Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8RKTAOWnjTLJGtSwsRtnoNUAcCQ.roa
File: 8RKTAOWnjTLJGtSwsRtnoNUAcCQ.roa (raw, json)
Hash identifier: wPgr1Pq/roCaxEnrjrsFx0ZJYyDLF4JOstFlhQVFAAE=
Subject key identifier: F1:12:93:00:E5:A7:8D:32:C9:1A:D4:B0:B1:1B:67:A0:D5:00:70:24
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018927AF0FE400BD6B0AA6DD6EAF64B1F962
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8RKTAOWnjTLJGtSwsRtnoNUAcCQ.roa
Signing time: Wed 05 Jul 2023 20:12:11 +0000
ROA not before: Wed 05 Jul 2023 20:12:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.8.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 07:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:27:af:0f:e4:00:bd:6b:0a:a6:dd:6e:af:64:b1:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 5 20:12:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1129300e5a78d32c91ad4b0b11b67a0d5007024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:39:c2:3a:51:3e:eb:64:93:3a:d6:7e:a4:
29:ee:11:7f:5b:86:6d:db:4a:d9:06:9d:54:18:33:
d0:bb:2c:17:37:d4:98:c5:d2:ca:b1:99:d7:4f:e7:
59:10:4f:7f:c6:cc:1c:f7:1e:1d:8a:65:49:2f:f3:
fd:74:81:bf:d5:f3:e9:9e:0d:02:18:c0:8c:f7:21:
5b:34:9d:04:c6:63:de:c8:60:dc:cf:a9:ce:39:f8:
47:0c:b3:02:8f:27:a8:6b:12:e3:ea:58:22:cc:12:
6b:d5:57:96:2e:35:c7:73:86:0d:97:0c:27:ba:d6:
e9:a1:23:9b:c8:cc:1f:10:10:f1:f0:93:75:64:99:
12:e5:33:62:cf:e1:00:3e:af:19:47:28:e1:a3:f4:
b5:3a:36:49:5b:35:a1:3c:91:89:d3:48:9c:04:fd:
bf:7f:72:18:3c:ad:b8:9d:ee:e4:e2:29:3a:56:26:
5b:f9:23:81:c6:3c:32:36:24:da:ac:93:5e:ad:00:
be:79:d9:e8:aa:3e:c5:5d:bc:ad:9e:59:96:97:87:
2f:af:95:8c:16:9c:3a:07:a1:f7:67:27:73:a4:ea:
27:eb:44:b1:01:25:b0:ff:00:a3:f4:ed:ca:71:0f:
2d:b3:3b:a0:03:e2:64:80:2b:21:3a:f5:25:38:1d:
ba:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:12:93:00:E5:A7:8D:32:C9:1A:D4:B0:B1:1B:67:A0:D5:00:70:24
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/8RKTAOWnjTLJGtSwsRtnoNUAcCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/22
Signature Algorithm: sha256WithRSAEncryption
63:f1:32:96:c6:71:b0:b3:34:70:2e:0c:cf:bd:79:93:ad:0d:
1c:13:c5:ab:39:95:0b:62:53:fb:78:6c:fa:3f:02:79:bf:f6:
1b:9d:3d:10:b6:7b:46:03:a0:19:40:19:1d:67:3b:6e:83:0f:
c4:d2:d8:a8:4a:d5:b7:d6:57:84:b0:40:64:d2:be:12:f6:1a:
51:6c:e6:a4:0a:05:cf:cf:52:5c:13:fc:9a:e9:8d:2d:a3:52:
17:4c:fb:0c:3a:59:e8:ec:ba:fa:d3:9e:6e:7f:20:f3:8d:b7:
c7:48:be:2a:27:ea:46:79:0e:e9:17:0c:d5:8b:b4:d4:fd:61:
32:24:6c:2a:26:21:6d:4a:dd:4f:35:f7:b0:e8:c1:d0:93:41:
7c:8e:f0:2b:ec:19:18:d1:60:3f:2c:1e:1c:c0:b4:f6:86:aa:
da:15:ff:c2:3d:70:18:6f:ed:93:bd:d3:cd:26:f1:64:9a:ff:
a5:bf:13:d7:df:0b:df:72:2a:59:c7:e2:f9:2a:d7:da:99:ec:
bc:87:25:fa:ef:f5:d1:94:fd:3c:3b:5a:33:7f:c4:a4:92:e0:
be:ce:7a:a7:c4:49:d7:f5:30:59:ad:aa:ff:18:14:34:54:fe:
0f:a8:c2:70:bd:3e:7a:b8:fa:f3:ed:a3:bc:a3:8e:29:21:88:
f7:e6:a8:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYknrw/kAL1rCqbdbq9ksfliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNzA1MjAxMjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTEyOTMwMGU1YTc4ZDMyYzkxYWQ0YjBiMTFiNjdhMGQ1MDA3MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzk5wjpRPutkkzrWfqQp7hF/W4Zt
20rZBp1UGDPQuywXN9SYxdLKsZnXT+dZEE9/xswc9x4dimVJL/P9dIG/1fPpng0C
GMCM9yFbNJ0ExmPeyGDcz6nOOfhHDLMCjyeoaxLj6lgizBJr1VeWLjXHc4YNlwwn
utbpoSObyMwfEBDx8JN1ZJkS5TNiz+EAPq8ZRyjho/S1OjZJWzWhPJGJ00icBP2/
f3IYPK24ne7k4ik6ViZb+SOBxjwyNiTarJNerQC+ednoqj7FXbytnlmWl4cvr5WM
Fpw6B6H3ZydzpOon60SxASWw/wCj9O3KcQ8tszugA+JkgCshOvUlOB26pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPESkwDlp40yyRrUsLEbZ6DVAHAkMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvOFJLVEFPV25qVExKR3RTd3NSdG5vTlVBY0NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLqIIMA0G
CSqGSIb3DQEBCwUAA4IBAQBj8TKWxnGwszRwLgzPvXmTrQ0cE8WrOZULYlP7eGz6
PwJ5v/YbnT0QtntGA6AZQBkdZztugw/E0tioStW31leEsEBk0r4S9hpRbOakCgXP
z1JcE/ya6Y0to1IXTPsMOlno7Lr6055ufyDzjbfHSL4qJ+pGeQ7pFwzVi7TU/WEy
JGwqJiFtSt1PNfew6MHQk0F8jvAr7BkY0WA/LB4cwLT2hqraFf/CPXAYb+2TvdPN
JvFkmv+lvxPX3wvfcipZx+L5Ktfamey8hyX67/XRlP08O1ozf8SkkuC+znqnxEnX
9TBZrar/GBQ0VP4PqMJwvT56uPrz7aO8o44pIYj35qgn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org