Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa
File: _gnCeElZzWQ_O0MG5AvOtwK-J8o.roa (raw, json)
Hash identifier: lhTzYI1bTfVZSh+ees+59gJsySLXmJvkdZlu5J7EvGM=
Subject key identifier: FE:09:C2:78:49:59:CD:64:3F:3B:43:06:E4:0B:CE:B7:02:BE:27:CA
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0187830FC66E96B1B12DA348D1C620F89AF6
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa
Signing time: Sat 15 Apr 2023 03:57:41 +0000
ROA not before: Sat 15 Apr 2023 03:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.175.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 03:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:0f:c6:6e:96:b1:b1:2d:a3:48:d1:c6:20:f8:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Apr 15 03:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe09c2784959cd643f3b4306e40bceb702be27ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:81:f3:60:d4:b3:39:1e:96:ad:7e:91:e8:
7c:74:a3:8e:95:f0:cf:e2:ca:06:34:f5:cd:e1:d3:
4b:b3:68:f3:00:cb:9a:04:ee:11:e2:74:07:16:28:
11:2f:cf:37:29:e8:f6:f6:8a:2c:19:ec:b1:5f:fe:
84:65:ed:c5:c2:53:ec:a9:d5:fe:72:6f:29:fb:25:
18:54:cd:45:38:15:e4:bc:af:62:56:b6:a6:77:f1:
27:dd:9c:72:60:1d:fc:94:80:6f:90:0a:72:73:12:
5e:f2:3d:3f:35:b4:34:fe:ad:6c:92:b9:f6:19:1d:
22:59:bb:4d:31:1f:cf:53:ce:cc:9d:b0:db:fd:ae:
68:6b:f7:df:a6:26:79:1d:5b:0b:0b:e9:11:d5:3b:
51:7d:9b:a4:64:db:c9:94:36:0b:87:5b:3a:e2:26:
fa:74:7d:e3:b6:44:9b:07:d5:82:cf:3e:7f:da:7a:
95:37:1b:d2:e6:96:26:37:24:41:4b:d2:3f:16:01:
c0:a0:4b:d9:51:4f:9b:bc:72:ea:bd:16:6a:02:a1:
c7:46:11:4d:3e:5b:e3:82:2b:bd:1d:47:c9:1b:b9:
87:ad:f2:f4:f8:11:ee:68:63:ec:f1:d7:6f:64:26:
62:c1:74:c3:0b:96:c4:cf:5f:a0:b0:26:b0:a6:ca:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:09:C2:78:49:59:CD:64:3F:3B:43:06:E4:0B:CE:B7:02:BE:27:CA
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/_gnCeElZzWQ_O0MG5AvOtwK-J8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:05:be:dc:5e:67:c7:cd:48:e9:9f:b1:2b:a9:15:93:ef:d8:
4d:7b:ae:3d:76:12:32:b5:c4:98:ad:47:15:37:2a:bc:08:42:
4e:55:8a:ba:ac:87:14:8d:a7:90:74:0b:0f:1c:cf:ea:b4:5c:
80:eb:44:f6:ce:e0:ac:a0:19:2f:f9:b0:f9:7c:ba:24:56:e2:
ce:02:b3:01:dc:4c:7b:18:d8:6a:8c:ce:00:14:11:1b:24:93:
7d:0d:97:f7:b9:55:8f:68:54:3b:7a:ad:ed:98:8f:0b:0e:39:
22:8b:5d:04:62:09:c6:9e:a9:1b:0c:07:a1:99:9e:09:42:98:
70:35:d6:ed:65:a2:85:fe:be:41:9f:20:bf:fb:aa:c9:51:fc:
d8:16:ba:ff:39:5f:3d:57:5d:36:a8:1b:74:bc:b0:31:03:8e:
c4:36:b4:16:ae:14:7e:69:14:d4:42:54:e9:6b:ca:82:8c:91:
4a:da:94:3e:fe:31:f5:00:76:96:92:33:20:fc:49:b8:f2:01:
82:26:cf:f4:a8:68:98:21:3e:c0:5d:60:57:03:c7:52:59:22:
b8:36:99:ca:a5:2b:23:b3:c9:6b:87:b4:a8:34:7c:73:60:2a:
9f:a2:25:bc:17:ec:84:15:0b:78:2e:85:a8:bb:69:46:c9:93:
68:13:b4:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeDD8ZulrGxLaNI0cYg+Jr2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjMwNDE1MDM1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTA5YzI3ODQ5NTljZDY0M2YzYjQzMDZlNDBiY2ViNzAyYmUyN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqB82DUszkelq1+keh8dKOOlfDP
4soGNPXN4dNLs2jzAMuaBO4R4nQHFigRL883Kej29oosGeyxX/6EZe3FwlPsqdX+
cm8p+yUYVM1FOBXkvK9iVramd/En3ZxyYB38lIBvkApycxJe8j0/NbQ0/q1skrn2
GR0iWbtNMR/PU87MnbDb/a5oa/ffpiZ5HVsLC+kR1TtRfZukZNvJlDYLh1s64ib6
dH3jtkSbB9WCzz5/2nqVNxvS5pYmNyRBS9I/FgHAoEvZUU+bvHLqvRZqAqHHRhFN
Plvjgiu9HUfJG7mHrfL0+BHuaGPs8ddvZCZiwXTDC5bEz1+gsCawpsqeMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4JwnhJWc1kPztDBuQLzrcCvifKMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvX2duQ2VFbFp6V1FfTzBNRzVBdk90d0stSjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq+CMA0G
CSqGSIb3DQEBCwUAA4IBAQCbBb7cXmfHzUjpn7ErqRWT79hNe649dhIytcSYrUcV
Nyq8CEJOVYq6rIcUjaeQdAsPHM/qtFyA60T2zuCsoBkv+bD5fLokVuLOArMB3Ex7
GNhqjM4AFBEbJJN9DZf3uVWPaFQ7eq3tmI8LDjkii10EYgnGnqkbDAehmZ4JQphw
NdbtZaKF/r5BnyC/+6rJUfzYFrr/OV89V102qBt0vLAxA47ENrQWrhR+aRTUQlTp
a8qCjJFK2pQ+/jH1AHaWkjMg/Em48gGCJs/0qGiYIT7AXWBXA8dSWSK4NpnKpSsj
s8lrh7SoNHxzYCqfoiW8F+yEFQt4LoWou2lGyZNoE7TW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:12 2024 by rpki-client on console-ams.rpki-client.org