Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/scbpxbj1Q2KV_D8IRqRp4Pm6Aho.roa
File: scbpxbj1Q2KV_D8IRqRp4Pm6Aho.roa (raw, json)
Hash identifier: UfsbFag3acPYwBN1iZtZIJx6AKs6qJHpUWQwaxNBK2Q=
Subject key identifier: B1:C6:E9:C5:B8:F5:43:62:95:FC:3F:08:46:A4:69:E0:F9:BA:02:1A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018931DB69546CA1BF38B9BDCD9B16A74445
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/scbpxbj1Q2KV_D8IRqRp4Pm6Aho.roa
Signing time: Fri 07 Jul 2023 19:36:50 +0000
ROA not before: Fri 07 Jul 2023 19:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/24 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jul 2023 10:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:db:69:54:6c:a1:bf:38:b9:bd:cd:9b:16:a7:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 7 19:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1c6e9c5b8f5436295fc3f0846a469e0f9ba021a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:77:2d:f1:17:8d:c9:48:26:f2:17:2b:bb:
8b:9c:7e:2c:51:37:ee:8c:ea:fc:e0:f3:0a:2a:b7:
af:47:6f:d4:50:7f:b4:c0:5f:2b:42:f2:93:98:4e:
f5:e5:c2:a8:28:53:ba:cc:6a:aa:c4:d2:c6:bc:01:
93:eb:cc:8a:59:83:46:34:7a:33:19:96:44:66:07:
a0:9c:40:be:7b:ce:2c:f0:d9:88:72:0f:7a:9b:8e:
6c:58:b2:de:ff:1d:ad:eb:3d:ea:2b:4a:9b:8f:b7:
12:17:24:d8:98:cf:37:42:77:97:f3:d7:e6:1f:43:
e1:7b:bc:c7:d8:7a:07:a3:05:46:25:2c:30:d8:8d:
6e:37:b6:b2:44:ee:6d:59:9d:23:14:94:ea:a2:50:
64:aa:fa:0e:e4:24:62:59:14:a3:01:50:b8:59:f8:
07:a2:c4:e7:0d:a0:d3:fe:9b:74:ed:78:8b:14:ec:
3e:f2:42:20:c1:5f:d0:bb:61:5f:1e:2f:30:d7:f9:
69:67:5d:e3:d1:75:b1:d3:40:3b:24:4c:e8:ff:d0:
5b:c3:04:cc:2e:a0:c2:96:f9:5d:ea:8b:31:a6:ef:
ff:36:7c:36:d5:0c:09:36:3e:1c:10:73:14:9d:6e:
94:ba:3f:76:11:16:07:91:c8:e5:99:71:fc:5f:3b:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C6:E9:C5:B8:F5:43:62:95:FC:3F:08:46:A4:69:E0:F9:BA:02:1A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/scbpxbj1Q2KV_D8IRqRp4Pm6Aho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
47:5e:53:54:12:bb:e7:69:d8:9c:e8:6a:db:0e:b9:d1:ad:be:
9b:3c:32:69:39:ce:e3:08:fa:87:f8:7c:4b:e7:b3:90:d3:f3:
97:04:44:d8:35:ce:73:3d:43:51:d0:45:55:d6:b5:d9:82:88:
a8:ee:ed:a4:dd:fd:21:ad:c3:dc:db:83:94:a3:07:ca:6b:c6:
6a:e9:0e:ad:52:e8:aa:e1:5e:5d:39:d5:c5:2c:c6:3b:8c:99:
38:e6:97:91:1a:d9:ca:7e:5a:da:2a:6b:66:a8:6c:b8:b1:4d:
f0:08:e0:6f:6d:ca:66:bb:db:1a:87:ee:57:14:6c:e6:e4:6c:
73:a5:2c:61:2c:83:04:19:50:4d:4f:e7:3f:3d:d6:b6:17:d3:
eb:fa:98:76:b5:41:14:51:4c:c7:e3:d0:1b:dc:e9:e7:9d:27:
b1:61:d9:cd:73:54:20:b3:00:4b:d6:27:b5:bc:ac:ef:6a:cb:
25:f1:a6:de:40:16:ff:6c:78:d8:78:82:a7:5a:6d:0b:24:7a:
75:75:05:03:04:9d:f1:b6:62:65:fa:24:78:a6:54:3b:66:9e:
1d:17:7e:99:50:42:2b:af:bc:45:07:0c:fd:0f:bd:1f:24:90:
c1:81:0b:f6:0e:04:e1:e2:e7:16:59:fb:79:64:7f:a6:15:fc:
84:4f:6d:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkx22lUbKG/OLm9zZsWp0RFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNzA3MTkzNjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM2ZTljNWI4ZjU0MzYyOTVmYzNmMDg0NmE0NjllMGY5YmEwMjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE53LfEXjclIJvIXK7uLnH4sUTfu
jOr84PMKKrevR2/UUH+0wF8rQvKTmE715cKoKFO6zGqqxNLGvAGT68yKWYNGNHoz
GZZEZgegnEC+e84s8NmIcg96m45sWLLe/x2t6z3qK0qbj7cSFyTYmM83QneX89fm
H0Phe7zH2HoHowVGJSww2I1uN7ayRO5tWZ0jFJTqolBkqvoO5CRiWRSjAVC4WfgH
osTnDaDT/pt07XiLFOw+8kIgwV/Qu2FfHi8w1/lpZ13j0XWx00A7JEzo/9BbwwTM
LqDClvld6osxpu//Nnw21QwJNj4cEHMUnW6Uuj92ERYHkcjlmXH8XzvDTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLHG6cW49UNilfw/CEakaeD5ugIaMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvc2NicHhiajFRMktWX0Q4SVJxUnA0UG02QWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLqIKAwQB
LqI0MA0GCSqGSIb3DQEBCwUAA4IBAQBHXlNUErvnadic6GrbDrnRrb6bPDJpOc7j
CPqH+HxL57OQ0/OXBETYNc5zPUNR0EVV1rXZgoio7u2k3f0hrcPc24OUowfKa8Zq
6Q6tUuiq4V5dOdXFLMY7jJk45peRGtnKflraKmtmqGy4sU3wCOBvbcpmu9sah+5X
FGzm5GxzpSxhLIMEGVBNT+c/Pda2F9Pr+ph2tUEUUUzH49Ab3OnnnSexYdnNc1Qg
swBL1ie1vKzvassl8abeQBb/bHjYeIKnWm0LJHp1dQUDBJ3xtmJl+iR4plQ7Zp4d
F36ZUEIrr7xFBwz9D70fJJDBgQv2DgTh4ucWWft5ZH+mFfyET21u
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org