Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/R-ijQVKPYg3FPJCjtiPGOWS21Cc.roa
File: R-ijQVKPYg3FPJCjtiPGOWS21Cc.roa (raw, json)
Hash identifier: IXv8CWuSuuPx5bsQ4Ero5Wijcrr5f32s/B2pLH24shE=
Subject key identifier: 47:E8:A3:41:52:8F:62:0D:C5:3C:90:A3:B6:23:C6:39:64:B6:D4:27
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01879D4A4057BC0ABF981A7B742546476AFF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/R-ijQVKPYg3FPJCjtiPGOWS21Cc.roa
Signing time: Thu 20 Apr 2023 06:11:41 +0000
ROA not before: Thu 20 Apr 2023 06:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 46.162.24.0/24 maxlen: 24
46.162.29.0/24 maxlen: 24
46.162.25.0/24 maxlen: 24
46.162.31.0/24 maxlen: 24
46.162.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 11:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:4a:40:57:bc:0a:bf:98:1a:7b:74:25:46:47:6a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 06:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e8a341528f620dc53c90a3b623c63964b6d427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:64:ec:cb:7b:a2:ac:e8:f0:0a:59:c1:4d:
53:be:0a:ea:86:84:fe:2b:2c:6a:63:ba:df:5a:73:
6b:68:80:af:17:f3:ac:18:82:f7:a8:ab:b2:69:6a:
db:61:50:d2:f0:c1:5c:17:62:80:5b:b3:f7:7e:a1:
06:3d:df:ba:2a:d9:2c:11:2f:62:bf:66:80:a3:fb:
24:5e:9c:96:5b:b5:f8:84:21:f9:6f:ca:a5:3c:a1:
a5:36:d4:55:6d:7a:9f:c3:fa:2c:9f:f9:3e:d4:34:
00:00:e9:3d:09:47:9e:2b:68:e4:4e:d7:ee:42:ea:
2c:1f:c4:6e:78:c0:08:7c:db:1a:86:6d:1c:25:d2:
62:01:1d:1f:8b:80:54:86:b6:b3:17:06:f6:5d:b9:
70:a1:38:d1:6c:f2:bf:9c:cd:6b:6a:e7:e9:18:8d:
fe:3a:31:04:d3:2b:15:05:53:1a:e3:db:fe:2f:46:
70:a4:a4:b7:45:0b:87:7b:bd:3c:98:87:84:2e:ed:
04:10:54:e1:98:4e:81:4f:92:4e:ff:3d:52:85:92:
19:79:cb:57:c7:d0:e6:21:9f:76:64:da:61:fd:31:
83:3a:82:cb:ed:3a:ae:0b:87:0c:bc:62:2c:04:04:
87:d2:ea:0d:5c:b8:4b:17:a1:8f:ac:6e:64:75:7b:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E8:A3:41:52:8F:62:0D:C5:3C:90:A3:B6:23:C6:39:64:B6:D4:27
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/R-ijQVKPYg3FPJCjtiPGOWS21Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.24.0/23
46.162.29.0/24
46.162.31.0/24
46.162.58.0/24
Signature Algorithm: sha256WithRSAEncryption
40:41:52:28:9c:e2:9e:8a:d1:a9:e7:1a:54:7e:00:56:13:2f:
0b:4d:10:81:0f:6c:14:14:14:76:be:68:e8:6c:e2:b5:69:cf:
8b:c5:66:d7:22:8e:4d:61:22:81:05:0a:98:ca:11:ef:32:7b:
7c:6e:8e:6a:cf:2b:b1:9d:e7:b5:f8:ab:4a:8a:b1:be:04:e1:
26:88:da:1f:74:e7:a2:95:91:61:89:53:3f:ba:4c:d2:90:cc:
45:c4:31:b8:32:6a:3a:6a:d0:12:5f:3a:4c:a1:34:45:7a:e2:
8d:b5:9e:88:73:9c:e8:f0:94:69:0a:c3:25:55:c7:6c:13:5c:
06:01:76:4b:49:e8:89:60:01:cc:7c:39:e4:25:cb:48:ac:de:
2f:dd:65:82:72:0d:1f:9b:06:86:7e:12:9d:6b:77:53:80:b3:
99:f5:39:ae:92:3c:82:9b:dd:48:c4:b2:0d:45:46:52:0a:42:
e9:7c:fd:47:b5:d3:e0:7b:a1:5f:cc:fe:a9:fd:ef:bb:ea:8b:
30:6d:92:be:0d:27:39:54:95:72:0a:11:f9:eb:72:7e:59:d3:
fd:29:80:33:f8:a4:60:12:19:45:0c:63:94:ce:1f:d3:1f:7f:
04:93:b2:09:05:6d:89:4c:44:ef:34:13:c6:6a:3e:70:17:92:
85:c8:8f:2a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYedSkBXvAq/mBp7dCVGR2r/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNDIwMDYxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2U4YTM0MTUyOGY2MjBkYzUzYzkwYTNiNjIzYzYzOTY0YjZkNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNk7Mt7oqzo8ApZwU1TvgrqhoT+
KyxqY7rfWnNraICvF/OsGIL3qKuyaWrbYVDS8MFcF2KAW7P3fqEGPd+6KtksES9i
v2aAo/skXpyWW7X4hCH5b8qlPKGlNtRVbXqfw/osn/k+1DQAAOk9CUeeK2jkTtfu
QuosH8RueMAIfNsahm0cJdJiAR0fi4BUhrazFwb2XblwoTjRbPK/nM1raufpGI3+
OjEE0ysVBVMa49v+L0ZwpKS3RQuHe708mIeELu0EEFThmE6BT5JO/z1ShZIZectX
x9DmIZ92ZNph/TGDOoLL7TquC4cMvGIsBASH0uoNXLhLF6GPrG5kdXu4aQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEfoo0FSj2INxTyQo7YjxjlkttQnMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvUi1palFWS1BZZzNGUEpDanRpUEdPV1MyMUNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLqIYAwQA
LqIdAwQALqIfAwQALqI6MA0GCSqGSIb3DQEBCwUAA4IBAQBAQVIonOKeitGp5xpU
fgBWEy8LTRCBD2wUFBR2vmjobOK1ac+LxWbXIo5NYSKBBQqYyhHvMnt8bo5qzyux
nee1+KtKirG+BOEmiNofdOeilZFhiVM/ukzSkMxFxDG4Mmo6atASXzpMoTRFeuKN
tZ6Ic5zo8JRpCsMlVcdsE1wGAXZLSeiJYAHMfDnkJctIrN4v3WWCcg0fmwaGfhKd
a3dTgLOZ9TmukjyCm91IxLINRUZSCkLpfP1HtdPge6FfzP6p/e+76oswbZK+DSc5
VJVyChH563J+WdP9KYAz+KRgEhlFDGOUzh/TH38Ek7IJBW2JTETvNBPGaj5wF5KF
yI8q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org