Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3lqfnFQCniU911gY-iiiwDNvOl8.roa
File: 3lqfnFQCniU911gY-iiiwDNvOl8.roa (raw, json)
Hash identifier: YYRc10uJd3hB8MQ4apmczDR4C5kjTEpyYZsSnPfyXyU=
Subject key identifier: DE:5A:9F:9C:54:02:9E:25:3D:D7:58:18:FA:28:A2:C0:33:6F:3A:5F
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018A18199794CE75B6A26AD90BD4819DA249
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3lqfnFQCniU911gY-iiiwDNvOl8.roa
Signing time: Mon 21 Aug 2023 12:37:24 +0000
ROA not before: Mon 21 Aug 2023 12:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.0.0/24 maxlen: 24
46.162.8.0/24 maxlen: 24
46.162.9.0/24 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.15.0/24 maxlen: 24
46.162.12.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.22.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.21.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 15:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:19:97:94:ce:75:b6:a2:6a:d9:0b:d4:81:9d:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 21 12:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de5a9f9c54029e253dd75818fa28a2c0336f3a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:f1:27:d6:7d:51:17:91:0b:fa:1f:1f:e3:
8c:4b:ea:82:13:b6:a8:2b:26:4b:b9:9b:a0:b0:ae:
2d:90:7a:67:08:18:b9:6c:f7:2b:6f:41:72:e2:73:
fb:ec:de:8c:03:62:fc:0a:f6:7b:81:9b:ca:ba:3d:
de:92:60:d3:68:f6:f5:b3:ca:fc:6f:ed:56:6d:0d:
29:8c:74:0f:1f:c9:78:3d:48:35:1e:41:f8:d0:31:
02:19:08:40:59:9b:9e:24:8c:eb:cd:e3:f9:fb:f7:
7b:db:a0:07:06:83:32:be:2e:a3:bf:15:11:cc:69:
91:d3:06:34:ba:00:c4:54:64:6e:18:31:16:6c:67:
18:0a:f6:11:31:2a:83:50:31:55:ad:ff:48:77:45:
5e:c8:85:67:94:d0:66:74:1a:dd:e6:9e:64:08:aa:
e2:24:0a:9b:84:e1:91:e3:95:82:a3:7a:fb:50:14:
ea:26:84:76:af:dd:fc:f5:27:14:40:59:80:50:28:
8a:64:a8:7e:53:24:98:f9:59:6e:df:ca:fc:49:85:
cd:a4:e3:6f:ad:02:8a:4c:22:4f:9a:e6:bc:c4:9c:
4d:d8:9a:f9:b7:9c:56:fc:bd:7c:ef:53:fa:d9:51:
66:26:a0:6c:21:74:4a:a9:6f:83:e8:c6:7c:7b:06:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:9F:9C:54:02:9E:25:3D:D7:58:18:FA:28:A2:C0:33:6F:3A:5F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/3lqfnFQCniU911gY-iiiwDNvOl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.3.0/24
46.162.8.0-46.162.12.255
46.162.15.0/24
46.162.18.0/24
46.162.20.0/22
46.162.26.0/24
46.162.32.0/24
46.162.48.0-46.162.53.255
Signature Algorithm: sha256WithRSAEncryption
4c:8a:ca:c8:c4:35:a9:ee:d8:57:7a:9f:cb:0a:a3:21:14:ef:
b1:c3:c7:8f:f0:8c:2b:7b:3e:b1:e3:3f:34:f5:e8:f4:33:88:
5e:8c:75:34:f4:0e:7e:e8:55:72:b2:54:1c:9f:17:ac:f4:d4:
ea:6e:56:17:b4:32:d6:05:f0:6a:70:98:59:d1:80:3d:2e:d8:
14:35:c0:a0:29:ea:37:85:a6:1e:4e:83:f7:8e:85:20:61:30:
db:d8:eb:98:0e:4f:c1:de:ed:85:fd:6f:6a:09:e6:07:78:fb:
49:64:f6:13:22:79:ba:72:bd:91:c7:e9:89:e7:d6:5a:d2:82:
11:01:9c:8e:26:22:1e:4f:37:a6:53:39:4a:7e:68:87:97:f5:
42:8a:3a:95:bd:1b:89:87:aa:d0:ee:b0:7c:f6:6c:90:75:85:
42:5b:7d:12:b6:aa:a6:15:c6:b5:35:6c:c3:ee:7d:50:a9:69:
8f:a9:f4:ce:bd:ab:d3:66:9e:86:79:0a:92:c3:f9:48:4e:04:
50:74:d1:3f:1f:fb:bc:b3:dc:16:b7:db:ca:2e:b2:49:92:07:
40:5b:d4:de:11:78:b3:bf:d7:74:0b:6a:ae:d2:9b:6d:6f:b4:
ef:8e:9c:ca:df:6d:71:f6:71:ea:c2:46:17:d2:79:06:8e:7c:
d8:4a:64:4a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgISAYoYGZeUznW2omrZC9SBnaJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwODIxMTIzNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTVhOWY5YzU0MDI5ZTI1M2RkNzU4MThmYTI4YTJjMDMzNmYzYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooTxJ9Z9UReRC/ofH+OMS+qCE7ao
KyZLuZugsK4tkHpnCBi5bPcrb0Fy4nP77N6MA2L8CvZ7gZvKuj3ekmDTaPb1s8r8
b+1WbQ0pjHQPH8l4PUg1HkH40DECGQhAWZueJIzrzeP5+/d726AHBoMyvi6jvxUR
zGmR0wY0ugDEVGRuGDEWbGcYCvYRMSqDUDFVrf9Id0VeyIVnlNBmdBrd5p5kCKri
JAqbhOGR45WCo3r7UBTqJoR2r9389ScUQFmAUCiKZKh+UySY+Vlu38r8SYXNpONv
rQKKTCJPmua8xJxN2Jr5t5xW/L1871P62VFmJqBsIXRKqW+D6MZ8ewYQkQIDAQAB
o4ICSTCCAkUwHQYDVR0OBBYEFN5an5xUAp4lPddYGPooosAzbzpfMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvM2xxZm5GUUNuaVU5MTFnWS1paWl3RE52T2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQALqIAAwQA
LqIDMAwDBAMuoggDBAAuogwDBAAuog8DBAAuohIDBAIuohQDBAAuohoDBAAuoiAw
DAMEBC6iMAMEAS6iNDANBgkqhkiG9w0BAQsFAAOCAQEATIrKyMQ1qe7YV3qfywqj
IRTvscPHj/CMK3s+seM/NPXo9DOIXox1NPQOfuhVcrJUHJ8XrPTU6m5WF7Qy1gXw
anCYWdGAPS7YFDXAoCnqN4WmHk6D946FIGEw29jrmA5Pwd7thf1vagnmB3j7SWT2
EyJ5unK9kcfpiefWWtKCEQGcjiYiHk83plM5Sn5oh5f1Qoo6lb0biYeq0O6wfPZs
kHWFQlt9EraqphXGtTVsw+59UKlpj6n0zr2r02aehnkKksP5SE4EUHTRPx/7vLPc
Frfbyi6ySZIHQFvU3hF4s7/XdAtqrtKbbW+0746cyt9tcfZx6sJGF9J5Bo582Epk
Sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org