Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8F-dI_j9yIeh81rpD0y7UNCkwnY.roa
File: 8F-dI_j9yIeh81rpD0y7UNCkwnY.roa (raw, json)
Hash identifier: 9Bat3rSbw0jGLlxVZNmyFpIjfD5KbXURbTaEG2bF5b8=
Subject key identifier: F0:5F:9D:23:F8:FD:C8:87:A1:F3:5A:E9:0F:4C:BB:50:D0:A4:C2:76
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955CAD518120E8ADDC84F50647C934
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8F-dI_j9yIeh81rpD0y7UNCkwnY.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.3.0.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5c:ad:51:81:20:e8:ad:dc:84:f5:06:47:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05f9d23f8fdc887a1f35ae90f4cbb50d0a4c276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:59:e5:f0:0f:e1:f3:53:3e:02:ee:42:aa:
0d:f1:e3:19:c7:20:50:8e:13:d5:6b:60:0c:3b:84:
7b:fa:1d:35:7f:a1:25:ab:73:b3:c3:75:3b:80:8f:
f8:00:4e:05:e4:ec:8f:cd:f6:4e:a4:94:64:68:f6:
4c:3c:b7:ce:e2:54:2f:78:45:1a:a3:23:2d:0e:f8:
04:10:c2:b5:34:5e:21:68:28:fd:ef:92:34:ec:ac:
72:f0:d4:8d:5b:b4:72:bc:31:6e:cb:d6:b3:d1:f6:
07:a6:aa:19:1b:14:8d:a6:cd:79:e3:62:36:dd:75:
47:56:e8:49:c7:14:c4:3b:d4:6a:74:d0:8d:5f:25:
69:26:40:e8:50:21:ea:03:30:e0:1f:da:07:9a:94:
2c:6d:9d:17:ed:1d:ea:8b:d7:60:0c:59:36:8c:75:
6e:1e:5d:ae:ee:93:42:8d:94:7f:5b:ec:d0:e3:dd:
6d:2b:19:f0:28:69:76:8a:e8:c2:13:6b:a4:5e:8f:
3d:1e:91:b4:06:1e:d6:53:22:cb:18:82:ef:0f:ad:
50:6b:be:4d:89:e6:45:a2:db:1b:07:34:1d:2e:09:
c4:b3:98:4d:cf:04:ee:e1:9a:ca:54:64:f0:20:37:
5e:4b:2d:f4:3a:3c:dd:ed:ca:4e:a9:4f:1a:f7:2f:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:9D:23:F8:FD:C8:87:A1:F3:5A:E9:0F:4C:BB:50:D0:A4:C2:76
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8F-dI_j9yIeh81rpD0y7UNCkwnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
45:d9:59:d5:8a:14:b3:de:cf:28:df:55:fc:ba:0b:be:b2:b4:
13:f2:5f:69:f4:e5:17:c0:a5:bd:6e:60:01:aa:26:6c:c0:d1:
75:54:31:e7:cb:02:a0:aa:fd:60:9c:11:bc:16:fd:f0:c2:5c:
a0:a8:f9:64:d8:fc:10:62:b5:2b:7d:07:75:eb:04:a9:fa:5a:
56:e1:c6:83:3e:8a:56:1f:34:2e:6e:f2:85:70:9e:ac:5b:17:
b2:64:2e:35:1b:45:07:8d:7e:f8:f7:33:fc:2e:88:81:b1:73:
53:9a:d8:97:a5:0f:74:ec:49:dd:49:ee:89:f7:9f:7f:54:e8:
7d:79:7a:43:6b:8d:a9:0d:94:77:25:ab:22:64:1d:cb:13:c8:
d2:62:0c:7c:5b:81:83:7e:1f:55:76:01:0f:58:aa:66:a2:4d:
99:ae:8f:60:03:86:a3:a1:3a:c1:f1:57:27:fd:8b:54:b9:e6:
63:1e:38:b0:35:2c:4d:f7:56:ad:1b:29:45:0f:ec:63:19:4e:
70:74:22:88:d8:1e:7f:a1:e4:4e:f2:61:34:71:7d:87:d0:d7:
bf:11:62:0f:89:5a:d0:8a:e9:9f:9c:d5:17:ad:23:65:31:3d:
88:7c:69:98:48:24:d0:03:02:71:2c:97:85:ee:57:b9:25:de:
a6:78:95:4c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVxlVytUYEg6K3chPUGR8k0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDVmOWQyM2Y4ZmRjODg3YTFmMzVhZTkwZjRjYmI1MGQwYTRjMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRZ5fAP4fNTPgLuQqoN8eMZxyBQ
jhPVa2AMO4R7+h01f6Elq3Ozw3U7gI/4AE4F5OyPzfZOpJRkaPZMPLfO4lQveEUa
oyMtDvgEEMK1NF4haCj975I07Kxy8NSNW7RyvDFuy9az0fYHpqoZGxSNps1542I2
3XVHVuhJxxTEO9RqdNCNXyVpJkDoUCHqAzDgH9oHmpQsbZ0X7R3qi9dgDFk2jHVu
Hl2u7pNCjZR/W+zQ491tKxnwKGl2iujCE2ukXo89HpG0Bh7WUyLLGILvD61Qa75N
ieZFotsbBzQdLgnEs5hNzwTu4ZrKVGTwIDdeSy30Ojzd7cpOqU8a9y9UNwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPBfnSP4/ciHofNa6Q9Mu1DQpMJ2MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvOEYtZElfajl5SWVoODFycEQweTdVTkNrd25ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLgMAAwQE
LgNgAwQELugwMA0GCSqGSIb3DQEBCwUAA4IBAQBF2VnVihSz3s8o31X8ugu+srQT
8l9p9OUXwKW9bmABqiZswNF1VDHnywKgqv1gnBG8Fv3wwlygqPlk2PwQYrUrfQd1
6wSp+lpW4caDPopWHzQubvKFcJ6sWxeyZC41G0UHjX749zP8LoiBsXNTmtiXpQ90
7EndSe6J959/VOh9eXpDa42pDZR3JasiZB3LE8jSYgx8W4GDfh9VdgEPWKpmok2Z
ro9gA4ajoTrB8Vcn/YtUueZjHjiwNSxN91atGylFD+xjGU5wdCKI2B5/oeRO8mE0
cX2H0Ne/EWIPiVrQiumfnNUXrSNlMT2IfGmYSCTQAwJxLJeF7le5Jd6meJVM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org