Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F_lIYRIAcdZDlp7KbBiH_cmWYts.roa
File: F_lIYRIAcdZDlp7KbBiH_cmWYts.roa (raw, json)
Hash identifier: YULpOOeunf6UUP3SSFIqi7uk8F+BbQw8DUw+/P8fk+c=
Subject key identifier: 17:F9:48:61:12:00:71:D6:43:96:9E:CA:6C:18:87:FD:C9:96:62:DB
Certificate issuer: /CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Certificate serial: 01867CEFD2C0C78F1516A1B712DE9BA4D029
Authority key identifier: 6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F_lIYRIAcdZDlp7KbBiH_cmWYts.roa
Signing time: Thu 23 Feb 2023 06:22:17 +0000
ROA not before: Thu 23 Feb 2023 06:22:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 46.226.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7c:ef:d2:c0:c7:8f:15:16:a1:b7:12:de:9b:a4:d0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e8e9da43dfc793d4d5488097b4001ba40941904
Validity
Not Before: Feb 23 06:22:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f94861120071d643969eca6c1887fdc99662db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:43:d0:59:f7:54:78:5f:3a:92:1f:0a:bc:
09:02:96:1b:f0:21:58:3d:55:4b:6e:01:ba:03:ac:
0c:1a:58:0d:da:bc:58:17:dd:3e:75:f0:a8:60:b6:
61:25:fd:36:76:d9:81:b8:8d:9f:a9:99:9e:6c:15:
05:12:71:aa:ea:e6:da:b6:e7:20:3e:82:c7:d9:ea:
c6:b8:73:1a:fb:ff:28:28:d2:56:34:a3:b9:e0:2a:
56:0b:c0:3c:80:70:09:06:dc:98:69:f3:d7:47:84:
92:97:b6:d3:33:f1:93:8c:91:ea:7c:ec:ef:f7:5c:
8b:04:b4:d2:57:00:75:1e:76:2f:ad:33:f2:aa:ff:
a9:30:43:79:43:1a:14:91:1f:e1:01:da:b1:88:27:
0a:54:21:1e:0b:8e:3f:55:48:a0:7e:8e:74:33:d2:
1e:55:08:ab:b6:b5:6c:71:56:fa:9f:17:78:f7:22:
31:6b:fa:24:ed:98:8d:1c:9e:a3:e4:f2:a9:72:10:
e2:52:8b:63:72:52:d0:07:d3:89:f3:cf:a7:e3:87:
bd:85:90:f7:4e:88:37:bd:57:4b:3a:c4:99:f6:8a:
61:2c:08:6a:3a:d9:33:86:da:39:6e:76:7b:27:88:
12:41:79:fc:3f:b0:18:30:92:fb:ba:55:d1:bd:f7:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:48:61:12:00:71:D6:43:96:9E:CA:6C:18:87:FD:C9:96:62:DB
X509v3 Authority Key Identifier:
keyid:6E:8E:9D:A4:3D:FC:79:3D:4D:54:88:09:7B:40:01:BA:40:94:19:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bo6dpD38eT1NVIgJe0ABukCUGQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/F_lIYRIAcdZDlp7KbBiH_cmWYts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e16024-f7d1-4875-9efb-107056d8869e/1/bo6dpD38eT1NVIgJe0ABukCUGQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.124.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9d:a3:64:a8:fb:c5:dc:19:df:5a:34:43:f6:74:3d:f1:a1:
