Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MFgydWmVq66L3fvafNXxBbNZJNA.roa
File: MFgydWmVq66L3fvafNXxBbNZJNA.roa (raw, json)
Hash identifier: g16dJnn5dNtJurMXVyJJVikttA/enZNZ/ulOfP+C/gI=
Subject key identifier: 30:58:32:75:69:95:AB:AE:8B:DD:FB:DA:7C:D5:F1:05:B3:59:24:D0
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01862FC0CADA48C8C794B176DDDF8DBC9D35
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MFgydWmVq66L3fvafNXxBbNZJNA.roa
Signing time: Wed 08 Feb 2023 06:40:09 +0000
ROA not before: Wed 08 Feb 2023 06:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jul 2023 07:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2f:c0:ca:da:48:c8:c7:94:b1:76:dd:df:8d:bc:9d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 8 06:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=305832756995abae8bddfbda7cd5f105b35924d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2d:fc:60:a4:cd:60:5f:3f:32:30:83:05:6b:
38:fd:70:09:3b:5b:0c:2f:a5:d9:ae:98:6c:aa:cd:
a0:0d:f2:e1:19:7b:33:61:5d:e8:1f:5f:b5:f6:40:
b5:b1:f6:ee:20:4f:c8:3b:30:d1:5d:d8:72:fe:5f:
65:01:b8:26:d7:39:c0:e7:98:9c:d0:fa:d5:33:bc:
90:3f:db:fe:6b:ba:bb:05:eb:c1:ea:a7:08:e9:89:
74:4b:f0:9a:58:ff:26:b8:df:77:9b:02:2e:02:91:
e8:3b:41:9b:89:f4:7f:95:d6:e2:17:4b:35:89:46:
26:83:db:9f:8d:c8:0d:4e:2d:3d:d3:6f:e6:1f:a8:
63:be:1c:25:6f:f1:aa:70:89:49:bf:45:52:68:64:
c7:cc:cd:8d:a5:3a:98:e2:54:d4:79:4a:72:44:b3:
5e:a6:a8:89:23:d6:b0:aa:23:1e:a4:17:f7:db:bd:
53:35:b7:8e:24:87:61:6d:db:27:43:9d:7a:5e:73:
27:a1:6f:96:e9:15:6d:2c:5a:82:20:59:26:56:71:
1f:50:5f:e5:fb:f1:0b:54:48:55:e8:22:48:13:9a:
03:9c:82:48:41:d6:f2:63:53:be:7c:8b:dd:cf:0b:
cb:42:ec:ba:54:f5:6f:61:b4:ab:17:51:e5:af:5c:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:58:32:75:69:95:AB:AE:8B:DD:FB:DA:7C:D5:F1:05:B3:59:24:D0
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/MFgydWmVq66L3fvafNXxBbNZJNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
45:12:84:96:f7:66:e5:75:2c:1c:1f:02:fd:31:67:e6:0a:44:
16:76:10:59:d5:49:98:af:35:3e:b7:94:c4:1d:32:5f:da:03:
3e:86:68:69:40:03:6a:71:b3:70:d8:17:8b:55:29:1a:7f:5a:
9d:17:d1:19:48:64:d1:56:0f:4c:ed:0a:ad:3d:40:d6:3d:ee:
72:e2:ba:3d:fc:d1:3c:66:94:22:7f:cd:36:bf:d1:9f:99:ca:
a8:7d:c5:ee:8f:46:ed:89:30:18:ae:bc:9d:6b:2a:7c:8f:9f:
19:6b:67:de:c3:61:8b:a8:0e:e7:d7:f2:d3:43:cf:9c:7d:be:
f4:6b:c3:e9:28:3e:21:cb:9a:6a:d4:a2:fd:96:be:8e:9f:44:
4e:97:8b:d1:6f:f6:b8:86:97:66:49:8b:d9:a9:2f:6e:53:bc:
5e:94:e3:24:ed:13:9e:9f:21:6b:7e:90:74:88:6a:e2:3b:6b:
52:ca:bb:80:a0:02:d1:00:66:f5:4d:3e:4d:45:16:9c:f0:1b:
61:68:e8:1f:bf:84:2e:44:13:33:11:a1:f7:2d:2b:d1:27:9b:
6d:20:a5:70:aa:1f:a6:c7:51:73:5e:b0:6a:cb:ff:f8:8a:1d:
1b:11:8a:bc:4b:a8:28:d1:10:50:5a:ef:99:65:c5:57:2c:42:
34:1f:09:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYvwMraSMjHlLF23d+NvJ01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMjA4MDY0MDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDU4MzI3NTY5OTVhYmFlOGJkZGZiZGE3Y2Q1ZjEwNWIzNTkyNGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC38YKTNYF8/MjCDBWs4/XAJO1sM
L6XZrphsqs2gDfLhGXszYV3oH1+19kC1sfbuIE/IOzDRXdhy/l9lAbgm1znA55ic
0PrVM7yQP9v+a7q7BevB6qcI6Yl0S/CaWP8muN93mwIuApHoO0GbifR/ldbiF0s1
iUYmg9ufjcgNTi0902/mH6hjvhwlb/GqcIlJv0VSaGTHzM2NpTqY4lTUeUpyRLNe
pqiJI9awqiMepBf3271TNbeOJIdhbdsnQ516XnMnoW+W6RVtLFqCIFkmVnEfUF/l
+/ELVEhV6CJIE5oDnIJIQdbyY1O+fIvdzwvLQuy6VPVvYbSrF1Hlr1wpQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBYMnVplauui9372nzV8QWzWSTQMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvTUZneWRXbVZxNjZMM2Z2YWZOWHhCYk5aSk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLqI0MA0G
CSqGSIb3DQEBCwUAA4IBAQBFEoSW92bldSwcHwL9MWfmCkQWdhBZ1UmYrzU+t5TE
HTJf2gM+hmhpQANqcbNw2BeLVSkaf1qdF9EZSGTRVg9M7QqtPUDWPe5y4ro9/NE8
ZpQif802v9GfmcqofcXuj0btiTAYrrydayp8j58Za2few2GLqA7n1/LTQ8+cfb70
a8PpKD4hy5pq1KL9lr6On0ROl4vRb/a4hpdmSYvZqS9uU7xelOMk7ROenyFrfpB0
iGriO2tSyruAoALRAGb1TT5NRRac8BthaOgfv4QuRBMzEaH3LSvRJ5ttIKVwqh+m
x1FzXrBqy//4ih0bEYq8S6go0RBQWu+ZZcVXLEI0Hwkm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org