQi9hp5PRYSZ8nD/E9VCmucfYDLJe6fuYzGvxkiWh6Z8l37wmzTqPvepGLT
BOTihn+YI5BCzTul7D8yBY8/YuZ0w1MwyJXfhL2e9AuyS6otGiAP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org