Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/DENPPgVUj7ER51q1VV4_G9AZvOk.roa
File: DENPPgVUj7ER51q1VV4_G9AZvOk.roa (raw, json)
Hash identifier: L5qsXfV3D5nez+NtKWHzvRTg3T0Jl1GimgadcpuvePs=
Subject key identifier: 0C:43:4F:3E:05:54:8F:B1:11:E7:5A:B5:55:5E:3F:1B:D0:19:BC:E9
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018572FA7FE136FA7A3654B51920C43FC776
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/DENPPgVUj7ER51q1VV4_G9AZvOk.roa
Signing time: Mon 02 Jan 2023 14:54:57 +0000
ROA not before: Mon 02 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212850
IP address blocks: 46.243.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:7f:e1:36:fa:7a:36:54:b5:19:20:c4:3f:c7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 2 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c434f3e05548fb111e75ab5555e3f1bd019bce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ed:1a:7a:a9:5c:97:94:49:25:34:19:fd:0c:
6b:a1:af:cc:d8:21:26:30:9f:0e:a4:0b:77:ca:b2:
cc:a8:51:b8:61:c0:01:c3:8f:32:3a:04:73:cd:f7:
2d:11:32:f9:36:08:af:07:c7:36:08:8c:7f:48:55:
37:bf:b6:4b:92:af:cd:f5:73:b5:82:dc:a4:56:47:
91:1d:a8:ea:55:5d:fc:33:e7:39:85:ea:e6:80:0f:
20:2d:ef:1d:c9:34:fc:06:bd:c2:07:d2:b7:f3:c2:
22:d2:03:51:ff:ce:0e:3f:74:86:21:06:96:ab:07:
1a:3c:e6:8c:90:88:9a:e8:a0:55:0f:29:d9:90:a4:
dc:8c:c3:42:47:15:7c:f3:c4:f1:6e:98:e1:7d:67:
b9:45:2b:b1:f9:a5:63:a4:8a:73:4f:ad:52:67:c1:
8f:20:a3:06:7d:37:a8:2a:70:c7:f8:fb:db:ee:e3:
87:44:8c:10:bf:71:b5:6d:bb:4f:c5:1a:11:93:68:
1c:8f:b9:a5:48:34:38:4d:3b:d3:58:25:a8:c2:f8:
12:3b:31:ad:2f:93:f8:24:ae:50:0a:47:7c:99:7a:
a9:fe:df:db:5f:22:a2:7d:fe:0f:cc:f9:53:4d:31:
e8:3e:95:c1:cb:49:87:5e:f8:40:84:6f:3b:dd:70:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:43:4F:3E:05:54:8F:B1:11:E7:5A:B5:55:5E:3F:1B:D0:19:BC:E9
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/DENPPgVUj7ER51q1VV4_G9AZvOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:3d:39:f4:cd:29:47:d1:96:84:49:f3:d1:b9:94:aa:2b:61:
ae:4f:71:57:fe:57:d0:06:07:fd:c4:b7:9b:fd:86:ae:81:bf:
9a:e8:b7:4f:0d:8a:4d:c2:16:ca:2e:e2:e6:bb:ad:f2:17:9d:
85:64:46:27:b4:e7:27:5b:ac:f2:48:50:f4:fd:b0:f8:00:20:
b6:a0:32:60:7a:91:ca:4b:5f:1a:e1:2f:d5:0f:bb:8e:d5:27:
79:e8:bd:4e:08:1f:72:16:a8:19:d9:e5:ed:4d:37:ee:05:b1:
ac:96:34:2e:a2:0a:6e:71:96:09:60:42:6c:30:ed:80:6b:7e:
97:1f:fe:42:04:a0:fe:77:36:3d:91:d8:63:1a:81:5f:d8:7b:
d8:cd:90:35:44:62:8a:0b:23:6c:37:56:c1:66:7c:d4:c1:16:
18:ae:74:f6:d3:e9:be:ac:5c:9e:75:1f:9e:51:f9:8c:9b:db:
32:6f:cc:88:fb:2e:88:1d:ce:f8:e8:ed:35:28:e3:db:48:93:
7e:ed:7f:21:72:53:fc:c1:52:fb:ae:18:67:6d:12:57:17:e3:
aa:36:47:dd:9f:4f:0f:87:ef:39:bc:58:ce:ec:fe:ba:6c:61:
d4:60:1a:f5:00:f7:f7:22:48:99:97:87:17:89:6a:89:39:59:
9d:a8:dc:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy+n/hNvp6NlS1GSDEP8d2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi
Y2UxN2YwHhcNMjMwMTAyMTQ1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzQzNGYzZTA1NTQ4ZmIxMTFlNzVhYjU1NTVlM2YxYmQwMTliY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje0aeqlcl5RJJTQZ/Qxroa/M2CEm
MJ8OpAt3yrLMqFG4YcABw48yOgRzzfctETL5NgivB8c2CIx/SFU3v7ZLkq/N9XO1
gtykVkeRHajqVV38M+c5hermgA8gLe8dyTT8Br3CB9K388Ii0gNR/84OP3SGIQaW
qwcaPOaMkIia6KBVDynZkKTcjMNCRxV888TxbpjhfWe5RSux+aVjpIpzT61SZ8GP
IKMGfTeoKnDH+Pvb7uOHRIwQv3G1bbtPxRoRk2gcj7mlSDQ4TTvTWCWowvgSOzGt
L5P4JK5QCkd8mXqp/t/bXyKiff4PzPlTTTHoPpXBy0mHXvhAhG873XDl/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAxDTz4FVI+xEedatVVePxvQGbzpMB8GA1UdIwQY
MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt
NDVjYWE2ZWY2NzAwLzEvREVOUFBnVlVqN0VSNTFxMVZWNF9HOUFadk9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw
LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvMWMA0G
CSqGSIb3DQEBCwUAA4IBAQCgPTn0zSlH0ZaESfPRuZSqK2GuT3FX/lfQBgf9xLeb
/Yaugb+a6LdPDYpNwhbKLuLmu63yF52FZEYntOcnW6zySFD0/bD4ACC2oDJgepHK
S18a4S/VD7uO1Sd56L1OCB9yFqgZ2eXtTTfuBbGsljQuogpucZYJYEJsMO2Aa36X
H/5CBKD+dzY9kdhjGoFf2HvYzZA1RGKKCyNsN1bBZnzUwRYYrnT20+m+rFyedR+e
UfmMm9syb8yI+y6IHc746O01KOPbSJN+7X8hclP8wVL7rhhnbRJXF+OqNkfdn08P
h+85vFjO7P66bGHUYBr1APf3IkiZl4cXiWqJOVmdqNys
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:22 2024 by rpki-client on console-ams.rpki-client.org