Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BXGQAZmAL43cKwZbVZQ7IWYippc.roa
File: BXGQAZmAL43cKwZbVZQ7IWYippc.roa (raw, json)
Hash identifier: QzGr6V1bmRLTc4TLZfyw4qYakVJmNkgvYu8JrAE91P4=
Subject key identifier: 05:71:90:01:99:80:2F:8D:DC:2B:06:5B:55:94:3B:21:66:22:A6:97
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187FADBA0049227AB6DD51C8C42F0ABF80B
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BXGQAZmAL43cKwZbVZQ7IWYippc.roa
Signing time: Mon 08 May 2023 10:15:10 +0000
ROA not before: Mon 08 May 2023 10:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.32.0/22 maxlen: 24
46.162.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 05:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:db:a0:04:92:27:ab:6d:d5:1c:8c:42:f0:ab:f8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 8 10:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0571900199802f8ddc2b065b55943b216622a697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:a4:32:6f:d7:24:10:d4:82:43:86:ff:9c:
ab:18:59:48:48:4d:b5:e9:33:40:8f:ef:9d:f3:4d:
c2:84:03:27:3a:ff:15:be:88:25:6d:ce:30:b2:d7:
0e:55:ae:b9:4f:91:c0:00:7f:d5:eb:7d:41:56:0b:
f4:21:ba:c5:57:08:1e:79:33:2c:d3:60:17:35:fa:
09:78:3b:11:09:d5:26:2c:22:dd:b0:d2:68:9c:51:
6e:06:7a:8a:f8:30:9a:93:95:9e:bc:7a:6c:85:25:
03:99:25:94:05:11:c8:b1:66:5e:bc:c4:01:4a:04:
08:4f:5c:ec:0e:13:5e:7d:36:5e:cb:1c:9c:37:af:
1e:6a:d7:82:ad:eb:2d:c2:79:b6:b2:73:92:dc:3b:
de:45:b3:b0:a6:1f:d5:d9:38:34:8b:7f:4a:87:27:
ef:cb:01:d3:7c:8f:cb:5b:18:94:95:e1:8c:80:cd:
58:e3:01:cf:9d:00:d0:2d:1d:cd:48:74:fe:75:01:
67:8c:e8:e1:4e:bc:b9:90:76:5e:1c:d1:0a:09:4b:
60:06:e0:fe:52:b4:30:be:21:c4:60:21:eb:e7:00:
f3:ed:3c:d5:cd:03:46:ee:a6:d9:97:9d:38:86:88:
0e:16:d4:64:df:0c:76:b7:a0:a6:10:dd:23:57:52:
2d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:90:01:99:80:2F:8D:DC:2B:06:5B:55:94:3B:21:66:22:A6:97
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/BXGQAZmAL43cKwZbVZQ7IWYippc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0/22
46.162.57.0/24
Signature Algorithm: sha256WithRSAEncryption
27:97:c9:f2:94:48:f4:f4:dc:04:1d:3b:1b:c1:c6:87:15:2f:
3a:dd:2e:d4:aa:b9:19:a0:43:71:70:ae:d8:76:bc:91:54:74:
d6:ba:2e:b5:82:05:d0:7d:d4:9f:dc:0e:36:a3:b4:f6:35:7a:
fb:b0:ec:db:18:5b:44:27:8f:42:bb:51:91:df:e6:ab:90:4e:
9d:10:57:48:d4:d5:9a:76:b8:e6:43:bf:a6:46:9c:cc:b4:1d:
27:d6:21:c3:60:bc:a3:d1:df:27:df:af:86:59:40:e3:63:35:
a8:f4:5f:6f:87:7e:6b:c0:0d:2d:6c:f7:3c:7f:44:cf:56:1f:
2b:4a:44:33:9a:db:49:9a:61:52:93:98:11:eb:b6:f0:14:01:
d1:01:94:b3:3c:1b:86:16:5d:e4:bb:da:9a:b8:bb:e3:2e:87:
4d:4e:f7:ea:8b:7c:bb:0b:21:1e:1d:46:cf:84:63:cf:ff:12:
9f:23:49:3b:a3:20:99:df:65:0e:dc:43:b3:d4:0c:99:d9:2b:
52:bf:a2:c1:fa:55:d7:df:ed:05:db:b4:60:6a:96:b7:77:f2:
05:ea:67:84:0f:ad:89:8b:bf:68:19:9f:f2:71:5b:b0:66:29:
39:65:16:bb:ce:6e:4e:2b:71:02:5c:11:45:f8:88:96:b1:b3:
34:c9:a1:66
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYf626AEkierbdUcjELwq/gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTA4MTAxNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTcxOTAwMTk5ODAyZjhkZGMyYjA2NWI1NTk0M2IyMTY2MjJhNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhmkMm/XJBDUgkOG/5yrGFlISE21
6TNAj++d803ChAMnOv8Vvoglbc4wstcOVa65T5HAAH/V631BVgv0IbrFVwgeeTMs
02AXNfoJeDsRCdUmLCLdsNJonFFuBnqK+DCak5WevHpshSUDmSWUBRHIsWZevMQB
SgQIT1zsDhNefTZeyxycN68eateCrestwnm2snOS3DveRbOwph/V2Tg0i39Khyfv
ywHTfI/LWxiUleGMgM1Y4wHPnQDQLR3NSHT+dQFnjOjhTry5kHZeHNEKCUtgBuD+
UrQwviHEYCHr5wDz7TzVzQNG7qbZl504hogOFtRk3wx2t6CmEN0jV1ItlwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAVxkAGZgC+N3CsGW1WUOyFmIqaXMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvQlhHUUFabUFMNDNjS3daYlZaUTdJV1lpcHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLqIgAwQA
LqI5MA0GCSqGSIb3DQEBCwUAA4IBAQAnl8nylEj09NwEHTsbwcaHFS863S7UqrkZ
oENxcK7YdryRVHTWui61ggXQfdSf3A42o7T2NXr7sOzbGFtEJ49Cu1GR3+arkE6d
EFdI1NWadrjmQ7+mRpzMtB0n1iHDYLyj0d8n36+GWUDjYzWo9F9vh35rwA0tbPc8
f0TPVh8rSkQzmttJmmFSk5gR67bwFAHRAZSzPBuGFl3ku9qauLvjLodNTvfqi3y7
CyEeHUbPhGPP/xKfI0k7oyCZ32UO3EOz1AyZ2StSv6LB+lXX3+0F27Rgapa3d/IF
6meED62Ji79oGZ/ycVuwZik5ZRa7zm5OK3ECXBFF+IiWsbM0yaFm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:46 2024 by rpki-client on console-ams.rpki-client.org