e3:17:c4:d2:48:37:57:ef:90:6d:27:08:93:23:6d:be:30:5d:
47:22:6a:67:4d:17:bf:b5:17:37:8a:91:b2:fd:f4:ee:52:9a:
98:44:66:ad:4d:ba:58:c9:4f:91:0a:25:82:00:9d:17:35:b2:
a7:9e:1a:b0:7c:10:ab:69:ea:89:ce:8f:35:e5:05:b4:50:23:
2b:67:28:fa:ba:11:3d:20:c6:d1:6f:63:d0:b7:9d:ac:3b:91:
37:a1:30:ad:b5:4c:de:d7:a6:4d:76:33:9f:79:06:5a:25:cd:
a4:49:2f:df:34:e8:38:31:75:3a:5f:84:5b:0b:06:ec:1e:a4:
b2:88:8f:c5:e2:18:e5:11:76:84:42:33:f8:e5:5e:8a:76:ad:
1a:4a:68:40:4f:5d:df:ab:9f:cc:ce:87:99:38:cf:6c:65:6d:
79:cf:1b:3e:9f:60:69:3a:39:26:53:35:41:64:3c:88:ec:14:
91:a8:8c:ac:b3:ee:2f:c5:56:02:b0:84:fa:62:fd:bf:19:d5:
4e:26:1b:05:fe:3f:d9:fa:7b:bf:b1:8f:26:98:a8:c3:e0:cd:
07:e2:8e:38:94:d0:f4:50:46:9d:57:41:ff:74:e5:e0:b2:22:
82:02:e6:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ879LAx48VFqG3Et6bpNApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOGU5ZGE0M2RmYzc5M2Q0ZDU0ODgwOTdiNDAwMWJhNDA5
NDE5MDQwHhcNMjMwMjIzMDYyMjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Y5NDg2MTEyMDA3MWQ2NDM5NjllY2E2YzE4ODdmZGM5OTY2MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA769D0Fn3VHhfOpIfCrwJApYb8CFY
PVVLbgG6A6wMGlgN2rxYF90+dfCoYLZhJf02dtmBuI2fqZmebBUFEnGq6ubatucg
PoLH2erGuHMa+/8oKNJWNKO54CpWC8A8gHAJBtyYafPXR4SSl7bTM/GTjJHqfOzv
91yLBLTSVwB1HnYvrTPyqv+pMEN5QxoUkR/hAdqxiCcKVCEeC44/VUigfo50M9Ie
VQirtrVscVb6nxd49yIxa/ok7ZiNHJ6j5PKpchDiUotjclLQB9OJ88+n44e9hZD3
Tog3vVdLOsSZ9ophLAhqOtkzhto5bnZ7J4gSQXn8P7AYMJL7ulXRvffTkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBf5SGESAHHWQ5aeymwYh/3JlmLbMB8GA1UdIwQY
MBaAFG6OnaQ9/Hk9TVSICXtAAbpAlBkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm82ZHBEMzhlVDFOVklnSmUwQUJ1a0NVR1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMTYwMjQtZjdkMS00ODc1LTllZmIt
MTA3MDU2ZDg4NjllLzEvRl9sSVlSSUFjZFpEbHA3S2JCaUhfY21XWXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lMTYwMjQtZjdkMS00ODc1LTllZmItMTA3MDU2ZDg4Njll
LzEvYm82ZHBEMzhlVDFOVklnSmUwQUJ1a0NVR1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuJ8MA0G
CSqGSIb3DQEBCwUAA4IBAQCDnaNkqPvF3BnfWjRD9nQ98aHjF8TSSDdX75BtJwiT
I22+MF1HImpnTRe/tRc3ipGy/fTuUpqYRGatTbpYyU+RCiWCAJ0XNbKnnhqwfBCr
aeqJzo815QW0UCMrZyj6uhE9IMbRb2PQt52sO5E3oTCttUze16ZNdjOfeQZaJc2k
SS/fNOg4MXU6X4RbCwbsHqSyiI/F4hjlEXaEQjP45V6Kdq0aSmhAT13fq5/MzoeZ
OM9sZW15zxs+n2BpOjkmUzVBZDyI7BSRqIyss+4vxVYCsIT6Yv2/GdVOJhsF/j/Z
+nu/sY8mmKjD4M0H4o44lND0UEadV0H/dOXgsiKCAubk
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-ams.rpki-client.org