Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qZNKLV98mG-l9Wa_KGaBuD6S-uU.roa
File: qZNKLV98mG-l9Wa_KGaBuD6S-uU.roa (raw, json)
Hash identifier: jjt1PlQO3Ia1gab8H8WBNS3E7cQDLqUZo974KuVl/Fs=
Subject key identifier: A9:93:4A:2D:5F:7C:98:6F:A5:F5:66:BF:28:66:81:B8:3E:92:FA:E5
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187F00DBDD4C13CA35F840D949A8C0858FF
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qZNKLV98mG-l9Wa_KGaBuD6S-uU.roa
Signing time: Sat 06 May 2023 07:54:05 +0000
ROA not before: Sat 06 May 2023 07:54:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 46.162.7.0/24 maxlen: 24
46.162.27.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 09:54:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f0:0d:bd:d4:c1:3c:a3:5f:84:0d:94:9a:8c:08:58:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 6 07:54:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9934a2d5f7c986fa5f566bf286681b83e92fae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:c3:44:4c:74:39:96:7b:69:87:76:3b:29:
6a:47:5e:bd:75:f4:9d:26:2d:80:f0:61:c3:d5:da:
2d:69:b3:a0:39:07:97:d3:03:c8:2a:c5:4d:05:91:
01:ab:b9:2c:b1:a6:95:69:cb:1f:0c:97:a6:ba:9c:
2e:14:d3:c2:73:6b:26:48:42:b6:2f:fa:bf:eb:70:
4f:49:2b:2c:f6:07:34:0a:ee:19:ba:a9:04:2e:f1:
d5:02:f1:50:64:95:7a:e6:8e:b0:3a:73:37:72:3e:
ee:70:71:a6:e4:0c:e9:9d:19:68:2b:f1:84:38:e0:
eb:a6:bb:b7:4c:1d:31:80:b6:44:db:42:cd:57:dd:
88:e1:fb:a7:7c:f7:82:67:12:ed:f1:cb:e0:e0:ef:
eb:4e:5b:f9:1d:37:93:aa:50:ce:b2:4a:59:df:d4:
49:a3:0c:40:7e:47:bf:19:ce:c8:8f:98:68:db:76:
31:97:36:c0:14:56:95:10:d7:9c:ca:68:b3:a4:49:
28:ac:69:4d:73:84:70:82:32:3a:8d:44:e4:64:60:
5e:de:a2:ea:9c:eb:f2:89:4e:47:38:71:10:e2:31:
5c:79:5b:2a:d7:52:f8:74:01:2d:23:61:76:a7:18:
e2:9b:0f:3d:6f:be:d3:b4:ef:33:e4:f9:c0:01:24:
6a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:4A:2D:5F:7C:98:6F:A5:F5:66:BF:28:66:81:B8:3E:92:FA:E5
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/qZNKLV98mG-l9Wa_KGaBuD6S-uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.7.0/24
46.162.27.0/24
46.162.54.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d9:be:26:aa:a5:87:56:51:cb:85:f0:e0:fc:0a:65:f8:36:
1e:0b:85:b2:92:9d:04:86:87:28:d7:24:e4:8d:82:db:72:58:
14:3c:b2:e2:ae:54:19:ef:74:1b:0e:f7:a4:f6:0d:97:a7:d6:
56:a0:c7:a8:c2:20:0e:6e:37:2e:3d:b8:c1:d0:77:97:94:8f:
5c:46:ba:83:76:8f:5a:9f:e8:c4:aa:13:cf:6b:6d:a9:96:5f:
e4:16:cc:48:78:ad:f3:d6:03:0a:a0:45:00:b6:47:ed:fe:77:
83:69:2a:61:ed:4a:40:12:90:57:54:c0:77:48:57:71:ad:f8:
24:13:52:e1:77:48:6b:37:34:d4:9f:a3:ef:e5:39:92:69:29:
dd:52:27:03:7d:a8:d2:b3:9b:0f:32:b5:c0:d0:81:cc:1d:e0:
47:52:e1:1e:98:4a:6d:62:8e:2f:0e:4d:ae:9f:86:c1:81:af:
08:c8:03:0e:d1:0f:c3:68:95:c2:01:ad:48:39:a9:bd:07:ac:
c3:43:8f:f6:6a:8a:0c:2f:1f:fa:50:ad:c0:ca:91:99:45:a9:
48:bb:5b:67:6e:cd:e4:ef:5c:f1:6e:04:3c:d3:4a:b4:1c:04:
1f:38:b1:3c:39:64:58:b5:e1:d9:3c:d2:f3:09:bf:e8:ac:a6:
b9:98:9a:89
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYfwDb3UwTyjX4QNlJqMCFj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTA2MDc1NDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTkzNGEyZDVmN2M5ODZmYTVmNTY2YmYyODY2ODFiODNlOTJmYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvzDREx0OZZ7aYd2OylqR169dfSd
Ji2A8GHD1dotabOgOQeX0wPIKsVNBZEBq7kssaaVacsfDJemupwuFNPCc2smSEK2
L/q/63BPSSss9gc0Cu4ZuqkELvHVAvFQZJV65o6wOnM3cj7ucHGm5AzpnRloK/GE
OODrpru3TB0xgLZE20LNV92I4funfPeCZxLt8cvg4O/rTlv5HTeTqlDOskpZ39RJ
owxAfke/Gc7Ij5ho23YxlzbAFFaVENecymizpEkorGlNc4RwgjI6jUTkZGBe3qLq
nOvyiU5HOHEQ4jFceVsq11L4dAEtI2F2pxjimw89b77TtO8z5PnAASRqfwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKmTSi1ffJhvpfVmvyhmgbg+kvrlMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvcVpOS0xWOThtRy1sOVdhX0tHYUJ1RDZTLXVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALqIHAwQA
LqIbAwQALqI2AwQALqI9MA0GCSqGSIb3DQEBCwUAA4IBAQCK2b4mqqWHVlHLhfDg
/Apl+DYeC4Wykp0Ehoco1yTkjYLbclgUPLLirlQZ73QbDvek9g2Xp9ZWoMeowiAO
bjcuPbjB0HeXlI9cRrqDdo9an+jEqhPPa22pll/kFsxIeK3z1gMKoEUAtkft/neD
aSph7UpAEpBXVMB3SFdxrfgkE1Lhd0hrNzTUn6Pv5TmSaSndUicDfajSs5sPMrXA
0IHMHeBHUuEemEptYo4vDk2un4bBga8IyAMO0Q/DaJXCAa1IOam9B6zDQ4/2aooM
Lx/6UK3AypGZRalIu1tnbs3k71zxbgQ800q0HAQfOLE8OWRYteHZPNLzCb/orKa5
mJqJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org