Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d7lhu8aH4_JOoBRk1v3XK7tJjZc.roa
File: d7lhu8aH4_JOoBRk1v3XK7tJjZc.roa (raw, json)
Hash identifier: LmQsbMXyH2NwaW6NLr/btsVvloum9b9bMzE8y2Hc640=
Subject key identifier: 77:B9:61:BB:C6:87:E3:F2:4E:A0:14:64:D6:FD:D7:2B:BB:49:8D:97
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188DE2FD74B793EBAA282E3E6C60B59F8B7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d7lhu8aH4_JOoBRk1v3XK7tJjZc.roa
Signing time: Wed 21 Jun 2023 13:40:57 +0000
ROA not before: Wed 21 Jun 2023 13:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.17.0/24 maxlen: 24
46.162.18.0/24 maxlen: 24
46.162.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:2f:d7:4b:79:3e:ba:a2:82:e3:e6:c6:0b:59:f8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 21 13:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77b961bbc687e3f24ea01464d6fdd72bbb498d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:92:2f:22:e4:bc:5d:4e:a4:5a:cd:9c:6e:ce:
e0:b1:b5:98:2a:43:15:af:18:c7:01:dd:0c:36:b3:
35:5b:62:7c:98:4e:1c:54:e9:05:c9:5d:43:f7:f2:
26:8c:b7:5e:d1:3f:f1:48:a8:6c:f9:3a:97:ef:a6:
1b:e6:a0:40:5f:81:2b:26:94:cd:4b:2b:9e:22:c0:
34:cd:48:78:53:56:58:c7:5b:83:59:51:27:8c:06:
75:4e:a1:98:4d:d5:39:aa:b7:17:9a:ad:a6:a8:d2:
b4:d0:21:8c:ab:1a:52:12:8f:44:93:29:2b:83:2f:
b6:21:6a:b4:29:23:cf:ef:ee:a6:42:1c:b8:0c:38:
c8:68:74:79:dc:eb:d5:b8:b5:2c:5b:d6:c7:29:39:
38:40:bb:ce:0f:36:f2:53:ad:d9:e3:4c:15:e0:98:
7b:cf:ce:60:ff:91:20:0c:e5:fa:40:c7:26:bb:2b:
8c:db:69:71:93:25:73:0f:98:ad:04:08:d9:e0:64:
b8:6d:a8:dc:ba:ff:0c:3c:54:45:59:58:ab:b7:8b:
7b:c2:75:40:4c:35:e5:fc:86:75:82:50:2b:82:26:
db:37:0a:05:33:fa:40:fa:cd:10:6b:c0:e7:0c:48:
9f:be:86:aa:4c:de:96:61:94:7e:f5:ac:73:89:87:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:61:BB:C6:87:E3:F2:4E:A0:14:64:D6:FD:D7:2B:BB:49:8D:97
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/d7lhu8aH4_JOoBRk1v3XK7tJjZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.17.0-46.162.19.255
Signature Algorithm: sha256WithRSAEncryption
52:0e:73:9c:b1:46:5f:22:35:03:47:23:0b:c7:53:f9:78:64:
f9:15:05:94:f2:5f:3c:f1:b3:bb:7e:56:3b:b5:86:97:58:b7:
b5:b3:9f:0c:8e:01:c3:91:b2:bd:45:6a:4d:b8:e0:9c:86:3e:
e5:45:73:d6:2f:e1:df:c0:fa:d2:df:3c:58:e6:8d:5a:da:d6:
af:0a:fe:75:10:21:03:16:49:8d:72:fa:fb:91:72:17:1c:02:
0a:68:31:8e:13:7d:b1:91:ba:5b:f2:53:3a:ad:94:9c:8e:13:
a4:ae:5c:0a:f6:9f:0e:a8:a3:18:dc:22:8d:bf:9d:ff:11:2c:
54:6b:e5:a4:40:a4:0b:c2:e9:50:1d:a4:df:00:75:63:e0:4c:
bf:d7:59:63:f1:99:36:87:da:d6:ec:b8:0a:a0:e1:65:66:40:
6a:f8:88:c4:9b:dc:79:1b:9e:de:7b:bc:09:dd:93:43:07:ff:
8b:71:22:c9:49:77:58:cb:40:04:d2:f8:5d:62:c2:c1:3f:6c:
95:3d:6a:8c:1e:22:d1:dd:0f:6f:4f:17:82:80:7f:ab:bb:64:
a9:85:31:8a:a9:79:67:20:07:1a:cf:c9:7c:51:1c:27:8e:1b:
b1:9f:32:bb:37:fd:2b:1b:75:54:aa:60:db:26:d4:76:9e:5e:
ff:f2:57:be
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYjeL9dLeT66ooLj5sYLWfi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNjIxMTM0MDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2I5NjFiYmM2ODdlM2YyNGVhMDE0NjRkNmZkZDcyYmJiNDk4ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZIvIuS8XU6kWs2cbs7gsbWYKkMV
rxjHAd0MNrM1W2J8mE4cVOkFyV1D9/ImjLde0T/xSKhs+TqX76Yb5qBAX4ErJpTN
SyueIsA0zUh4U1ZYx1uDWVEnjAZ1TqGYTdU5qrcXmq2mqNK00CGMqxpSEo9Ekykr
gy+2IWq0KSPP7+6mQhy4DDjIaHR53OvVuLUsW9bHKTk4QLvODzbyU63Z40wV4Jh7
z85g/5EgDOX6QMcmuyuM22lxkyVzD5itBAjZ4GS4bajcuv8MPFRFWVirt4t7wnVA
TDXl/IZ1glArgibbNwoFM/pA+s0Qa8DnDEifvoaqTN6WYZR+9axziYfrgwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFHe5YbvGh+PyTqAUZNb91yu7SY2XMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvZDdsaHU4YUg0X0pPb0JSazF2M1hLN3RKalpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLqIKMAwD
BAAuohEDBAIuohAwDQYJKoZIhvcNAQELBQADggEBAFIOc5yxRl8iNQNHIwvHU/l4
ZPkVBZTyXzzxs7t+Vju1hpdYt7WznwyOAcORsr1Fak244JyGPuVFc9Yv4d/A+tLf
PFjmjVra1q8K/nUQIQMWSY1y+vuRchccAgpoMY4TfbGRulvyUzqtlJyOE6SuXAr2
nw6ooxjcIo2/nf8RLFRr5aRApAvC6VAdpN8AdWPgTL/XWWPxmTaH2tbsuAqg4WVm
QGr4iMSb3Hkbnt57vAndk0MH/4txIslJd1jLQATS+F1iwsE/bJU9aoweItHdD29P
F4KAf6u7ZKmFMYqpeWcgBxrPyXxRHCeOG7GfMrs3/SsbdVSqYNsm1HaeXv/yV74=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org