Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CI-yGCy3G5QdhceKG7axFCD-sBc.roa
File: CI-yGCy3G5QdhceKG7axFCD-sBc.roa (raw, json)
Hash identifier: mbOYw1mgUVGraFsTNZICwRazKTTWZDCjhHTqd49jwnw=
Subject key identifier: 08:8F:B2:18:2C:B7:1B:94:1D:85:C7:8A:1B:B6:B1:14:20:FE:B0:17
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246CD9A01D6EF6513EE0ACD8C796CDD
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CI-yGCy3G5QdhceKG7axFCD-sBc.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29694
IP address blocks: 46.254.133.0/24 maxlen: 24
46.254.134.0/24 maxlen: 24
85.187.14.0/24 maxlen: 24
85.187.243.0/24 maxlen: 24
85.187.249.0/24 maxlen: 24
46.254.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cd:9a:01:d6:ef:65:13:ee:0a:cd:8c:79:6c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=088fb2182cb71b941d85c78a1bb6b11420feb017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:01:4d:f5:23:a8:8a:b1:71:3e:59:aa:a0:
23:6b:6e:e0:3f:2c:fe:2a:03:2b:82:59:3d:ba:37:
e9:a3:16:5a:fe:0f:9e:6c:50:29:ea:0f:32:65:46:
78:c8:9c:22:de:92:db:fa:a9:32:84:62:fe:a2:88:
72:3a:b0:e2:28:31:c9:f3:da:d5:05:a5:8d:e5:8c:
62:07:12:39:9e:c0:0a:5d:a3:e2:b6:69:49:4d:79:
64:1b:40:8e:eb:87:d4:26:0d:cb:3a:13:76:aa:c3:
f3:4c:0b:86:d1:a1:36:49:32:00:27:b4:63:67:ff:
84:7a:2f:14:63:ee:c8:61:5d:06:aa:5d:d8:db:a9:
0c:2c:ff:2e:9f:82:1d:df:66:64:04:f4:73:db:a5:
99:14:88:ca:1e:7e:53:f1:23:df:ef:2c:0a:32:dd:
94:0f:c0:9c:7d:45:55:2f:c1:fa:32:4b:19:fd:80:
44:b3:32:dc:37:09:50:bd:16:a2:67:57:d7:fe:c7:
7d:43:d3:9b:09:e4:f8:13:b6:90:4e:85:b4:d7:af:
ce:77:ae:98:d5:ab:e6:f7:85:39:98:43:7e:69:4c:
82:b7:8c:3b:9d:e9:ff:b1:b5:af:82:6d:83:5e:84:
4f:02:67:9c:88:b3:be:bd:68:51:91:ae:6f:89:d9:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:B2:18:2C:B7:1B:94:1D:85:C7:8A:1B:B6:B1:14:20:FE:B0:17
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CI-yGCy3G5QdhceKG7axFCD-sBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.132.0-46.254.134.255
85.187.14.0/24
85.187.243.0/24
85.187.249.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:1b:92:0b:15:dd:ce:db:99:0d:9d:4e:26:4b:da:c7:ea:fd:
18:78:99:74:e7:08:2a:00:be:c7:6a:26:45:9c:6f:bd:94:c1:
15:50:fd:f9:68:61:13:a6:ff:ec:81:71:05:4f:1a:06:a9:3b:
93:ac:bd:7c:1f:be:25:de:59:ed:8f:ed:c4:f8:77:f5:2a:8e:
48:99:a6:41:18:3d:19:fc:c8:aa:e6:fe:0f:8b:79:1d:26:fb:
5c:2c:d8:65:ab:19:75:06:4a:de:33:75:0f:9e:c3:e7:87:2e:
62:48:2f:90:b6:fb:d4:63:68:2b:31:f9:d2:5a:20:32:e6:01:
3d:b2:23:d7:84:f0:56:0d:64:e6:79:ec:96:14:ef:66:df:2a:
37:53:e9:72:b8:97:54:16:c9:4b:c6:bf:3f:ea:c3:33:6e:c7:
1b:59:86:03:44:db:e2:81:9b:e4:fc:33:d1:01:1d:ec:8f:c1:
ad:3f:db:97:b7:39:e6:00:cc:8b:10:f4:59:3c:db:eb:3a:f7:
a7:da:2f:f2:d6:5e:ce:bd:ba:de:78:ce:90:61:d5:ae:c3:b1:
4f:c4:4f:8c:84:54:ef:22:a1:25:66:4c:92:86:b8:f8:23:d7:
4b:ab:fe:9a:cf:db:a3:84:98:9d:95:bd:5b:98:3f:fd:d7:ce:
40:af:df:20
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVyRs2aAdbvZRPuCs2MeWzdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODhmYjIxODJjYjcxYjk0MWQ4NWM3OGExYmI2YjExNDIwZmViMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBgBTfUjqIqxcT5ZqqAja27gPyz+
KgMrglk9ujfpoxZa/g+ebFAp6g8yZUZ4yJwi3pLb+qkyhGL+oohyOrDiKDHJ89rV
BaWN5YxiBxI5nsAKXaPitmlJTXlkG0CO64fUJg3LOhN2qsPzTAuG0aE2STIAJ7Rj
Z/+Eei8UY+7IYV0Gql3Y26kMLP8un4Id32ZkBPRz26WZFIjKHn5T8SPf7ywKMt2U
D8CcfUVVL8H6MksZ/YBEszLcNwlQvRaiZ1fX/sd9Q9ObCeT4E7aQToW016/Od66Y
1avm94U5mEN+aUyCt4w7nen/sbWvgm2DXoRPAmeciLO+vWhRka5vidnwQwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAiPshgstxuUHYXHihu2sRQg/rAXMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvQ0kteUdDeTNHNVFkaGNlS0c3YXhGQ0Qtc0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAIu/oQD
BAAu/oYDBABVuw4DBABVu/MDBABVu/kwDQYJKoZIhvcNAQELBQADggEBAOMbkgsV
3c7bmQ2dTiZL2sfq/Rh4mXTnCCoAvsdqJkWcb72UwRVQ/floYROm/+yBcQVPGgap
O5OsvXwfviXeWe2P7cT4d/UqjkiZpkEYPRn8yKrm/g+LeR0m+1ws2GWrGXUGSt4z
dQ+ew+eHLmJIL5C2+9RjaCsx+dJaIDLmAT2yI9eE8FYNZOZ57JYU72bfKjdT6XK4
l1QWyUvGvz/qwzNuxxtZhgNE2+KBm+T8M9EBHeyPwa0/25e3OeYAzIsQ9Fk82+s6
96faL/LWXs69ut54zpBh1a7DsU/ET4yEVO8ioSVmTJKGuPgj10ur/prP26OEmJ2V
vVuYP/3XzkCv3yA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org