Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ygG2R5vcWxsLU-c_zioQcLPU6M0.roa
File: ygG2R5vcWxsLU-c_zioQcLPU6M0.roa (raw, json)
Hash identifier: 0qxs9GNwD3didPmYBqLJoeF7XMTvpKziHppKgiAdSr0=
Subject key identifier: CA:01:B6:47:9B:DC:5B:1B:0B:53:E7:3F:CE:2A:10:70:B3:D4:E8:CD
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188109E990450462C898973C1F76847A735
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ygG2R5vcWxsLU-c_zioQcLPU6M0.roa
Signing time: Fri 12 May 2023 15:40:09 +0000
ROA not before: Fri 12 May 2023 15:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.30.0/24 maxlen: 24
46.162.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:9e:99:04:50:46:2c:89:89:73:c1:f7:68:47:a7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 12 15:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca01b6479bdc5b1b0b53e73fce2a1070b3d4e8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:37:a5:0a:98:db:c3:69:e3:ab:6e:b6:d0:
36:bb:2b:f4:82:62:1f:a3:1f:39:11:1c:e4:5d:f4:
40:e7:0f:f0:4d:60:d0:9a:64:79:a2:f8:12:63:11:
51:5e:f0:25:98:4f:dd:e7:9b:34:1e:59:c4:83:56:
fe:25:76:40:d5:78:22:97:d6:44:af:bb:2c:ca:54:
3a:37:ba:37:ad:9e:6c:c0:a6:72:cf:9b:36:7f:b4:
70:d3:40:ea:fa:4e:9f:fa:df:68:6f:99:97:b7:1d:
9a:32:00:61:3e:0d:c0:ec:75:93:86:05:3e:c3:b4:
f4:40:36:a3:6a:0d:5f:49:46:89:1a:0f:8b:3a:2f:
d1:ea:c9:2f:2f:0f:95:81:5b:52:4b:78:81:3c:e9:
a8:f8:0c:62:43:e1:fb:ad:9b:df:53:a9:0e:5a:c8:
0f:7c:29:a8:3a:2d:7c:db:bc:ff:54:fe:cf:24:58:
96:d9:36:7f:fd:a2:09:68:43:4f:a1:f8:ec:a0:a9:
09:53:3b:ac:63:af:c3:75:ef:66:2f:b0:a8:8b:03:
9f:56:df:b8:cd:13:42:ce:29:4a:6c:d9:c1:80:01:
bc:2f:b6:b8:4e:8f:b2:2f:e8:46:50:e0:d4:52:94:
2c:9c:ad:3f:d9:96:ad:2f:11:6b:79:2b:3d:e5:32:
b5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:B6:47:9B:DC:5B:1B:0B:53:E7:3F:CE:2A:10:70:B3:D4:E8:CD
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/ygG2R5vcWxsLU-c_zioQcLPU6M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.28.0/24
46.162.30.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b1:b9:1c:1f:31:60:d1:7e:d7:f4:34:44:47:d5:89:1a:5f:
0f:45:82:a1:c7:3e:fe:80:ba:9a:d8:87:91:7c:ad:e6:5d:b4:
27:54:ad:ba:fd:f4:5c:b4:36:32:bc:06:e0:3b:b0:78:fc:5d:
45:cc:32:00:3f:bf:a2:1d:42:db:7b:e0:c9:35:6a:fe:1a:13:
82:69:a4:f8:bf:25:cb:6c:56:cb:aa:37:3d:ae:d9:0b:95:06:
d7:69:5b:2e:58:cd:9e:8f:55:0d:d7:d7:92:c5:f0:7e:40:9d:
f3:88:32:62:aa:b3:2f:b6:4f:c3:d1:55:37:45:85:aa:19:99:
cf:94:d2:8a:9a:f3:2c:69:35:40:f2:7e:61:87:58:7a:f0:6c:
e8:e3:95:49:dd:69:7f:3e:9d:7f:e9:57:86:ce:84:17:f7:44:
9d:17:02:8b:8a:9e:8b:20:ea:48:0f:0e:2e:85:6d:ea:4e:cc:
d9:80:d6:36:03:61:14:1b:97:f0:f6:3c:21:fc:26:b4:23:b6:
82:15:77:ec:b7:52:a7:3b:96:dd:0b:0b:29:fb:4d:2b:a8:be:
b5:3c:3f:63:6a:1d:65:c2:91:e0:e2:b9:61:da:b3:84:10:cc:
2b:3d:06:d5:7d:60:67:52:6e:9d:28:7d:b9:da:e3:31:7b:67:
2d:d3:f7:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgQnpkEUEYsiYlzwfdoR6c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNTEyMTU0MDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTAxYjY0NzliZGM1YjFiMGI1M2U3M2ZjZTJhMTA3MGIzZDRlOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkY3pQqY28Np46tuttA2uyv0gmIf
ox85ERzkXfRA5w/wTWDQmmR5ovgSYxFRXvAlmE/d55s0HlnEg1b+JXZA1Xgil9ZE
r7ssylQ6N7o3rZ5swKZyz5s2f7Rw00Dq+k6f+t9ob5mXtx2aMgBhPg3A7HWThgU+
w7T0QDajag1fSUaJGg+LOi/R6skvLw+VgVtSS3iBPOmo+AxiQ+H7rZvfU6kOWsgP
fCmoOi1827z/VP7PJFiW2TZ//aIJaENPofjsoKkJUzusY6/Dde9mL7CoiwOfVt+4
zRNCzilKbNnBgAG8L7a4To+yL+hGUODUUpQsnK0/2ZatLxFreSs95TK19QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMoBtkeb3FsbC1PnP84qEHCz1OjNMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEveWdHMlI1dmNXeHNMVS1jX3ppb1FjTFBVNk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqIcAwQA
LqIeMA0GCSqGSIb3DQEBCwUAA4IBAQCQsbkcHzFg0X7X9DRER9WJGl8PRYKhxz7+
gLqa2IeRfK3mXbQnVK26/fRctDYyvAbgO7B4/F1FzDIAP7+iHULbe+DJNWr+GhOC
aaT4vyXLbFbLqjc9rtkLlQbXaVsuWM2ej1UN19eSxfB+QJ3ziDJiqrMvtk/D0VU3
RYWqGZnPlNKKmvMsaTVA8n5hh1h68Gzo45VJ3Wl/Pp1/6VeGzoQX90SdFwKLip6L
IOpIDw4uhW3qTszZgNY2A2EUG5fw9jwh/Ca0I7aCFXfst1KnO5bdCwsp+00rqL61
PD9jah1lwpHg4rlh2rOEEMwrPQbVfWBnUm6dKH252uMxe2ct0/ed
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:31 2023 by rpki-client on console-fra.rpki-client.org