Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0d1-l33nowbDILYa0FfOhmE_jyE.roa
File: 0d1-l33nowbDILYa0FfOhmE_jyE.roa (raw, json)
Hash identifier: 4MHyrlhkPLPrTk2O2h8HfysC9dP5MQfJqrNNUTrNVb4=
Subject key identifier: D1:DD:7E:97:7D:E7:A3:06:C3:20:B6:1A:D0:57:CE:86:61:3F:8F:21
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857195571FBB9B24C57D33E52CCB8A12BB
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0d1-l33nowbDILYa0FfOhmE_jyE.roa
Signing time: Mon 02 Jan 2023 08:24:50 +0000
ROA not before: Mon 02 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9833
IP address blocks: 46.232.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:57:1f:bb:9b:24:c5:7d:33:e5:2c:cb:8a:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1dd7e977de7a306c320b61ad057ce86613f8f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:66:ec:19:a4:72:a5:9f:c7:59:04:a8:24:b5:
4f:29:c1:68:32:cf:ec:15:ce:aa:20:07:4f:f9:3c:
8c:29:ca:6a:27:89:74:f3:0c:4f:b4:38:b1:2b:bc:
2a:3e:1e:ee:6b:9a:93:e8:84:17:8c:9f:11:6a:da:
b7:93:fa:03:52:c6:2c:bb:45:f9:a1:12:c3:9e:64:
eb:84:d0:40:e3:7a:73:06:b3:48:1b:6f:2e:c2:d8:
ef:d3:68:e2:82:cb:b4:6e:90:f0:f0:2e:ad:bc:23:
2a:c8:ae:59:f7:9a:96:95:31:11:cc:8a:8a:83:c0:
26:1d:9b:a2:57:44:fa:d3:ff:3d:c1:63:37:ec:99:
0c:d9:0c:c1:be:f7:b9:14:71:9e:7a:61:cc:2a:4d:
26:f2:ae:72:db:0d:3a:a0:78:7b:d1:7b:26:f2:d5:
6e:e4:22:ba:59:2d:7b:36:64:61:b3:af:29:e3:69:
e5:7a:c7:79:3b:2d:74:e0:03:2b:1e:f9:6c:ac:b9:
92:e1:a9:c6:d9:00:85:9e:5b:f4:77:0d:ab:89:ba:
50:a7:01:b7:57:0e:f5:29:5a:8d:33:09:bc:5f:5a:
97:d3:d2:ff:b5:43:89:93:3e:ee:5d:40:0e:56:7a:
d3:c3:d1:e3:1d:35:82:94:85:80:71:41:a7:17:c6:
d5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:7E:97:7D:E7:A3:06:C3:20:B6:1A:D0:57:CE:86:61:3F:8F:21
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0d1-l33nowbDILYa0FfOhmE_jyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.123.0/24
Signature Algorithm: sha256WithRSAEncryption
08:a4:e6:75:01:e2:e9:5b:2a:33:70:a1:27:0e:3e:a4:e3:8c:
60:60:11:fd:cc:52:81:2e:99:2b:1d:5e:a8:7c:f9:44:c3:19:
33:8f:7e:ae:8a:57:79:80:87:4a:19:64:96:79:7d:80:cb:b2:
6d:c2:b6:f5:ac:9a:03:5b:ee:54:9f:8e:8f:cf:eb:8f:11:51:
17:64:2b:89:01:3e:90:90:34:7d:e4:b5:c6:3e:f2:88:0d:08:
7f:3b:ed:dd:10:1f:32:7f:df:1f:46:c5:0e:a7:2d:e2:ff:e2:
19:c2:83:1c:b0:9f:22:d9:a5:41:2a:dd:03:17:6a:e7:00:d0:
7f:47:9a:ba:fe:6e:f2:f5:4e:a8:10:9e:59:e5:a6:47:76:de:
87:57:52:52:a8:20:86:d7:c5:ca:28:08:09:56:af:00:0f:87:
8d:09:0d:6d:9f:a3:a4:e2:b0:43:e5:48:74:fc:2b:4d:2a:ef:
37:b8:f3:2d:69:5f:62:c3:5b:73:f6:f8:6f:92:d2:07:97:35:
ec:5c:71:4e:07:d2:4c:17:e9:35:a5:c5:39:71:63:d1:43:a8:
b8:88:57:84:56:7e:77:97:c2:c5:88:53:ac:62:09:60:56:43:
ab:94:f0:18:fa:60:ae:6b:c5:dc:84:31:01:92:f2:27:8f:25:
ac:93:f9:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlVcfu5skxX0z5SzLihK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWRkN2U5NzdkZTdhMzA2YzMyMGI2MWFkMDU3Y2U4NjYxM2Y4ZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimbsGaRypZ/HWQSoJLVPKcFoMs/s
Fc6qIAdP+TyMKcpqJ4l08wxPtDixK7wqPh7ua5qT6IQXjJ8Ratq3k/oDUsYsu0X5
oRLDnmTrhNBA43pzBrNIG28uwtjv02jigsu0bpDw8C6tvCMqyK5Z95qWlTERzIqK
g8AmHZuiV0T60/89wWM37JkM2QzBvve5FHGeemHMKk0m8q5y2w06oHh70Xsm8tVu
5CK6WS17NmRhs68p42nlesd5Oy104AMrHvlsrLmS4anG2QCFnlv0dw2ribpQpwG3
Vw71KVqNMwm8X1qX09L/tUOJkz7uXUAOVnrTw9HjHTWClIWAcUGnF8bVEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNHdfpd956MGwyC2GtBXzoZhP48hMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvMGQxLWwzM25vd2JESUxZYTBGZk9obUVfanlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuh7MA0G
CSqGSIb3DQEBCwUAA4IBAQAIpOZ1AeLpWyozcKEnDj6k44xgYBH9zFKBLpkrHV6o
fPlEwxkzj36uild5gIdKGWSWeX2Ay7Jtwrb1rJoDW+5Un46Pz+uPEVEXZCuJAT6Q
kDR95LXGPvKIDQh/O+3dEB8yf98fRsUOpy3i/+IZwoMcsJ8i2aVBKt0DF2rnANB/
R5q6/m7y9U6oEJ5Z5aZHdt6HV1JSqCCG18XKKAgJVq8AD4eNCQ1tn6Ok4rBD5Uh0
/CtNKu83uPMtaV9iw1tz9vhvktIHlzXsXHFOB9JMF+k1pcU5cWPRQ6i4iFeEVn53
l8LFiFOsYglgVkOrlPAY+mCua8XchDEBkvInjyWsk/lS
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org