Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa
File: ea3Zi3_yEoPaQaS_gzrimH4nmak.roa (raw, json)
Hash identifier: MOQcNqkIi3teLwF9zIteBf+XJ7zq+F9MpYpmlbLfovE=
Subject key identifier: 79:AD:D9:8B:7F:F2:12:83:DA:41:A4:BF:83:3A:E2:98:7E:27:99:A9
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01893566B412F26D98EE2E547E63F58B30F5
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa
Signing time: Sat 08 Jul 2023 12:07:50 +0000
ROA not before: Sat 08 Jul 2023 12:07:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 46.162.8.0/24 maxlen: 24
46.162.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:66:b4:12:f2:6d:98:ee:2e:54:7e:63:f5:8b:30:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 8 12:07:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79add98b7ff21283da41a4bf833ae2987e2799a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:b0:a8:05:eb:51:b6:87:e2:d8:37:9e:e1:
18:4c:46:64:da:04:96:d7:94:cd:98:e5:19:ec:48:
40:c8:34:b2:bf:f0:20:af:7b:6f:6b:c1:82:6d:6a:
c4:d4:d3:19:46:01:4d:02:56:cf:ac:97:82:a4:ac:
10:f1:be:d4:6c:9f:fc:7e:2b:ae:28:8f:18:fb:20:
85:73:ab:02:36:f2:ce:3f:2c:fe:b7:87:c4:5d:22:
c5:13:52:24:36:c2:0d:fe:ff:2c:79:d7:dd:c8:1f:
82:44:d5:20:1f:22:15:e5:71:ef:8c:77:5c:06:13:
39:b7:fb:59:c6:20:22:6c:8f:94:44:0f:1d:ad:af:
aa:e7:86:7c:ad:b5:c4:ac:33:49:42:57:ae:af:a4:
1d:b2:62:49:4e:ab:46:10:36:7c:c9:5a:33:35:7e:
d4:65:db:e6:62:37:9d:e6:9b:b6:43:5d:8d:85:ee:
d6:7b:63:b3:54:a5:e5:c1:05:53:18:f3:52:28:e9:
12:8c:c1:3f:8e:f8:b5:17:46:1a:09:5d:9e:69:58:
9b:05:bb:d0:f6:4e:e9:47:d5:b2:80:f8:3b:64:a3:
26:8b:f4:b5:0c:1d:08:1f:d0:bc:d5:97:e2:f5:56:
cd:0f:63:42:1b:2f:8e:3c:70:b9:07:0e:4a:0d:56:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:D9:8B:7F:F2:12:83:DA:41:A4:BF:83:3A:E2:98:7E:27:99:A9
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ea3Zi3_yEoPaQaS_gzrimH4nmak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/24
46.162.26.0/24
Signature Algorithm: sha256WithRSAEncryption
04:83:69:f7:b8:35:93:8a:e2:d7:be:b7:21:40:f1:88:09:55:
9a:74:a1:b6:1d:cd:43:ea:5a:c5:6e:24:bf:b2:7c:c9:f7:62:
a0:00:1c:67:3b:05:7a:f4:fc:68:b5:ed:fe:4c:1f:e8:37:d3:
88:f5:f5:b9:77:46:d9:e5:cf:63:a7:9c:f4:68:77:b0:8e:0c:
fb:f1:25:47:36:65:bf:7f:59:50:f7:4c:69:77:fc:63:71:5c:
2c:90:e1:bc:7a:0c:25:84:ea:cd:36:c2:ce:02:6d:44:f2:df:
a4:77:3c:91:f6:b4:47:a6:04:17:70:39:fc:26:dd:dd:45:03:
b4:f5:41:25:fd:44:95:98:1b:40:a8:04:3c:6e:21:42:4d:3d:
e4:79:7f:24:a7:51:2d:8c:8b:35:4d:65:f2:78:df:34:c4:cc:
48:70:af:f4:40:e2:69:a5:da:bb:53:c4:8d:62:ac:a7:73:38:
62:f6:f6:c0:f5:d3:47:0e:3b:40:a1:f6:59:49:6d:7c:8e:c6:
3e:a5:c6:5a:d8:4a:9d:2d:94:dd:a3:11:b2:eb:f3:ec:a7:af:
01:89:b7:21:ca:77:15:06:49:a9:1b:a6:2b:22:64:1b:e5:94:
7b:3f:30:55:9f:b4:12:3a:9a:3d:00:fe:d9:e0:c3:95:9a:9e:
64:2a:33:59
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYk1ZrQS8m2Y7i5UfmP1izD1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNzA4MTIwNzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWFkZDk4YjdmZjIxMjgzZGE0MWE0YmY4MzNhZTI5ODdlMjc5OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFewqAXrUbaH4tg3nuEYTEZk2gSW
15TNmOUZ7EhAyDSyv/Agr3tva8GCbWrE1NMZRgFNAlbPrJeCpKwQ8b7UbJ/8fiuu
KI8Y+yCFc6sCNvLOPyz+t4fEXSLFE1IkNsIN/v8sedfdyB+CRNUgHyIV5XHvjHdc
BhM5t/tZxiAibI+URA8dra+q54Z8rbXErDNJQleur6QdsmJJTqtGEDZ8yVozNX7U
ZdvmYjed5pu2Q12Nhe7We2OzVKXlwQVTGPNSKOkSjME/jvi1F0YaCV2eaVibBbvQ
9k7pR9WygPg7ZKMmi/S1DB0IH9C81Zfi9VbND2NCGy+OPHC5Bw5KDVaOIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHmt2Yt/8hKD2kGkv4M64ph+J5mpMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvZWEzWmkzX3lFb1BhUWFTX2d6cmltSDRubWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqIIAwQA
LqIaMA0GCSqGSIb3DQEBCwUAA4IBAQAEg2n3uDWTiuLXvrchQPGICVWadKG2Hc1D
6lrFbiS/snzJ92KgABxnOwV69Pxote3+TB/oN9OI9fW5d0bZ5c9jp5z0aHewjgz7
8SVHNmW/f1lQ90xpd/xjcVwskOG8egwlhOrNNsLOAm1E8t+kdzyR9rRHpgQXcDn8
Jt3dRQO09UEl/USVmBtAqAQ8biFCTT3keX8kp1EtjIs1TWXyeN80xMxIcK/0QOJp
pdq7U8SNYqynczhi9vbA9dNHDjtAofZZSW18jsY+pcZa2EqdLZTdoxGy6/Psp68B
ibchyncVBkmpG6YrImQb5ZR7PzBVn7QSOpo9AP7Z4MOVmp5kKjNZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org