Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Kd8MkMthN8sf4lo8AoeLY_X6Vts.roa
File: Kd8MkMthN8sf4lo8AoeLY_X6Vts.roa (raw, json)
Hash identifier: CQ21PHZJkqHGzVfe2FydB0y6ArBnQe8D9pXatwPpL94=
Subject key identifier: 29:DF:0C:90:CB:61:37:CB:1F:E2:5A:3C:02:87:8B:63:F5:FA:56:DB
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018751D9AD4E7021EBC6C125DA6344CB386E
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Kd8MkMthN8sf4lo8AoeLY_X6Vts.roa
Signing time: Wed 05 Apr 2023 14:37:12 +0000
ROA not before: Wed 05 Apr 2023 14:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:51:d9:ad:4e:70:21:eb:c6:c1:25:da:63:44:cb:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 5 14:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29df0c90cb6137cb1fe25a3c02878b63f5fa56db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:85:54:c2:c6:74:ce:3b:02:95:e6:84:c4:95:
60:c3:d3:7f:ef:86:c0:66:de:a0:cf:87:19:16:08:
7f:c3:36:a4:b2:de:64:a0:fe:ba:1f:0d:88:4d:bb:
0d:0c:60:cb:ea:88:aa:ed:05:c3:33:8b:3c:6f:61:
11:83:ba:f1:de:fd:f0:83:99:c4:23:bc:3e:6d:53:
4b:66:58:b8:89:3e:d2:d2:4c:41:3e:9c:3d:50:11:
d9:3c:ad:cf:18:a9:43:d3:32:fc:1b:52:3f:73:06:
70:c2:dd:e8:34:c8:b8:ce:41:ed:e3:51:e3:97:2b:
ad:0b:6d:2e:12:92:49:b0:de:4c:f3:58:91:72:55:
2f:49:aa:34:1a:bb:93:a9:74:57:80:48:62:93:01:
80:5d:e6:3c:29:c8:0f:6d:c6:f1:77:2f:96:4f:17:
83:56:f0:44:8f:36:27:f7:29:df:f2:95:15:c2:d8:
04:a2:76:f2:3e:4a:2e:4a:60:a0:de:af:88:b3:b2:
6f:48:3e:22:e8:3f:9f:0a:6b:98:26:c6:84:38:c8:
7a:83:70:0a:a7:f1:ba:f0:68:f7:74:c3:0b:5f:80:
93:ab:d9:c7:29:c6:d8:32:53:c7:c1:77:0b:84:af:
89:f4:02:34:f5:f5:3d:a2:ac:c2:23:b3:df:c9:eb:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DF:0C:90:CB:61:37:CB:1F:E2:5A:3C:02:87:8B:63:F5:FA:56:DB
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Kd8MkMthN8sf4lo8AoeLY_X6Vts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f1:d3:15:a8:ae:94:c2:9d:a1:47:e6:0f:6f:5b:fa:e4:3a:
48:73:38:70:d8:cd:0e:e1:75:b2:b7:14:00:f2:6c:8d:4d:7a:
f7:5c:74:5c:c2:e4:e7:db:ef:0b:08:d1:d1:e3:74:be:c2:af:
9c:5c:1f:0c:c9:0a:53:4a:dd:79:00:40:a0:86:6f:8c:98:4b:
dc:e2:2c:8e:5b:a7:07:63:1f:25:48:2b:5b:4a:9f:ea:9d:ec:
b6:af:75:f4:37:75:32:96:05:2a:db:67:e6:e5:c6:13:4e:ab:
98:ed:bb:ca:3f:ba:14:3e:38:20:2b:86:25:43:7d:c0:cf:c6:
cc:8f:79:fe:31:57:29:db:ca:42:df:8b:6f:c1:77:33:48:6f:
57:f9:1b:ca:4b:18:fe:f2:b2:7d:4b:0b:8a:30:93:de:84:ab:
1b:06:97:fb:b3:aa:d4:8f:8e:f9:2f:50:ea:22:14:b0:c3:ae:
81:77:b4:37:e4:a6:9c:61:0f:06:b8:a4:52:d5:24:f9:20:b0:
5b:cc:e1:df:f4:47:8a:ab:cd:ab:67:44:bb:fd:31:33:2c:ea:
df:07:3d:68:03:ca:89:be:eb:8f:fa:10:05:cb:04:53:d4:bc:
a2:35:15:88:ff:59:4e:3a:92:8d:47:90:20:12:9d:94:a9:d4:
8f:ac:be:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdR2a1OcCHrxsEl2mNEyzhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNDA1MTQzNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWRmMGM5MGNiNjEzN2NiMWZlMjVhM2MwMjg3OGI2M2Y1ZmE1NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4VUwsZ0zjsCleaExJVgw9N/74bA
Zt6gz4cZFgh/wzakst5koP66Hw2ITbsNDGDL6oiq7QXDM4s8b2ERg7rx3v3wg5nE
I7w+bVNLZli4iT7S0kxBPpw9UBHZPK3PGKlD0zL8G1I/cwZwwt3oNMi4zkHt41Hj
lyutC20uEpJJsN5M81iRclUvSao0GruTqXRXgEhikwGAXeY8KcgPbcbxdy+WTxeD
VvBEjzYn9ynf8pUVwtgEonbyPkouSmCg3q+Is7JvSD4i6D+fCmuYJsaEOMh6g3AK
p/G68Gj3dMMLX4CTq9nHKcbYMlPHwXcLhK+J9AI09fU9oqzCI7PfyetXyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCnfDJDLYTfLH+JaPAKHi2P1+lbbMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvS2Q4TWtNdGhOOHNmNGxvOEFvZUxZX1g2VnRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqI/MA0G
CSqGSIb3DQEBCwUAA4IBAQBi8dMVqK6Uwp2hR+YPb1v65DpIczhw2M0O4XWytxQA
8myNTXr3XHRcwuTn2+8LCNHR43S+wq+cXB8MyQpTSt15AECghm+MmEvc4iyOW6cH
Yx8lSCtbSp/qney2r3X0N3UylgUq22fm5cYTTquY7bvKP7oUPjggK4YlQ33Az8bM
j3n+MVcp28pC34tvwXczSG9X+RvKSxj+8rJ9SwuKMJPehKsbBpf7s6rUj475L1Dq
IhSww66Bd7Q35KacYQ8GuKRS1ST5ILBbzOHf9EeKq82rZ0S7/TEzLOrfBz1oA8qJ
vuuP+hAFywRT1LyiNRWI/1lOOpKNR5AgEp2UqdSPrL47
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org