Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HvJXskmYUVCknVE06w6lT5KomKo.roa
File: HvJXskmYUVCknVE06w6lT5KomKo.roa (raw, json)
Hash identifier: 43F9sWTOJeNlrx4dbWb2qglUdzWGgLqrD8rBZk7jL40=
Subject key identifier: 1E:F2:57:B2:49:98:51:50:A4:9D:51:34:EB:0E:A5:4F:92:A8:98:AA
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188DE2B7F5900F054D4699354D1EE24EA2C
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HvJXskmYUVCknVE06w6lT5KomKo.roa
Signing time: Wed 21 Jun 2023 13:36:12 +0000
ROA not before: Wed 21 Jun 2023 13:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.162.15.0/24 maxlen: 24
46.162.14.0/24 maxlen: 24
46.162.13.0/24 maxlen: 24
46.162.12.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.23.0/24 maxlen: 24
46.162.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:2b:7f:59:00:f0:54:d4:69:93:54:d1:ee:24:ea:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 21 13:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ef257b249985150a49d5134eb0ea54f92a898aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:61:c4:44:f2:69:77:82:d9:bc:bf:cd:b2:
c8:d5:40:8f:89:23:a3:96:d0:d9:f7:b9:19:90:0d:
e6:89:1d:f1:44:d2:ef:f5:6d:59:31:59:ad:05:8e:
a4:25:32:4a:9c:b8:c9:80:a9:4c:99:c3:f5:40:b1:
1a:53:1b:b1:b4:c8:6f:08:15:65:2a:0c:cf:f0:82:
d6:4e:d2:e4:3f:18:2c:d0:b1:89:19:5b:b2:35:cb:
28:e3:fb:dd:6c:4f:5d:08:ec:87:3b:41:8e:d0:70:
ef:f2:d5:bf:2a:0b:e3:10:3b:81:78:a5:83:a2:1a:
d5:77:f4:24:c4:07:1b:b2:19:6d:31:a1:24:63:3c:
39:b7:2b:11:37:9f:c0:38:3b:10:54:6c:1a:4a:ca:
bc:c6:6f:01:a1:0b:59:71:b5:7b:74:28:01:d7:8f:
fa:2b:7b:e4:b0:7d:91:77:fa:ec:d9:45:9f:52:22:
04:99:9a:a3:d6:eb:25:4b:30:53:09:ce:7e:4c:80:
d4:0b:37:a9:b6:9c:de:5b:77:1c:d2:bb:b9:9f:c4:
cc:3e:ce:c2:ee:3e:32:98:3f:45:b1:f1:dd:b4:a0:
dc:a8:74:f8:2b:66:33:77:ff:98:95:5b:60:fc:ae:
dd:5e:a4:c0:33:aa:a4:a9:b2:a5:b8:aa:6d:92:ba:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:57:B2:49:98:51:50:A4:9D:51:34:EB:0E:A5:4F:92:A8:98:AA
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/HvJXskmYUVCknVE06w6lT5KomKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.12.0/22
46.162.20.0/24
46.162.23.0/24
46.162.51.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3d:84:eb:46:3b:f3:d4:31:84:a5:e6:34:88:19:8d:28:11:
d3:e4:33:6f:40:7e:64:62:4c:58:bd:74:9a:76:86:d3:79:06:
a8:3d:86:77:4b:0f:77:f8:7b:11:d0:74:54:da:e3:b6:48:11:
17:9d:61:93:04:d2:f2:77:db:70:4e:6f:17:c2:dc:5f:34:52:
46:83:4e:94:90:69:90:19:ff:17:4d:79:b3:8d:fa:bf:63:0c:
3b:de:b8:65:3e:1d:52:c4:80:8d:db:e3:46:26:e7:da:ac:9c:
a1:f4:31:98:d6:76:8c:43:bf:f8:14:10:d2:9a:b1:a7:b2:ac:
33:39:e2:9a:a3:a8:e9:39:61:7d:95:1f:3a:09:18:a0:a0:38:
3a:70:61:92:0f:4a:dc:c3:45:68:69:f9:23:c5:cc:52:3e:97:
3c:21:5d:68:76:26:74:43:2c:0a:77:f3:1e:68:84:6e:57:07:
8e:d7:2b:9e:d2:f0:06:62:4a:44:d5:ac:ed:4f:4f:38:97:da:
63:a8:b3:3c:fc:05:79:64:50:77:37:91:23:0d:42:2f:6a:b1:
ce:8b:0d:bb:c3:da:5a:df:3a:b2:14:fe:5a:4e:2e:06:7a:54:
53:aa:ff:88:27:99:dd:8a:5e:80:99:fb:1e:3c:0d:aa:a7:db:
69:7b:7d:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYjeK39ZAPBU1GmTVNHuJOosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNjIxMTMzNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWYyNTdiMjQ5OTg1MTUwYTQ5ZDUxMzRlYjBlYTU0ZjkyYTg5OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2VhxETyaXeC2by/zbLI1UCPiSOj
ltDZ97kZkA3miR3xRNLv9W1ZMVmtBY6kJTJKnLjJgKlMmcP1QLEaUxuxtMhvCBVl
KgzP8ILWTtLkPxgs0LGJGVuyNcso4/vdbE9dCOyHO0GO0HDv8tW/KgvjEDuBeKWD
ohrVd/QkxAcbshltMaEkYzw5tysRN5/AODsQVGwaSsq8xm8BoQtZcbV7dCgB14/6
K3vksH2Rd/rs2UWfUiIEmZqj1uslSzBTCc5+TIDUCzeptpzeW3cc0ru5n8TMPs7C
7j4ymD9FsfHdtKDcqHT4K2Yzd/+YlVtg/K7dXqTAM6qkqbKluKptkrqQDQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB7yV7JJmFFQpJ1RNOsOpU+SqJiqMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvSHZKWHNrbVlVVkNrblZFMDZ3NmxUNUtvbUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLqIMAwQA
LqIUAwQALqIXAwQALqIzMA0GCSqGSIb3DQEBCwUAA4IBAQAkPYTrRjvz1DGEpeY0
iBmNKBHT5DNvQH5kYkxYvXSadobTeQaoPYZ3Sw93+HsR0HRU2uO2SBEXnWGTBNLy
d9twTm8XwtxfNFJGg06UkGmQGf8XTXmzjfq/Yww73rhlPh1SxICN2+NGJufarJyh
9DGY1naMQ7/4FBDSmrGnsqwzOeKao6jpOWF9lR86CRigoDg6cGGSD0rcw0Voafkj
xcxSPpc8IV1odiZ0QywKd/MeaIRuVweO1yue0vAGYkpE1aztT084l9pjqLM8/AV5
ZFB3N5EjDUIvarHOiw27w9pa3zqyFP5aTi4GelRTqv+IJ5ndil6AmfsePA2qp9tp
e30K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org