Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/C3CIEexy6Cr3gHg8QIRpUgwKmQA.roa
File: C3CIEexy6Cr3gHg8QIRpUgwKmQA.roa (raw, json)
Hash identifier: dZmRf+4gA6F2rywjaK3R72e6/0lbfCg3EriAJdS6ntY=
Subject key identifier: 0B:70:88:11:EC:72:E8:2A:F7:80:78:3C:40:84:69:52:0C:0A:99:00
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187674AB62A10E039FF74C8F28AB9B7E62A
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/C3CIEexy6Cr3gHg8QIRpUgwKmQA.roa
Signing time: Sun 09 Apr 2023 18:32:42 +0000
ROA not before: Sun 09 Apr 2023 18:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.55.0/24 maxlen: 24
46.162.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:67:4a:b6:2a:10:e0:39:ff:74:c8:f2:8a:b9:b7:e6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 9 18:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b708811ec72e82af780783c408469520c0a9900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ae:1c:05:65:ad:dd:da:59:48:e1:eb:b1:29:
2e:c7:f9:d5:d4:fc:8b:1c:99:12:7f:4a:f9:fd:fa:
8f:57:8e:17:11:f6:3a:06:b9:7b:c7:81:d3:3f:07:
fb:9e:38:db:ba:c4:5e:a8:12:60:f6:2e:e8:05:bb:
60:46:a8:c5:f8:68:eb:4e:a0:97:e0:61:d7:eb:a4:
70:ac:6e:93:3d:01:50:e0:2d:2f:f4:53:dc:2e:0e:
d0:2b:eb:b1:eb:cd:fd:c1:ac:ea:0f:7d:b5:2f:43:
44:4c:55:b8:f8:05:48:42:1c:7a:00:61:be:e3:e8:
e9:6a:55:81:f3:af:33:47:20:d4:00:4f:d3:00:9d:
f5:ae:f7:e6:c2:5b:f6:ca:11:9a:e8:7d:45:8c:f1:
43:f4:b9:9e:61:87:82:d8:76:df:5a:13:a0:b8:82:
10:bf:0e:ba:6c:4a:3d:0f:5c:c6:5e:f2:04:f2:d2:
32:8a:28:df:c4:e1:d8:17:35:96:85:d6:8d:a0:c6:
9a:37:9a:93:25:8b:08:96:cc:47:64:0e:d1:35:d8:
ed:d9:6e:be:af:ae:d2:6e:27:33:11:ce:98:85:7d:
c3:19:b7:1a:7c:0a:cd:f8:4e:0b:11:8b:ba:36:80:
cb:f1:1a:06:da:ce:9e:b5:b3:f8:80:a1:45:12:d7:
28:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:70:88:11:EC:72:E8:2A:F7:80:78:3C:40:84:69:52:0C:0A:99:00
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/C3CIEexy6Cr3gHg8QIRpUgwKmQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.55.0/24
46.162.62.0/24
Signature Algorithm: sha256WithRSAEncryption
31:47:10:dd:0e:8d:ce:75:37:6a:a6:66:aa:9a:5d:ca:9a:57:
e9:5a:c0:c8:cc:1f:44:43:c1:32:88:3d:e0:37:ff:13:55:66:
52:b3:57:94:9b:be:eb:3f:5f:09:21:a2:96:c4:0d:30:1b:f7:
ca:33:0f:69:6a:10:91:03:73:b9:a6:18:f7:37:e6:a9:db:f8:
0b:3b:43:14:ad:03:08:e0:32:94:8a:08:f0:fb:0b:8c:e5:a0:
ad:f2:2e:4f:53:6a:3f:81:ba:7f:f9:3d:81:41:dc:02:5d:b5:
4b:82:0d:f6:c6:04:79:7d:2f:71:24:fe:c2:af:2f:ec:85:16:
04:73:8f:dd:c6:8b:a8:3a:10:8e:ea:6e:82:62:9d:4a:eb:6d:
69:81:83:23:80:54:cc:00:11:e9:41:18:7b:9b:60:b8:62:b6:
b0:50:4a:be:13:56:99:26:d2:b8:b8:85:73:c3:67:ef:33:f0:
2e:b4:0d:83:6d:f4:f4:31:4f:1b:44:13:ec:35:c1:3a:02:33:
db:e3:2a:2d:49:3e:6f:7f:df:ff:3e:28:fd:c8:b0:e6:c3:12:
78:cd:85:89:24:16:0d:6e:03:5e:3d:b1:c5:e0:e8:ec:37:bc:
e6:22:ed:1f:15:7f:61:6d:97:c5:9e:fd:4b:41:36:fd:16:b0:
41:58:05:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdnSrYqEOA5/3TI8oq5t+YqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNDA5MTgzMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjcwODgxMWVjNzJlODJhZjc4MDc4M2M0MDg0Njk1MjBjMGE5OTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a4cBWWt3dpZSOHrsSkux/nV1PyL
HJkSf0r5/fqPV44XEfY6Brl7x4HTPwf7njjbusReqBJg9i7oBbtgRqjF+GjrTqCX
4GHX66RwrG6TPQFQ4C0v9FPcLg7QK+ux6839wazqD321L0NETFW4+AVIQhx6AGG+
4+jpalWB868zRyDUAE/TAJ31rvfmwlv2yhGa6H1FjPFD9LmeYYeC2HbfWhOguIIQ
vw66bEo9D1zGXvIE8tIyiijfxOHYFzWWhdaNoMaaN5qTJYsIlsxHZA7RNdjt2W6+
r67SbiczEc6YhX3DGbcafArN+E4LEYu6NoDL8RoG2s6etbP4gKFFEtcoFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAtwiBHscugq94B4PECEaVIMCpkAMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvQzNDSUVleHk2Q3IzZ0hnOFFJUnBVZ3dLbVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqI3AwQA
LqI+MA0GCSqGSIb3DQEBCwUAA4IBAQAxRxDdDo3OdTdqpmaqml3KmlfpWsDIzB9E
Q8EyiD3gN/8TVWZSs1eUm77rP18JIaKWxA0wG/fKMw9pahCRA3O5phj3N+ap2/gL
O0MUrQMI4DKUigjw+wuM5aCt8i5PU2o/gbp/+T2BQdwCXbVLgg32xgR5fS9xJP7C
ry/shRYEc4/dxouoOhCO6m6CYp1K621pgYMjgFTMABHpQRh7m2C4YrawUEq+E1aZ
JtK4uIVzw2fvM/AutA2DbfT0MU8bRBPsNcE6AjPb4yotST5vf9//Pij9yLDmwxJ4
zYWJJBYNbgNePbHF4OjsN7zmIu0fFX9hbZfFnv1LQTb9FrBBWAX3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org