Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JyUzFK3A0cqq4WdIY8-Kx3nhEIo.roa
File: JyUzFK3A0cqq4WdIY8-Kx3nhEIo.roa (raw, json)
Hash identifier: DrFVq3y4Joj9Ot3M31MKlbxMezvrsuQ971hQavmotno=
Subject key identifier: 27:25:33:14:AD:C0:D1:CA:AA:E1:67:48:63:CF:8A:C7:79:E1:10:8A
Certificate issuer: /CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Certificate serial: 0185708CAFFDF2C67EE89847EB89611EC0A5
Authority key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JyUzFK3A0cqq4WdIY8-Kx3nhEIo.roa
Signing time: Mon 02 Jan 2023 03:35:46 +0000
ROA not before: Mon 02 Jan 2023 03:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64396
IP address blocks: 46.229.8.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:af:fd:f2:c6:7e:e8:98:47:eb:89:61:1e:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Validity
Not Before: Jan 2 03:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27253314adc0d1caaae1674863cf8ac779e1108a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:9a:96:74:12:ad:30:a3:a4:be:33:76:e1:
e0:9d:cb:bb:30:40:a2:7f:08:db:86:05:80:4a:99:
70:92:6f:42:8b:80:3e:77:d6:62:bf:d3:44:a8:f0:
4b:f7:4b:3a:50:17:31:37:00:1f:b1:7a:f8:f9:9e:
d7:21:32:e6:e1:20:16:27:6b:ea:21:81:25:65:ed:
d5:56:d7:4e:ff:a9:30:75:b2:b3:7a:cd:4d:91:b6:
e7:f4:43:b8:28:94:59:76:ee:9d:e8:8d:65:f5:07:
2e:6b:7b:34:af:ff:69:ac:07:06:c7:97:02:23:e1:
1a:dd:eb:45:60:f3:a6:19:fe:83:30:ea:a9:55:2c:
e3:83:15:5f:a9:8b:ac:74:ab:87:90:4e:b8:ab:5c:
a6:57:77:84:29:08:9e:28:b3:ef:f1:3f:7c:49:0b:
3a:a8:a7:22:f7:e2:80:aa:b4:cb:bd:f9:fc:64:17:
73:4f:6e:fc:7c:75:ef:10:ad:ad:ae:3b:72:12:13:
da:33:3f:5f:16:c3:35:94:72:a7:c6:fd:1e:4e:4f:
43:7f:01:6a:1f:e8:5b:85:8f:39:ad:f1:91:c9:16:
10:8d:09:46:bc:d7:5c:b5:2b:cb:9e:34:1b:d4:69:
78:09:ce:59:2d:c9:8b:df:54:90:72:54:a8:1d:33:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:25:33:14:AD:C0:D1:CA:AA:E1:67:48:63:CF:8A:C7:79:E1:10:8A
X509v3 Authority Key Identifier:
keyid:52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/JyUzFK3A0cqq4WdIY8-Kx3nhEIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.8.0/23
Signature Algorithm: sha256WithRSAEncryption
34:ef:83:74:b1:79:b9:7d:55:0e:86:e2:2f:6c:9c:d8:50:a4:
6d:a8:cc:38:9e:d6:83:f7:d4:fa:fd:ae:3d:9c:ea:ea:a0:6f:
9f:68:2e:d3:9d:da:34:f2:59:17:97:15:11:43:7c:21:31:94:
c8:67:f9:f9:97:6d:85:9a:d3:37:bd:57:b2:b3:fc:8a:8f:12:
64:f9:81:9f:cd:25:11:b9:af:0c:f5:66:b0:ab:29:08:30:09:
64:b4:41:23:31:aa:dd:83:af:84:06:30:ff:1b:a5:56:3a:26:
05:83:ec:66:64:b4:51:27:cd:aa:8f:f6:29:7f:85:fe:f6:bf:
ef:7f:f3:b7:a8:63:1b:55:e4:19:b7:7a:93:1a:26:78:0b:4b:
d5:31:2c:e4:7c:94:11:7c:85:35:6a:8d:47:b9:46:64:77:f1:
ed:5f:80:e6:54:65:b5:2a:f3:eb:74:47:c5:96:32:bb:d9:69:
e7:37:d3:6a:89:70:0b:08:62:68:3b:5a:18:f5:c8:8d:4f:a3:
e3:21:9d:ef:9a:57:c0:0e:79:14:dc:61:5c:13:05:83:c8:1e:
7d:b4:80:5e:03:d2:df:88:b4:46:15:5b:65:d2:5a:d6:71:d4:
6d:93:04:43:5d:f5:04:58:9b:ac:70:95:e3:ed:75:3d:44:a2:
ba:b3:db:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjK/98sZ+6JhH64lhHsClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYTVjOTBjYTkyODMxM2JjNzBkMjY4M2JiMGY2NGQ2MzJi
MjczYTEwHhcNMjMwMTAyMDMzNTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI1MzMxNGFkYzBkMWNhYWFlMTY3NDg2M2NmOGFjNzc5ZTExMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSSalnQSrTCjpL4zduHgncu7MECi
fwjbhgWASplwkm9Ci4A+d9Ziv9NEqPBL90s6UBcxNwAfsXr4+Z7XITLm4SAWJ2vq
IYElZe3VVtdO/6kwdbKzes1Nkbbn9EO4KJRZdu6d6I1l9Qcua3s0r/9prAcGx5cC
I+Ea3etFYPOmGf6DMOqpVSzjgxVfqYusdKuHkE64q1ymV3eEKQieKLPv8T98SQs6
qKci9+KAqrTLvfn8ZBdzT278fHXvEK2trjtyEhPaMz9fFsM1lHKnxv0eTk9DfwFq
H+hbhY85rfGRyRYQjQlGvNdctSvLnjQb1Gl4Cc5ZLcmL31SQclSoHTPL5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCclMxStwNHKquFnSGPPisd54RCKMB8GA1UdIwQY
MBaAFFKlyQypKDE7xw0mg7sPZNYysnOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUt
MTNlZDYzM2Y5MjJhLzEvSnlVekZLM0EwY3FxNFdkSVk4LUt4M25oRUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jNGI3YTAtMWU1MC00MDNjLWIyNGUtMTNlZDYzM2Y5MjJh
LzEvVXFYSkRLa29NVHZIRFNhRHV3OWsxakt5YzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuUIMA0G
CSqGSIb3DQEBCwUAA4IBAQA074N0sXm5fVUOhuIvbJzYUKRtqMw4ntaD99T6/a49
nOrqoG+faC7Tndo08lkXlxURQ3whMZTIZ/n5l22FmtM3vVeys/yKjxJk+YGfzSUR
ua8M9WawqykIMAlktEEjMardg6+EBjD/G6VWOiYFg+xmZLRRJ82qj/Ypf4X+9r/v
f/O3qGMbVeQZt3qTGiZ4C0vVMSzkfJQRfIU1ao1HuUZkd/HtX4DmVGW1KvPrdEfF
ljK72WnnN9NqiXALCGJoO1oY9ciNT6PjIZ3vmlfADnkU3GFcEwWDyB59tIBeA9Lf
iLRGFVtl0lrWcdRtkwRDXfUEWJuscJXj7XU9RKK6s9uY
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:27 2024 by rpki-client on console-fra.rpki-client.org