Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ThbtuWGI56-x-vwh8EciY_VckcU.roa
File: ThbtuWGI56-x-vwh8EciY_VckcU.roa (raw, json)
Hash identifier: d6vsb3yL0BCCenardVtCq+wYdzJaDBeqxkrB1QbQmGw=
Subject key identifier: 4E:16:ED:B9:61:88:E7:AF:B1:FA:FC:21:F0:47:22:63:F5:5C:91:C5
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188D7890F87EF70FF2FC6A68436117D325F
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ThbtuWGI56-x-vwh8EciY_VckcU.roa
Signing time: Tue 20 Jun 2023 06:41:03 +0000
ROA not before: Tue 20 Jun 2023 06:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.1.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.17.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.22.0/23 maxlen: 24
46.162.19.0/24 maxlen: 24
46.162.20.0/24 maxlen: 24
46.162.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 13:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:89:0f:87:ef:70:ff:2f:c6:a6:84:36:11:7d:32:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 20 06:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e16edb96188e7afb1fafc21f0472263f55c91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:ef:08:c5:8d:81:5a:5c:58:b9:dc:4a:38:
15:5f:ba:6b:1a:d2:2c:10:3f:fd:19:0c:d5:b0:c8:
d8:1d:1b:b2:0e:5b:2d:e5:b2:8e:e5:29:ea:44:24:
e4:03:b9:cd:0c:20:92:ad:1a:2a:fb:61:ab:e5:7e:
e1:04:9f:53:04:7e:34:8f:58:5f:57:a5:b4:e7:bc:
d3:79:10:e8:59:63:82:93:c7:53:9f:80:68:cc:fa:
8a:5e:e7:fd:e5:d5:63:7c:35:d6:b0:73:77:7f:00:
a7:f2:d7:33:c2:cb:f5:33:ae:07:fc:0d:92:1c:1e:
4f:f8:4b:4d:8b:24:85:2b:cd:dd:b5:da:40:7a:28:
67:21:3d:81:14:50:a3:c8:40:84:69:1d:3e:fe:45:
da:2e:5c:79:88:15:50:d0:8f:9b:60:2a:57:b9:3e:
f4:b1:9e:e4:bd:44:98:85:2d:40:af:9d:e6:52:c7:
e9:67:71:14:62:89:48:ef:52:bf:2a:57:d5:91:66:
a3:dc:ac:6d:33:1b:dd:60:2e:66:eb:c8:7a:b5:85:
af:18:72:d0:d9:49:0e:35:03:88:ea:16:25:61:13:
46:10:3b:da:a9:6b:83:c3:d9:87:04:67:8d:4c:d3:
78:1d:13:04:b8:82:97:50:70:f7:f6:76:bf:b7:c5:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:16:ED:B9:61:88:E7:AF:B1:FA:FC:21:F0:47:22:63:F5:5C:91:C5
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ThbtuWGI56-x-vwh8EciY_VckcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.1.0/24
46.162.10.0/23
46.162.17.0-46.162.20.255
46.162.22.0/23
46.162.49.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c3:04:57:fa:59:49:c0:12:35:c0:58:a9:5b:c3:36:8f:02:
f1:36:f6:f0:da:9e:22:2d:30:3f:06:c5:14:41:9f:4f:04:87:
3d:ed:13:6e:b5:3c:80:d1:54:b4:28:52:b9:ee:2e:dd:b5:d8:
a0:82:c0:f1:1f:80:8d:39:ff:b7:75:54:a2:b9:13:e8:73:92:
dc:59:42:8e:7a:cd:04:6a:fa:e6:ec:04:41:45:72:07:1b:4c:
c8:27:37:dc:c7:02:81:10:ff:65:00:d7:31:42:8b:fa:bd:54:
d6:a0:a2:a7:87:f9:48:c4:78:a7:6f:e4:84:6f:62:b3:11:71:
7b:7d:74:91:4e:c6:75:55:7d:b1:c3:f4:e7:59:ad:ad:38:ed:
3d:02:31:47:26:09:d4:5e:64:b4:2a:c7:40:c8:ba:56:49:5d:
9f:d8:ea:b8:ec:f4:bb:c9:8d:6b:c8:06:16:b3:fe:1e:49:03:
eb:4b:d3:b4:ac:23:95:e5:e4:d7:09:d0:36:b6:45:39:17:7e:
a7:1d:cc:71:ec:20:f6:0b:b6:c2:b4:bf:c5:4b:dd:c4:8c:55:
27:74:bb:0c:f7:d2:84:f5:61:ea:48:2d:46:f8:22:f3:79:36:
ce:ed:e2:50:c6:8e:47:19:c1:a2:97:d9:aa:97:0a:23:54:19:
c9:41:ae:b4
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYjXiQ+H73D/L8amhDYRfTJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNjIwMDY0MTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTE2ZWRiOTYxODhlN2FmYjFmYWZjMjFmMDQ3MjI2M2Y1NWM5MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKHvCMWNgVpcWLncSjgVX7prGtIs
ED/9GQzVsMjYHRuyDlst5bKO5SnqRCTkA7nNDCCSrRoq+2Gr5X7hBJ9TBH40j1hf
V6W057zTeRDoWWOCk8dTn4BozPqKXuf95dVjfDXWsHN3fwCn8tczwsv1M64H/A2S
HB5P+EtNiySFK83dtdpAeihnIT2BFFCjyECEaR0+/kXaLlx5iBVQ0I+bYCpXuT70
sZ7kvUSYhS1Ar53mUsfpZ3EUYolI71K/KlfVkWaj3KxtMxvdYC5m68h6tYWvGHLQ
2UkONQOI6hYlYRNGEDvaqWuDw9mHBGeNTNN4HRMEuIKXUHD39na/t8UVLwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFE4W7blhiOevsfr8IfBHImP1XJHFMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvVGhidHVXR0k1Ni14LXZ3aDhFY2lZX1Zja2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQALqIBAwQB
LqIKMAwDBAAuohEDBAAuohQDBAEuohYDBAAuojEwDQYJKoZIhvcNAQELBQADggEB
ADLDBFf6WUnAEjXAWKlbwzaPAvE29vDaniItMD8GxRRBn08Ehz3tE261PIDRVLQo
UrnuLt212KCCwPEfgI05/7d1VKK5E+hzktxZQo56zQRq+ubsBEFFcgcbTMgnN9zH
AoEQ/2UA1zFCi/q9VNagoqeH+UjEeKdv5IRvYrMRcXt9dJFOxnVVfbHD9OdZra04
7T0CMUcmCdReZLQqx0DIulZJXZ/Y6rjs9LvJjWvIBhaz/h5JA+tL07SsI5Xl5NcJ
0Da2RTkXfqcdzHHsIPYLtsK0v8VL3cSMVSd0uwz30oT1YepILUb4IvN5Ns7t4lDG
jkcZwaKX2aqXCiNUGclBrrQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org