Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4lJTFygbr1DiORrV75B3jGQeBP0.roa
File: 4lJTFygbr1DiORrV75B3jGQeBP0.roa (raw, json)
Hash identifier: mc2yL6IqQQzF2a5M55s4ueyd48EAnQB/mynrVD7n7GI=
Subject key identifier: E2:52:53:17:28:1B:AF:50:E2:39:1A:D5:EF:90:77:8C:64:1E:04:FD
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018B611B39456A4832F14146D52514769459
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4lJTFygbr1DiORrV75B3jGQeBP0.roa
Signing time: Tue 24 Oct 2023 09:54:15 +0000
ROA not before: Tue 24 Oct 2023 09:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.3.0/24 maxlen: 24
46.162.0.0/24 maxlen: 24
46.162.8.0/24 maxlen: 24
46.162.9.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.15.0/24 maxlen: 24
46.162.12.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.22.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.21.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.32.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
46.162.57.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.55.0/24 maxlen: 24
46.162.56.0/24 maxlen: 24
46.162.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:1b:39:45:6a:48:32:f1:41:46:d5:25:14:76:94:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Oct 24 09:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2525317281baf50e2391ad5ef90778c641e04fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:d1:b4:29:57:4a:db:02:39:18:2e:0b:5c:
b4:a2:62:0f:58:a1:8a:ff:f2:5b:ec:bd:a4:ac:a7:
f9:fd:bd:d1:6c:c0:58:87:22:bc:1d:08:71:f3:4e:
31:0b:b9:c4:74:20:a1:26:19:1c:03:96:f6:42:43:
56:c3:db:02:96:96:60:ae:28:9a:ff:38:67:c7:7f:
d3:e6:ef:00:1a:43:5a:52:bf:1e:22:0f:df:43:0a:
ea:4d:04:11:2a:6c:f5:a7:64:9b:f5:65:91:ab:85:
1b:77:f7:ca:3b:23:9d:b1:b3:22:47:2d:6e:9c:05:
82:cd:b5:32:17:f8:95:1d:6b:ec:94:09:9a:79:68:
d2:32:6d:15:05:18:bf:99:ea:28:03:f0:5a:1d:eb:
4c:60:95:35:5b:05:91:e3:85:b6:66:f6:98:28:df:
be:14:e5:36:c0:8a:4a:bc:b9:cd:30:55:d5:4f:8d:
43:47:a9:f6:30:a3:52:1d:8b:e7:c1:f0:e3:a6:cf:
b1:17:68:f0:50:9e:8e:a2:3a:54:af:df:4f:1c:a6:
4d:2a:81:98:a6:ee:37:bd:8b:fa:70:72:71:9a:c3:
04:d0:c3:3f:32:c7:3a:24:55:0a:ee:68:28:34:5b:
10:6f:f6:c9:1c:3e:64:7c:e3:0c:ee:7b:29:10:aa:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:53:17:28:1B:AF:50:E2:39:1A:D5:EF:90:77:8C:64:1E:04:FD
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/4lJTFygbr1DiORrV75B3jGQeBP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.3.0/24
46.162.8.0/21
46.162.18.0/24
46.162.20.0/22
46.162.26.0/24
46.162.32.0/24
46.162.48.0-46.162.57.255
46.162.59.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3b:2b:85:39:b4:d4:cd:08:73:53:39:2a:f1:00:75:0b:27:
c8:b3:8b:38:8f:dc:db:1e:bc:99:6d:b8:aa:13:2e:b1:77:84:
8f:41:3b:ab:16:fa:03:07:61:5a:6d:f0:32:4e:3b:18:0e:0a:
e3:cf:a1:ca:d6:35:b2:fc:de:f9:13:68:c4:bd:af:70:81:96:
77:15:e8:2d:80:1d:48:8c:27:13:0a:f7:8d:99:d5:9a:a4:8a:
bf:ad:8a:d6:83:3e:a1:83:f8:6b:c5:d2:3e:69:af:74:0f:12:
f4:ab:a3:fd:14:4a:ce:7b:60:11:2c:86:e4:70:bb:e4:bd:f2:
94:e2:fd:0c:46:61:0c:c2:33:5c:c6:ab:aa:50:5a:02:20:b1:
fe:5a:72:4d:66:3d:42:66:43:98:27:f2:46:b2:f7:6a:1c:40:
15:d2:eb:75:77:ac:26:56:c1:17:7a:1f:41:d8:6e:9b:e8:49:
33:59:57:64:92:1b:e2:8e:bc:94:46:3e:8e:36:44:9e:82:be:
f2:ea:06:ca:f3:7e:94:fa:b6:77:0f:3c:cf:35:30:6f:7a:86:
23:8d:d4:35:ad:a0:dd:70:08:68:ec:0c:3a:87:f8:e5:c9:b0:
ad:b4:be:67:ca:33:be:2c:58:c7:1f:b2:f0:03:2d:ae:12:54:
ce:6b:fc:af
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYthGzlFakgy8UFG1SUUdpRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMxMDI0MDk1NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjUyNTMxNzI4MWJhZjUwZTIzOTFhZDVlZjkwNzc4YzY0MWUwNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZvRtClXStsCORguC1y0omIPWKGK
//Jb7L2krKf5/b3RbMBYhyK8HQhx804xC7nEdCChJhkcA5b2QkNWw9sClpZgriia
/zhnx3/T5u8AGkNaUr8eIg/fQwrqTQQRKmz1p2Sb9WWRq4Ubd/fKOyOdsbMiRy1u
nAWCzbUyF/iVHWvslAmaeWjSMm0VBRi/meooA/BaHetMYJU1WwWR44W2ZvaYKN++
FOU2wIpKvLnNMFXVT41DR6n2MKNSHYvnwfDjps+xF2jwUJ6OojpUr99PHKZNKoGY
pu43vYv6cHJxmsME0MM/Msc6JFUK7mgoNFsQb/bJHD5kfOMM7nspEKoT0wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFOJSUxcoG69Q4jka1e+Qd4xkHgT9MB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvNGxKVEZ5Z2JyMURpT1JyVjc1QjNqR1FlQlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALqIAAwQA
LqIDAwQDLqIIAwQALqISAwQCLqIUAwQALqIaAwQALqIgMAwDBAQuojADBAEuojgD
BAAuojswDQYJKoZIhvcNAQELBQADggEBADM7K4U5tNTNCHNTOSrxAHULJ8iziziP
3NsevJltuKoTLrF3hI9BO6sW+gMHYVpt8DJOOxgOCuPPocrWNbL83vkTaMS9r3CB
lncV6C2AHUiMJxMK942Z1Zqkir+titaDPqGD+GvF0j5pr3QPEvSro/0USs57YBEs
huRwu+S98pTi/QxGYQzCM1zGq6pQWgIgsf5ack1mPUJmQ5gn8kay92ocQBXS63V3
rCZWwRd6H0HYbpvoSTNZV2SSG+KOvJRGPo42RJ6CvvLqBsrzfpT6tncPPM81MG96
hiON1DWtoN1wCGjsDDqH+OXJsK20vmfKM74sWMcfsvADLa4SVM5r/K8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org