Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/Fsitdz0IV4Fj71UTlWViUJyFnRk.roa
File: Fsitdz0IV4Fj71UTlWViUJyFnRk.roa (raw, json)
Hash identifier: AZLP6T2ZT3kc3JnhS+qqgyk5R/d1FIPERNmCPftmtTE=
Subject key identifier: 16:C8:AD:77:3D:08:57:81:63:EF:55:13:95:65:62:50:9C:85:9D:19
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0186A0E1FD138D80CEC0576007AC9482A573
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/Fsitdz0IV4Fj71UTlWViUJyFnRk.roa
Signing time: Thu 02 Mar 2023 05:53:30 +0000
ROA not before: Thu 02 Mar 2023 05:53:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39593
IP address blocks: 46.191.180.0/23 maxlen: 23
46.191.180.0/24 maxlen: 24
136.169.210.0/24 maxlen: 24
136.169.210.0/23 maxlen: 23
136.169.208.0/24 maxlen: 24
136.169.208.0/23 maxlen: 23
136.169.211.0/24 maxlen: 24
136.169.208.0/22 maxlen: 22
46.191.181.0/24 maxlen: 24
136.169.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Mar 2023 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a0:e1:fd:13:8d:80:ce:c0:57:60:07:ac:94:82:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Mar 2 05:53:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16c8ad773d08578163ef5513956562509c859d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:ef:c9:62:e0:7b:83:a3:c6:30:5e:e5:10:
59:b5:a7:83:67:6a:ae:5e:30:0d:02:5c:70:6f:5d:
80:53:c5:e7:26:5e:e3:a9:87:60:8f:c6:7b:7d:c9:
1c:93:6c:03:df:ea:83:ef:40:28:e9:dc:87:00:7e:
e3:48:0d:1f:2a:2a:94:4c:d4:b6:2c:98:f2:ab:f7:
fe:fd:81:c1:39:e9:72:65:f6:2d:35:00:d3:7d:26:
0d:e7:8a:37:5e:71:7b:49:24:04:86:93:8b:6f:3f:
73:55:f1:1c:88:da:fc:b9:9d:e8:56:79:4d:c8:3a:
65:22:d0:5f:4c:96:e5:ea:ff:04:f4:ea:2c:3f:80:
5d:31:fe:87:1f:d2:be:03:4d:3a:32:f4:70:80:a6:
e0:e1:75:ce:84:df:3c:ce:8a:cf:6f:ec:65:9f:aa:
5e:a4:ec:ab:16:eb:0c:c7:0c:ec:c6:7e:3c:a9:a9:
56:b9:41:80:dc:41:16:0a:da:4b:50:c1:1d:6a:2f:
48:ff:f8:0e:33:2c:da:56:e5:29:a8:9e:01:89:e1:
38:aa:e7:43:23:b0:a8:6a:c9:50:a4:23:2d:5c:4d:
92:29:ba:5f:bd:a6:8d:52:f9:72:e8:95:a2:74:81:
f2:9c:4a:5e:09:3b:ef:aa:52:0d:45:d4:ab:79:01:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:AD:77:3D:08:57:81:63:EF:55:13:95:65:62:50:9C:85:9D:19
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/Fsitdz0IV4Fj71UTlWViUJyFnRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.180.0/23
136.169.208.0/22
Signature Algorithm: sha256WithRSAEncryption
78:e3:29:92:5b:62:68:58:7f:49:61:24:0c:6f:24:19:3f:b0:
66:5f:0f:41:7f:5d:6f:6c:06:9c:4f:04:5e:e7:41:54:85:be:
f6:05:9a:4c:65:a4:9b:2d:78:32:58:4c:53:43:03:5e:fc:3d:
85:c4:fa:66:b5:3b:fb:a4:75:29:be:00:e2:23:9b:d2:eb:d7:
66:ea:50:e7:30:89:4e:ac:73:72:f6:36:f5:cd:11:29:03:b4:
ae:de:ae:a5:18:96:ef:df:b1:fa:f4:77:29:4b:e1:2e:3c:e1:
13:a4:88:c6:06:51:6a:b5:91:8a:b3:c6:74:16:b6:23:fe:da:
7f:ff:02:2b:4f:3b:94:d3:49:68:15:c6:22:3f:83:aa:54:12:
e5:44:51:6a:8a:58:07:27:3a:21:14:2d:0e:e0:69:7f:80:d7:
78:4a:dc:11:cc:2d:0d:c0:d7:32:7c:2b:f2:14:d7:1c:c9:98:
f1:bf:18:5c:d0:79:e8:2a:cb:01:b7:d8:a6:6c:45:08:af:e8:
65:ed:c0:f5:81:15:64:44:43:34:b3:76:2c:d7:a5:df:1d:77:
a5:0d:91:dc:41:07:ed:86:13:df:01:06:67:46:f2:05:74:96:
52:df:24:25:18:1e:b8:ff:8a:e7:8a:53:7c:8f:f5:4c:36:5d:
92:a1:69:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYag4f0TjYDOwFdgB6yUgqVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjMwMzAyMDU1MzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmM4YWQ3NzNkMDg1NzgxNjNlZjU1MTM5NTY1NjI1MDljODU5ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtivvyWLge4OjxjBe5RBZtaeDZ2qu
XjANAlxwb12AU8XnJl7jqYdgj8Z7fckck2wD3+qD70Ao6dyHAH7jSA0fKiqUTNS2
LJjyq/f+/YHBOelyZfYtNQDTfSYN54o3XnF7SSQEhpOLbz9zVfEciNr8uZ3oVnlN
yDplItBfTJbl6v8E9OosP4BdMf6HH9K+A006MvRwgKbg4XXOhN88zorPb+xln6pe
pOyrFusMxwzsxn48qalWuUGA3EEWCtpLUMEdai9I//gOMyzaVuUpqJ4BieE4qudD
I7CoaslQpCMtXE2SKbpfvaaNUvly6JWidIHynEpeCTvvqlINRdSreQGMvwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBbIrXc9CFeBY+9VE5VlYlCchZ0ZMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvRnNpdGR6MElWNEZqNzFVVGxXVmlVSnlGblJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLr+0AwQC
iKnQMA0GCSqGSIb3DQEBCwUAA4IBAQB44ymSW2JoWH9JYSQMbyQZP7BmXw9Bf11v
bAacTwRe50FUhb72BZpMZaSbLXgyWExTQwNe/D2FxPpmtTv7pHUpvgDiI5vS69dm
6lDnMIlOrHNy9jb1zREpA7Su3q6lGJbv37H69HcpS+EuPOETpIjGBlFqtZGKs8Z0
FrYj/tp//wIrTzuU00loFcYiP4OqVBLlRFFqilgHJzohFC0O4Gl/gNd4StwRzC0N
wNcyfCvyFNccyZjxvxhc0HnoKssBt9imbEUIr+hl7cD1gRVkREM0s3Ys16XfHXel
DZHcQQfthhPfAQZnRvIFdJZS3yQlGB64/4rnilN8j/VMNl2SoWlQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org