Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vKywvAuarmSB1ZeIrYd8SHzeDL0.roa
File: vKywvAuarmSB1ZeIrYd8SHzeDL0.roa (raw, json)
Hash identifier: fzkh0n3hNdWgIk5IxNwp7V8bbPgwX6jLlff7EPl0nWQ=
Subject key identifier: BC:AC:B0:BC:0B:9A:AE:64:81:D5:97:88:AD:87:7C:48:7C:DE:0C:BD
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 018794061D62A7D480913203E016919751C0
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vKywvAuarmSB1ZeIrYd8SHzeDL0.roa
Signing time: Tue 18 Apr 2023 11:00:41 +0000
ROA not before: Tue 18 Apr 2023 11:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 46.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:06:1d:62:a7:d4:80:91:32:03:e0:16:91:97:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Apr 18 11:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcacb0bc0b9aae6481d59788ad877c487cde0cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:fe:ac:58:9d:c6:4b:15:c2:de:d9:20:54:
30:18:86:98:98:2d:86:05:41:26:c9:65:af:59:fa:
65:98:4e:81:de:f4:d9:32:7b:17:4a:cf:00:fa:63:
70:4a:86:fd:66:94:d3:c0:ee:1a:03:15:b7:da:a2:
9a:78:ad:da:f3:97:97:6e:8a:fa:1c:24:42:d3:3f:
4f:1f:d2:c0:96:cc:50:2f:67:91:cf:94:fc:4b:88:
bc:a5:ea:af:28:d9:e7:ac:d0:36:6c:bb:3e:28:7e:
a6:c3:92:e7:45:cc:85:41:b6:c1:ad:b9:f2:96:89:
75:c8:91:76:27:6d:16:ec:e7:04:ea:d7:69:c1:98:
df:e4:47:00:79:13:72:d0:ce:05:34:2a:d6:53:e3:
08:d1:62:9c:2b:22:60:98:97:5e:d2:55:87:5a:b7:
8f:1d:e0:25:8d:aa:92:8a:67:43:e9:2a:2f:52:d6:
4a:74:d8:36:0e:7f:b9:a1:62:21:8d:5c:e5:ce:31:
b8:ea:a3:61:3d:11:06:e7:41:41:d5:6e:86:99:de:
ee:4e:1b:73:c1:d7:93:40:1a:13:96:77:e8:9b:6d:
84:46:78:71:5b:98:1b:70:cc:39:7b:3d:0e:c2:50:
63:64:b9:c4:31:46:2b:5c:ec:7e:85:b5:06:32:79:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AC:B0:BC:0B:9A:AE:64:81:D5:97:88:AD:87:7C:48:7C:DE:0C:BD
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/vKywvAuarmSB1ZeIrYd8SHzeDL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5d:51:e1:47:fa:d5:1f:b6:f2:cf:76:81:dc:9d:e9:11:45:
34:39:90:18:cf:49:7d:2a:f6:60:b1:e9:5e:2d:e9:4f:ba:e0:
58:f2:b1:d2:61:a8:c6:6e:40:df:5b:5f:9c:8f:3d:e6:97:83:
3f:7b:57:28:28:59:ea:99:41:dd:ce:ac:f1:00:06:95:63:73:
56:72:1a:e4:1d:2b:42:58:26:e3:10:af:07:c7:b0:00:80:42:
c9:a3:89:9a:55:7f:8c:2b:bd:75:54:99:f7:58:76:17:63:c2:
70:c7:f0:7c:f2:c0:a9:4b:80:6c:22:0a:dd:ff:b7:f0:c7:98:
53:59:bd:c5:e2:14:88:27:a0:4b:c1:0a:e8:b9:e3:7e:73:a8:
c6:eb:2a:f1:36:b4:b2:86:1f:4a:91:39:04:4e:57:2e:8c:1e:
4c:e3:dd:09:fc:00:ab:6e:73:ec:72:73:bc:2c:87:03:a2:f0:
f3:72:27:46:12:99:2d:73:7b:72:81:6e:30:f5:2b:08:db:18:
0b:8f:ad:df:da:d6:89:85:73:fd:1a:52:be:aa:08:ab:4a:11:
8c:ac:cc:38:8b:1c:1a:34:46:37:4f:6d:c0:8f:d1:3a:ab:0b:
63:d4:c8:9f:32:91:16:05:ef:00:43:f2:be:c9:e4:71:dc:40:
75:1b:61:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeUBh1ip9SAkTID4BaRl1HAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjMwNDE4MTEwMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FjYjBiYzBiOWFhZTY0ODFkNTk3ODhhZDg3N2M0ODdjZGUwY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0L+rFidxksVwt7ZIFQwGIaYmC2G
BUEmyWWvWfplmE6B3vTZMnsXSs8A+mNwSob9ZpTTwO4aAxW32qKaeK3a85eXbor6
HCRC0z9PH9LAlsxQL2eRz5T8S4i8peqvKNnnrNA2bLs+KH6mw5LnRcyFQbbBrbny
lol1yJF2J20W7OcE6tdpwZjf5EcAeRNy0M4FNCrWU+MI0WKcKyJgmJde0lWHWreP
HeAljaqSimdD6SovUtZKdNg2Dn+5oWIhjVzlzjG46qNhPREG50FB1W6Gmd7uThtz
wdeTQBoTlnfom22ERnhxW5gbcMw5ez0OwlBjZLnEMUYrXOx+hbUGMnlEuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLyssLwLmq5kgdWXiK2HfEh83gy9MB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvdkt5d3ZBdWFybVNCMVplSXJZZDhTSHplREwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh3sMA0G
CSqGSIb3DQEBCwUAA4IBAQAXXVHhR/rVH7byz3aB3J3pEUU0OZAYz0l9KvZgsele
LelPuuBY8rHSYajGbkDfW1+cjz3ml4M/e1coKFnqmUHdzqzxAAaVY3NWchrkHStC
WCbjEK8Hx7AAgELJo4maVX+MK711VJn3WHYXY8Jwx/B88sCpS4BsIgrd/7fwx5hT
Wb3F4hSIJ6BLwQroueN+c6jG6yrxNrSyhh9KkTkETlcujB5M490J/ACrbnPscnO8
LIcDovDzcidGEpktc3tygW4w9SsI2xgLj63f2taJhXP9GlK+qgirShGMrMw4ixwa
NEY3T23Aj9E6qwtj1MifMpEWBe8AQ/K+yeRx3EB1G2FD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:42 2023 by rpki-client on console-fra.rpki-client.org