Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EXBrxRDAF33ip3LKIslLEY9JCt8.roa
File: EXBrxRDAF33ip3LKIslLEY9JCt8.roa (raw, json)
Hash identifier: rq/JI86I1ncNb5AEU3Ker6+JElY2KtHX4Et92RjuOcs=
Subject key identifier: 11:70:6B:C5:10:C0:17:7D:E2:A7:72:CA:22:C9:4B:11:8F:49:0A:DF
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189B06AA88AE6C62266D0E4D244AFFD594D
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EXBrxRDAF33ip3LKIslLEY9JCt8.roa
Signing time: Tue 01 Aug 2023 09:25:27 +0000
ROA not before: Tue 01 Aug 2023 09:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.0.0/24 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:6a:a8:8a:e6:c6:22:66:d0:e4:d2:44:af:fd:59:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 1 09:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11706bc510c0177de2a772ca22c94b118f490adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:05:2a:28:54:fc:f5:e8:6d:f9:89:09:bd:c2:
7e:c7:79:80:c5:37:2d:ce:81:3a:39:43:53:c7:ac:
bc:0c:b9:94:5a:77:c0:7c:14:6a:4a:26:d3:d8:be:
d1:77:68:11:a1:2b:b1:3d:b2:eb:53:88:4a:9f:80:
81:d4:0e:d4:80:70:f6:5f:8e:f9:df:8e:02:dc:60:
b7:cb:96:fa:57:af:21:66:34:c4:c3:67:03:4e:64:
e1:12:75:47:5a:99:02:69:f7:47:a1:06:36:ea:9e:
b1:76:57:30:c7:bc:05:7b:ec:a7:b1:04:fe:a5:c2:
55:5c:01:cb:af:7d:5e:f2:e4:eb:0a:50:8f:fa:3f:
a5:68:ce:68:3b:a5:a0:91:3b:be:11:e5:53:ca:f1:
2a:bb:08:d1:3f:0b:e6:d2:eb:44:cb:e5:7d:68:ff:
46:15:15:25:ff:2e:21:29:9a:7b:71:b8:e0:dd:6c:
ee:43:f3:73:d6:36:3a:17:f7:2a:27:b2:a3:91:0d:
69:7c:72:03:b5:85:12:ab:bc:62:11:67:c0:f1:4a:
6b:5d:3c:7c:3f:00:f1:cb:36:a9:01:ee:a9:3e:4c:
e3:3d:58:8f:6b:1e:cc:e3:8a:66:14:5b:c6:ba:b7:
4e:4a:25:8b:f8:06:03:49:9d:d1:0e:d7:3f:22:61:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:6B:C5:10:C0:17:7D:E2:A7:72:CA:22:C9:4B:11:8F:49:0A:DF
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/EXBrxRDAF33ip3LKIslLEY9JCt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.0.0/24
46.162.10.0/23
46.162.18.0/24
46.162.23.0/24
46.162.26.0/24
46.162.48.0/24
46.162.50.0/24
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
40:a3:6c:e5:0a:94:03:64:73:96:78:4a:ad:de:4d:0e:cf:a8:
0d:b6:54:43:00:ab:5d:a8:d1:a7:7f:a4:76:3c:02:0a:64:31:
3e:5c:7d:87:30:a9:77:0c:e5:8c:d4:0b:57:55:bf:2c:69:85:
f7:48:66:b8:73:b6:9c:13:ff:3b:01:ef:fa:90:63:bb:7e:c0:
d7:fb:14:5d:7f:1e:b1:3d:cd:25:ae:9b:7d:c3:78:c5:e4:66:
c0:18:51:30:93:31:15:28:46:64:0c:26:c0:69:2c:04:b5:ca:
18:99:1b:29:e7:94:e4:af:f9:64:48:a8:4a:5f:59:d7:a1:11:
c4:0f:ba:27:bb:cd:06:c7:5d:c9:1b:44:1f:40:10:e0:0d:94:
14:5b:81:cc:c6:8f:3b:dd:1e:80:13:30:48:f9:b2:72:4f:76:
5a:90:09:74:67:10:55:0b:c3:a4:1c:72:5f:ed:5f:fe:cc:f4:
5b:9a:fe:9f:87:32:4e:dc:fe:dd:60:41:8f:e3:a6:bf:69:fe:
1b:f1:08:2b:90:24:d2:27:5e:e3:f5:c5:5d:dc:ab:c2:e2:6d:
9c:2a:eb:07:b2:10:e8:5c:c8:81:72:64:c7:8e:f3:72:41:3c:
0b:bf:e7:45:aa:40:4a:78:56:37:f6:a8:9d:e3:8b:97:12:ff:
83:10:7f:03
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYmwaqiK5sYiZtDk0kSv/VlNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwODAxMDkyNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTcwNmJjNTEwYzAxNzdkZTJhNzcyY2EyMmM5NGIxMThmNDkwYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wUqKFT89eht+YkJvcJ+x3mAxTct
zoE6OUNTx6y8DLmUWnfAfBRqSibT2L7Rd2gRoSuxPbLrU4hKn4CB1A7UgHD2X475
344C3GC3y5b6V68hZjTEw2cDTmThEnVHWpkCafdHoQY26p6xdlcwx7wFe+ynsQT+
pcJVXAHLr31e8uTrClCP+j+laM5oO6WgkTu+EeVTyvEquwjRPwvm0utEy+V9aP9G
FRUl/y4hKZp7cbjg3WzuQ/Nz1jY6F/cqJ7KjkQ1pfHIDtYUSq7xiEWfA8UprXTx8
PwDxyzapAe6pPkzjPViPax7M44pmFFvGurdOSiWL+AYDSZ3RDtc/ImFbcwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBFwa8UQwBd94qdyyiLJSxGPSQrfMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvRVhCcnhSREFGMzNpcDNMS0lzbExFWTlKQ3Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQALqIAAwQB
LqIKAwQALqISAwQALqIXAwQALqIaAwQALqIwAwQALqIyAwQBLqI0MA0GCSqGSIb3
DQEBCwUAA4IBAQBAo2zlCpQDZHOWeEqt3k0Oz6gNtlRDAKtdqNGnf6R2PAIKZDE+
XH2HMKl3DOWM1AtXVb8saYX3SGa4c7acE/87Ae/6kGO7fsDX+xRdfx6xPc0lrpt9
w3jF5GbAGFEwkzEVKEZkDCbAaSwEtcoYmRsp55Tkr/lkSKhKX1nXoRHED7onu80G
x13JG0QfQBDgDZQUW4HMxo873R6AEzBI+bJyT3ZakAl0ZxBVC8OkHHJf7V/+zPRb
mv6fhzJO3P7dYEGP46a/af4b8QgrkCTSJ17j9cVd3KvC4m2cKusHshDoXMiBcmTH
jvNyQTwLv+dFqkBKeFY39qid44uXEv+DEH8D
-----END CERTIFICATE-----
Generated at Thu Aug 3 11:09:28 2023 by rpki-client on console-fra.rpki-client.org