Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nwld4lJsAM4TOr2Wz93kuvGpOzM.roa
File: nwld4lJsAM4TOr2Wz93kuvGpOzM.roa (raw, json)
Hash identifier: PqGfZ4WthbKuSgqs/N5nXEcMO1B9X4qZdEZELx4lylQ=
Subject key identifier: 9F:09:5D:E2:52:6C:00:CE:13:3A:BD:96:CF:DD:E4:BA:F1:A9:3B:33
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01879D51930F024A589E37D468CB5C3FB8DE
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nwld4lJsAM4TOr2Wz93kuvGpOzM.roa
Signing time: Thu 20 Apr 2023 06:19:41 +0000
ROA not before: Thu 20 Apr 2023 06:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 46.162.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:51:93:0f:02:4a:58:9e:37:d4:68:cb:5c:3f:b8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 06:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f095de2526c00ce133abd96cfdde4baf1a93b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:33:8f:97:d0:28:17:72:cf:69:b4:0e:ac:01:
29:de:88:7e:26:8a:e1:31:ce:6b:15:57:e8:33:c5:
88:20:6e:67:af:7e:c8:bf:d7:93:5c:84:41:8a:cf:
f4:dd:04:5c:43:88:c6:d8:09:68:66:f2:8b:77:bd:
6a:e8:13:82:ec:d8:fd:5d:9b:5d:49:cc:24:91:43:
2f:79:2e:d8:5b:3f:41:48:dc:fe:ec:e4:f1:32:8c:
e9:90:85:4d:2f:7c:34:6c:6b:4a:b0:54:ea:89:2e:
3d:8e:52:2d:75:fa:5f:81:83:6a:5c:d3:0d:cb:e1:
ab:c5:30:85:3d:b1:f8:7e:a1:34:8a:c1:34:16:4e:
53:bb:46:27:9d:0c:a5:6b:ec:d7:76:d7:02:99:09:
d9:49:b3:33:2c:24:91:2d:99:d2:4b:0f:64:85:91:
f1:a8:0f:f5:02:4a:bc:01:07:e7:59:f3:bd:e3:97:
e3:c8:69:4c:f2:db:51:2c:fa:65:a8:0d:db:cd:7b:
fe:9b:31:68:df:db:fd:63:e5:b9:7a:59:10:ec:53:
c6:a7:c8:29:7e:37:38:40:91:aa:45:09:d1:7a:28:
34:43:55:03:03:04:1f:e7:2e:bb:ff:e1:3b:04:db:
20:ee:c5:b5:bb:b5:a1:07:3a:9e:38:96:d4:88:19:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:09:5D:E2:52:6C:00:CE:13:3A:BD:96:CF:DD:E4:BA:F1:A9:3B:33
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/nwld4lJsAM4TOr2Wz93kuvGpOzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b2:ea:07:f7:4a:cf:8f:2d:0a:d9:d9:d4:f5:08:41:16:5f:
c1:74:3e:1a:5a:95:51:9c:1d:05:c8:7f:5c:db:77:1d:aa:92:
a3:01:6c:5c:47:a9:43:d2:13:41:82:f9:5f:9d:90:a5:b7:43:
3b:36:a5:17:48:5b:56:4c:b0:51:e4:27:ac:c7:b6:03:86:1f:
94:cd:ed:c1:73:b4:c9:ad:e1:5d:c1:c6:fa:bb:fd:47:5c:62:
84:ce:16:53:00:3e:b5:c1:b5:03:b8:dc:9c:06:98:a9:90:ff:
32:08:ec:fc:30:94:cb:9c:ad:07:8f:d4:94:81:36:29:4c:c0:
9b:de:c9:17:91:54:36:f8:58:0f:2b:55:45:ed:05:da:1d:01:
0c:03:cf:f1:bc:91:20:ed:b7:75:4a:f4:53:49:6d:e8:fb:19:
8a:97:0c:a2:05:3d:37:c9:88:4a:b6:45:67:a1:95:cb:65:ec:
20:6b:af:25:3f:9b:c8:e6:8c:82:5d:c0:90:0f:f6:f9:c9:2d:
7e:70:c9:59:b6:f7:30:33:11:6d:e4:49:d7:a3:1d:66:9f:51:
62:2f:32:7a:f4:52:b9:85:0f:8a:4e:e0:fe:5d:2e:67:62:a4:
7e:28:42:9d:6e:28:96:6c:b7:5e:a9:75:25:f1:40:fd:44:55:
29:7d:9d:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYedUZMPAkpYnjfUaMtcP7jeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNDIwMDYxOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjA5NWRlMjUyNmMwMGNlMTMzYWJkOTZjZmRkZTRiYWYxYTkzYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOPl9AoF3LPabQOrAEp3oh+Jorh
Mc5rFVfoM8WIIG5nr37Iv9eTXIRBis/03QRcQ4jG2AloZvKLd71q6BOC7Nj9XZtd
ScwkkUMveS7YWz9BSNz+7OTxMozpkIVNL3w0bGtKsFTqiS49jlItdfpfgYNqXNMN
y+GrxTCFPbH4fqE0isE0Fk5Tu0YnnQyla+zXdtcCmQnZSbMzLCSRLZnSSw9khZHx
qA/1Akq8AQfnWfO945fjyGlM8ttRLPplqA3bzXv+mzFo39v9Y+W5elkQ7FPGp8gp
fjc4QJGqRQnReig0Q1UDAwQf5y67/+E7BNsg7sW1u7WhBzqeOJbUiBnF4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8JXeJSbADOEzq9ls/d5LrxqTszMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvbndsZDRsSnNBTTRUT3IyV3o5M2t1dkdwT3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqIRMA0G
CSqGSIb3DQEBCwUAA4IBAQBRsuoH90rPjy0K2dnU9QhBFl/BdD4aWpVRnB0FyH9c
23cdqpKjAWxcR6lD0hNBgvlfnZClt0M7NqUXSFtWTLBR5Cesx7YDhh+Uze3Bc7TJ
reFdwcb6u/1HXGKEzhZTAD61wbUDuNycBpipkP8yCOz8MJTLnK0Hj9SUgTYpTMCb
3skXkVQ2+FgPK1VF7QXaHQEMA8/xvJEg7bd1SvRTSW3o+xmKlwyiBT03yYhKtkVn
oZXLZewga68lP5vI5oyCXcCQD/b5yS1+cMlZtvcwMxFt5EnXox1mn1FiLzJ69FK5
hQ+KTuD+XS5nYqR+KEKdbiiWbLdeqXUl8UD9RFUpfZ0i
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org