Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yT7tiiWXCEjOaBC-cEupsh91_To.roa
File: yT7tiiWXCEjOaBC-cEupsh91_To.roa (raw, json)
Hash identifier: i23Uz5O5QWJDczOJ7ABjy3gxOq+589wXlHAOwbMEzC4=
Subject key identifier: C9:3E:ED:8A:25:97:08:48:CE:68:10:BE:70:4B:A9:B2:1F:75:FD:3A
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018635F8E066AA5A790224D9C2656C384392
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yT7tiiWXCEjOaBC-cEupsh91_To.roa
Signing time: Thu 09 Feb 2023 11:39:08 +0000
ROA not before: Thu 09 Feb 2023 11:39:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 46.162.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 09:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:f8:e0:66:aa:5a:79:02:24:d9:c2:65:6c:38:43:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 9 11:39:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c93eed8a25970848ce6810be704ba9b21f75fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:24:64:e4:c3:bb:90:4e:bd:e2:71:57:34:
8c:d4:19:17:48:fb:5c:06:04:2f:2f:27:a7:39:de:
f7:fd:db:fa:44:2d:6a:f2:36:3b:fa:20:bc:b7:7e:
07:98:09:1b:9c:78:54:c8:ac:8f:ab:1e:89:04:38:
11:45:8e:e7:ff:6f:7c:39:a3:9d:dc:3b:42:a8:2b:
07:35:86:b6:b3:06:82:e4:82:0d:62:c3:01:42:a8:
4f:1a:5b:34:1b:91:89:e6:0f:d4:f9:6e:25:3b:f7:
87:b1:ee:9a:2e:62:06:54:44:42:2c:d1:bf:5b:3e:
aa:8d:aa:74:af:63:8c:c4:29:c9:1a:f4:ed:1a:70:
0a:28:a4:60:1b:f6:85:39:a4:4e:7c:b9:89:8f:fc:
66:9f:a7:3d:86:55:95:ae:1d:a8:c8:0d:80:d6:5b:
a4:4c:13:4f:12:3b:61:a0:81:8f:29:8f:19:47:3b:
16:3e:e6:3e:c9:b7:7c:15:58:e4:c0:d0:20:17:3f:
71:52:04:6e:89:99:f6:6c:ab:02:ce:1f:22:c4:f0:
4e:d6:63:62:de:ef:7a:69:94:f9:ea:ac:78:43:ab:
7a:4a:62:b2:01:28:bc:ca:7c:60:3f:2b:a8:1a:8f:
e1:ec:94:99:27:0e:68:e6:b9:06:40:5e:29:3b:9d:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3E:ED:8A:25:97:08:48:CE:68:10:BE:70:4B:A9:B2:1F:75:FD:3A
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yT7tiiWXCEjOaBC-cEupsh91_To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.58.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:00:77:b6:a5:dc:41:7a:e5:3c:2d:d4:9d:30:da:ce:4f:61:
31:c8:48:10:48:61:79:d9:36:2a:13:a6:31:88:25:55:53:77:
cb:ab:51:19:c3:86:99:cf:25:8a:f4:0d:20:ab:4b:48:cd:d0:
ad:53:58:38:fd:9c:a4:a3:88:d9:78:83:c8:19:b1:14:c4:ac:
75:d9:47:56:66:14:69:ef:92:b3:47:14:86:3b:7e:2b:4b:2b:
d3:e5:da:68:60:12:57:9f:50:ef:48:22:3f:94:17:d5:1b:bf:
c2:cf:98:4c:fe:02:2c:56:58:19:2c:0e:3e:53:48:f8:ce:c3:
94:ba:99:1e:7e:a8:fd:07:1b:e4:2d:bc:78:6d:38:d3:fb:c9:
63:3d:cd:9a:d4:3a:c4:0c:11:fa:43:1a:51:49:03:7a:d8:93:
77:60:d8:c0:06:a6:0d:d9:a2:f9:29:eb:de:9f:9a:d9:78:e7:
8b:08:fe:84:35:98:86:86:42:ac:ce:b4:14:79:72:ae:e7:75:
c4:3c:cd:b9:e1:67:72:59:ee:4b:e2:13:2b:7a:35:d9:52:c3:
36:13:50:73:92:3b:a8:f3:61:b2:2f:c7:3f:5b:9a:a8:b4:0f:
ac:b1:0b:bd:f8:4a:03:43:de:dc:51:c8:5f:e0:2f:86:df:63:
ab:71:a0:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY1+OBmqlp5AiTZwmVsOEOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwMjA5MTEzOTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTNlZWQ4YTI1OTcwODQ4Y2U2ODEwYmU3MDRiYTliMjFmNzVmZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvkkZOTDu5BOveJxVzSM1BkXSPtc
BgQvLyenOd73/dv6RC1q8jY7+iC8t34HmAkbnHhUyKyPqx6JBDgRRY7n/298OaOd
3DtCqCsHNYa2swaC5IINYsMBQqhPGls0G5GJ5g/U+W4lO/eHse6aLmIGVERCLNG/
Wz6qjap0r2OMxCnJGvTtGnAKKKRgG/aFOaROfLmJj/xmn6c9hlWVrh2oyA2A1luk
TBNPEjthoIGPKY8ZRzsWPuY+ybd8FVjkwNAgFz9xUgRuiZn2bKsCzh8ixPBO1mNi
3u96aZT56qx4Q6t6SmKyASi8ynxgPyuoGo/h7JSZJw5o5rkGQF4pO53flQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMk+7YollwhIzmgQvnBLqbIfdf06MB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEveVQ3dGlpV1hDRWpPYUJDLWNFdXBzaDkxX1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqI6MA0G
CSqGSIb3DQEBCwUAA4IBAQCMAHe2pdxBeuU8LdSdMNrOT2ExyEgQSGF52TYqE6Yx
iCVVU3fLq1EZw4aZzyWK9A0gq0tIzdCtU1g4/Zyko4jZeIPIGbEUxKx12UdWZhRp
75KzRxSGO34rSyvT5dpoYBJXn1DvSCI/lBfVG7/Cz5hM/gIsVlgZLA4+U0j4zsOU
upkefqj9BxvkLbx4bTjT+8ljPc2a1DrEDBH6QxpRSQN62JN3YNjABqYN2aL5Keve
n5rZeOeLCP6ENZiGhkKszrQUeXKu53XEPM254WdyWe5L4hMrejXZUsM2E1Bzkjuo
82GyL8c/W5qotA+ssQu9+EoDQ97cUchf4C+G32OrcaDo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:47 2024 by rpki-client on console-ams.rpki-client.org