Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yu_qcSEKf2DnDaSqrnYA2mDCxIA.roa
File: yu_qcSEKf2DnDaSqrnYA2mDCxIA.roa (raw, json)
Hash identifier: IMWVVxTJXAawe3in5/T37rAx3YD80WSEd1YIYyYD/xU=
Subject key identifier: CA:EF:EA:71:21:0A:7F:60:E7:0D:A4:AA:AE:76:00:DA:60:C2:C4:80
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01892F50FBBB504AB48F4C4838060984CE43
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yu_qcSEKf2DnDaSqrnYA2mDCxIA.roa
Signing time: Fri 07 Jul 2023 07:46:23 +0000
ROA not before: Fri 07 Jul 2023 07:46:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.8.0/23 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
46.162.11.0/24 maxlen: 24
46.162.52.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:50:fb:bb:50:4a:b4:8f:4c:48:38:06:09:84:ce:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 7 07:46:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caefea71210a7f60e70da4aaae7600da60c2c480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:13:bd:c9:cf:a3:d9:e7:cd:4f:05:fd:f2:
33:26:73:a8:5d:01:ad:b8:8b:53:68:ae:27:84:07:
07:de:58:83:29:54:04:c3:2c:40:b5:5f:34:e4:d4:
dd:8c:cf:f2:41:b6:c9:f3:1d:26:4b:7c:8d:a1:a4:
79:31:97:cb:dd:9f:6b:96:6c:51:70:2f:b0:4f:47:
9f:cb:7f:84:7f:1c:e6:39:8a:55:75:20:60:c6:fd:
bc:f6:07:95:07:ed:59:cb:33:54:97:67:60:7a:bf:
af:28:15:66:d9:24:51:02:f0:eb:3b:92:9f:68:db:
b6:b7:f8:07:24:c7:c6:0f:7d:bb:ed:c7:25:aa:29:
84:c5:97:08:1d:f4:6d:dd:3f:83:60:e6:78:9a:2e:
af:36:5c:ff:22:26:a2:48:9f:16:f7:92:1f:a8:ce:
8f:1e:77:1b:33:c7:73:e4:b4:f5:79:05:b8:4e:d8:
8b:e7:81:c6:b2:d3:68:c9:d2:fd:58:9a:f7:72:8e:
5e:f3:1a:c3:43:f1:f6:44:96:fa:3b:7b:04:d4:56:
38:49:39:c8:b8:1e:43:cd:d8:3b:dd:02:40:36:b4:
18:3d:04:1d:fe:5b:5d:0e:7a:1d:73:63:d9:05:a0:
a8:0d:17:82:ef:c7:88:24:80:2b:e4:b7:5d:ba:c3:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:EA:71:21:0A:7F:60:E7:0D:A4:AA:AE:76:00:DA:60:C2:C4:80
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/yu_qcSEKf2DnDaSqrnYA2mDCxIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/22
46.162.52.0/23
Signature Algorithm: sha256WithRSAEncryption
52:54:df:40:5d:f7:67:73:a8:8a:9f:ee:5d:88:79:56:53:2e:
2b:94:7d:95:83:40:a9:64:bd:11:2b:38:e7:4d:94:41:9b:23:
36:19:7a:76:2f:36:bf:8a:38:c5:3b:c2:66:fd:32:5a:19:fa:
30:df:a1:cc:f4:ae:b3:6f:5b:88:d5:fd:9c:2f:ec:c5:8a:7b:
d3:4b:45:27:1c:1f:1a:27:b7:0d:71:95:92:b5:d5:20:17:7c:
3e:9f:2b:68:8b:83:56:7d:cb:ec:6a:1b:c2:a0:9f:fe:70:7c:
77:a9:66:21:be:8d:a2:67:38:74:91:cf:3a:ba:a4:88:95:4d:
4c:0f:e5:86:de:3f:11:d9:a5:a3:ab:29:a0:f1:8f:b3:1a:5a:
56:5b:02:2e:d1:da:a4:85:4f:5d:8d:53:2f:73:61:6e:90:09:
b7:b9:e3:2a:ce:59:0a:91:6e:a4:a0:2c:3a:a5:99:9d:89:d1:
20:09:19:cc:36:96:15:1d:75:27:3c:12:a0:f6:93:e1:93:ca:
f9:c0:a5:da:52:ea:14:bf:45:65:e1:0f:1a:37:1a:72:46:68:
31:22:5d:0f:da:88:73:f8:5d:a7:5c:b6:02:71:1e:15:0c:a9:
03:91:12:9e:e6:38:9b:63:31:f9:05:c6:d9:82:eb:44:9b:d1:
f0:b0:08:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkvUPu7UEq0j0xIOAYJhM5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NDJmZDNmMzM2Y2U2ZWU5OWU2MWZhOTc3MDQ5YTZjNmE5
MjNlNGEwHhcNMjMwNzA3MDc0NjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWVmZWE3MTIxMGE3ZjYwZTcwZGE0YWFhZTc2MDBkYTYwYzJjNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDITvcnPo9nnzU8F/fIzJnOoXQGt
uItTaK4nhAcH3liDKVQEwyxAtV805NTdjM/yQbbJ8x0mS3yNoaR5MZfL3Z9rlmxR
cC+wT0efy3+EfxzmOYpVdSBgxv289geVB+1ZyzNUl2dger+vKBVm2SRRAvDrO5Kf
aNu2t/gHJMfGD3277cclqimExZcIHfRt3T+DYOZ4mi6vNlz/IiaiSJ8W95IfqM6P
HncbM8dz5LT1eQW4TtiL54HGstNoydL9WJr3co5e8xrDQ/H2RJb6O3sE1FY4STnI
uB5Dzdg73QJANrQYPQQd/ltdDnodc2PZBaCoDReC78eIJIAr5LddusNrwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMrv6nEhCn9g5w2kqq52ANpgwsSAMB8GA1UdIwQY
MBaAFHZC/T8zbObumeYfqXcEmmxqkj5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAt
NjJjNDNhYzdjMDJmLzEveXVfcWNTRUtmMkRuRGFTcXJuWUEybURDeElBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85MjQ1NDYtZDljNy00YTBkLWFlMDAtNjJjNDNhYzdjMDJm
LzEvZGtMOVB6TnM1dTZaNWgtcGR3U2FiR3FTUGtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLqIIAwQB
LqI0MA0GCSqGSIb3DQEBCwUAA4IBAQBSVN9AXfdnc6iKn+5diHlWUy4rlH2Vg0Cp
ZL0RKzjnTZRBmyM2GXp2Lza/ijjFO8Jm/TJaGfow36HM9K6zb1uI1f2cL+zFinvT
S0UnHB8aJ7cNcZWStdUgF3w+nytoi4NWfcvsahvCoJ/+cHx3qWYhvo2iZzh0kc86
uqSIlU1MD+WG3j8R2aWjqymg8Y+zGlpWWwIu0dqkhU9djVMvc2FukAm3ueMqzlkK
kW6koCw6pZmdidEgCRnMNpYVHXUnPBKg9pPhk8r5wKXaUuoUv0Vl4Q8aNxpyRmgx
Il0P2ohz+F2nXLYCcR4VDKkDkRKe5jibYzH5BcbZgutEm9HwsAhc
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org