Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/v0jk49rIBGHVa-aiyLpmIuxL8gg.roa
File: v0jk49rIBGHVa-aiyLpmIuxL8gg.roa (raw, json)
Hash identifier: gtQfzOAhflKVwRvxcDipmUNiIQQv74PgI4+WOg4CTOg=
Subject key identifier: BF:48:E4:E3:DA:C8:04:61:D5:6B:E6:A2:C8:BA:66:22:EC:4B:F2:08
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01888C641F7674AD23F86967CCE812400B12
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/v0jk49rIBGHVa-aiyLpmIuxL8gg.roa
Signing time: Mon 05 Jun 2023 16:29:11 +0000
ROA not before: Mon 05 Jun 2023 16:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.10.0/23 maxlen: 24
46.162.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 23:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:64:1f:76:74:ad:23:f8:69:67:cc:e8:12:40:0b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 5 16:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf48e4e3dac80461d56be6a2c8ba6622ec4bf208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:29:24:9e:30:1a:63:aa:c4:65:22:ee:58:
c8:03:3e:7d:fc:09:92:51:70:b0:f8:ad:8c:08:68:
a5:39:08:54:a5:f4:76:d2:63:bf:21:7d:04:df:4a:
e2:85:d7:73:06:d9:63:6e:f8:fa:69:4a:eb:37:2b:
67:2b:18:7a:b5:2e:41:19:f8:5f:0f:63:b1:02:ff:
69:9f:7b:8f:81:e7:e4:0e:4e:db:7b:0c:f6:fd:55:
3b:8d:69:9d:55:49:fc:7c:c2:17:8c:8a:95:16:e2:
65:09:78:8e:3d:64:cf:6e:57:23:f6:a4:9e:d1:64:
2a:92:5a:59:94:05:11:75:81:85:e9:99:c4:4f:12:
1b:fa:74:6c:0f:3e:1b:22:7a:50:72:ec:14:b5:7d:
09:d9:d0:ff:3d:6d:37:95:65:98:7e:a0:13:88:43:
cc:5e:41:b1:4a:d7:8f:71:2f:f2:8c:a3:ac:c7:a1:
ed:77:62:29:7d:6a:29:5e:90:7a:30:0b:f9:98:7a:
fe:ce:42:87:01:57:a8:31:42:8f:eb:9b:d9:25:6b:
bf:9a:e0:ef:52:dd:60:fb:e8:7d:bd:02:2c:19:73:
fe:53:f0:f6:d2:b0:1e:7e:6a:07:e1:90:77:ff:7d:
a9:b4:c3:22:a2:ba:df:8c:5c:47:ac:a6:b7:a1:5f:
bd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:48:E4:E3:DA:C8:04:61:D5:6B:E6:A2:C8:BA:66:22:EC:4B:F2:08
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/v0jk49rIBGHVa-aiyLpmIuxL8gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.10.0/23
46.162.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:33:83:e1:5c:0d:17:23:32:40:2f:95:b0:bd:4e:8a:b3:53:
c8:7e:89:80:f5:54:77:6c:ce:8a:0e:1b:19:cf:4c:73:40:84:
40:e9:57:b6:b4:bc:92:c6:86:f1:43:b5:c2:b2:21:77:4c:31:
8f:fa:78:f2:41:93:65:cf:26:b9:e5:17:fc:24:bc:86:39:9b:
ba:fd:5d:65:93:70:39:dc:cf:c1:a6:cb:d0:6a:c2:c6:d9:4c:
98:9c:e1:d9:19:b1:77:d6:9d:40:c8:80:73:78:92:d5:71:55:
97:73:04:2b:16:a1:1c:05:d8:b9:9c:8e:34:23:9c:e4:19:29:
ab:d1:8c:1c:17:80:69:a7:33:48:bc:f4:38:9f:89:ec:af:60:
08:a9:a2:a4:43:c0:6a:21:52:a2:08:81:18:ce:78:00:14:3b:
d8:16:a8:f0:4d:9b:4a:82:e0:ad:73:e2:c6:f7:2f:b2:59:55:
ba:c0:85:d5:97:d5:80:58:1d:b3:52:65:d1:f1:9b:96:be:40:
c3:94:ce:3a:41:4a:4d:9e:2a:d1:7e:2a:0c:60:38:12:56:8c:
0a:fc:04:ee:f7:bf:65:5d:8a:c9:be:d5:8d:b3:b3:88:92:0c:
91:da:1d:da:36:44:47:9b:17:94:47:5f:dd:73:76:f6:22:3a:
3d:86:0c:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiMZB92dK0j+GlnzOgSQAsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNjA1MTYyOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjQ4ZTRlM2RhYzgwNDYxZDU2YmU2YTJjOGJhNjYyMmVjNGJmMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcgpJJ4wGmOqxGUi7ljIAz59/AmS
UXCw+K2MCGilOQhUpfR20mO/IX0E30rihddzBtljbvj6aUrrNytnKxh6tS5BGfhf
D2OxAv9pn3uPgefkDk7bewz2/VU7jWmdVUn8fMIXjIqVFuJlCXiOPWTPblcj9qSe
0WQqklpZlAURdYGF6ZnETxIb+nRsDz4bInpQcuwUtX0J2dD/PW03lWWYfqATiEPM
XkGxStePcS/yjKOsx6Htd2IpfWopXpB6MAv5mHr+zkKHAVeoMUKP65vZJWu/muDv
Ut1g++h9vQIsGXP+U/D20rAefmoH4ZB3/32ptMMiorrfjFxHrKa3oV+9RwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL9I5OPayARh1Wvmosi6ZiLsS/IIMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEvdjBqazQ5cklCR0hWYS1haXlMcG1JdXhMOGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLqIKAwQA
LqIlMA0GCSqGSIb3DQEBCwUAA4IBAQBaM4PhXA0XIzJAL5WwvU6Ks1PIfomA9VR3
bM6KDhsZz0xzQIRA6Ve2tLySxobxQ7XCsiF3TDGP+njyQZNlzya55Rf8JLyGOZu6
/V1lk3A53M/BpsvQasLG2UyYnOHZGbF31p1AyIBzeJLVcVWXcwQrFqEcBdi5nI40
I5zkGSmr0YwcF4BppzNIvPQ4n4nsr2AIqaKkQ8BqIVKiCIEYzngAFDvYFqjwTZtK
guCtc+LG9y+yWVW6wIXVl9WAWB2zUmXR8ZuWvkDDlM46QUpNnirRfioMYDgSVowK
/ATu979lXYrJvtWNs7OIkgyR2h3aNkRHmxeUR1/dc3b2Ijo9hgzV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org