Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9_PNHBI1lvsSNmLgq90RgVkCKfM.roa
File: 9_PNHBI1lvsSNmLgq90RgVkCKfM.roa (raw, json)
Hash identifier: GK3GjFp0lQL2dk2on3gQwloCXQoC6tK7HDFwb8DANww=
Subject key identifier: F7:F3:CD:1C:12:35:96:FB:12:36:62:E0:AB:DD:11:81:59:02:29:F3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719559A803E7C0D90560E0D1EABBC032
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9_PNHBI1lvsSNmLgq90RgVkCKfM.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35251
IP address blocks: 46.3.112.0/23 maxlen: 24
46.3.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:59:a8:03:e7:c0:d9:05:60:e0:d1:ea:bb:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7f3cd1c123596fb123662e0abdd1181590229f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:0f:7b:84:2e:59:46:d7:d7:a4:a1:fc:8c:
fa:5e:7a:06:d1:b8:38:90:c2:6c:1f:d0:e3:3b:4e:
d0:ee:d5:0a:0d:0d:46:7e:36:6b:92:5d:a2:5b:06:
15:be:0a:b7:dd:2b:c0:4c:11:b0:b6:7f:ab:28:c4:
97:bc:cc:72:bf:9e:cb:c7:8b:cc:90:65:f0:78:d4:
af:ed:a9:33:71:67:f7:30:cf:4f:f4:8f:50:ab:8f:
f8:94:2a:29:46:de:1f:0f:f1:b8:b9:da:68:82:ba:
05:f3:42:ee:78:43:8a:a5:7d:38:44:5a:b5:91:e6:
e2:ba:1b:1f:a0:34:33:c4:f4:06:19:e1:f9:34:46:
a1:d6:35:36:25:8e:3b:6d:34:0d:ec:d3:1e:d1:56:
53:5d:cb:f2:a9:5c:3e:1f:e2:2c:22:6e:dd:8c:d9:
25:56:a4:d4:68:83:6b:e4:fe:c4:d1:88:4f:d5:c3:
60:e6:2f:4f:17:f0:6c:df:32:f7:69:91:29:6a:36:
e2:70:f9:e6:9e:c4:4c:1e:bd:b7:0b:99:c7:41:8b:
ad:ea:72:4e:44:4c:4b:70:df:cb:54:a7:22:bf:fd:
b6:f5:c0:c6:62:15:02:64:62:7f:9c:79:d7:8a:4c:
d4:7c:18:03:3c:03:e9:9b:a0:0d:5c:15:29:09:b9:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F3:CD:1C:12:35:96:FB:12:36:62:E0:AB:DD:11:81:59:02:29:F3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/9_PNHBI1lvsSNmLgq90RgVkCKfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/22
Signature Algorithm: sha256WithRSAEncryption
73:19:94:77:8b:f0:db:6c:7e:90:87:90:81:2d:92:26:f8:6c:
a4:4d:66:16:08:30:5d:28:aa:1f:0a:15:07:29:bc:0e:79:ef:
34:08:7a:08:3d:22:cb:89:19:24:67:8f:82:22:a9:35:0e:5c:
0f:7e:f3:ea:c4:07:27:79:f8:f5:2a:89:24:b2:44:9c:8c:58:
55:0e:c2:6e:6f:1a:1d:91:3a:0d:ca:4a:44:d3:b3:b4:37:26:
06:6f:f2:9a:f3:6e:9a:5a:d5:42:5d:c9:3c:1f:cb:03:39:8e:
c2:0a:54:e3:7a:5a:66:3d:0a:4c:c7:03:c3:2c:19:66:74:aa:
3a:29:d9:7d:f9:25:c7:98:70:be:21:f2:c2:8a:8a:f6:f9:fc:
91:c9:8d:40:2e:56:b0:82:87:e7:50:db:30:e9:ac:d3:d6:c9:
0f:41:b9:44:8c:ca:ad:10:26:9a:b0:ac:24:f0:81:b9:f3:c1:
a6:7e:e8:42:3f:22:72:18:bc:66:5a:c8:84:46:66:17:33:75:
ec:26:76:a5:5e:7a:96:73:d2:87:2c:ad:52:55:02:d9:1a:d2:
de:ed:b6:7b:b9:3e:09:c3:7d:57:4d:cf:f7:a0:0b:2b:e3:1c:
68:2d:1e:73:10:90:df:07:cc:5d:e7:04:c7:b7:7f:16:20:3c:
4e:93:ea:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlVmoA+fA2QVg4NHqu8AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2YzY2QxYzEyMzU5NmZiMTIzNjYyZTBhYmRkMTE4MTU5MDIyOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxQPe4QuWUbX16Sh/Iz6XnoG0bg4
kMJsH9DjO07Q7tUKDQ1GfjZrkl2iWwYVvgq33SvATBGwtn+rKMSXvMxyv57Lx4vM
kGXweNSv7akzcWf3MM9P9I9Qq4/4lCopRt4fD/G4udpogroF80LueEOKpX04RFq1
kebiuhsfoDQzxPQGGeH5NEah1jU2JY47bTQN7NMe0VZTXcvyqVw+H+IsIm7djNkl
VqTUaINr5P7E0YhP1cNg5i9PF/Bs3zL3aZEpajbicPnmnsRMHr23C5nHQYut6nJO
RExLcN/LVKciv/229cDGYhUCZGJ/nHnXikzUfBgDPAPpm6ANXBUpCbmpcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPfzzRwSNZb7EjZi4KvdEYFZAinzMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvOV9QTkhCSTFsdnNTTm1MZ3E5MFJnVmtDS2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLgNwMA0G
CSqGSIb3DQEBCwUAA4IBAQBzGZR3i/DbbH6Qh5CBLZIm+GykTWYWCDBdKKofChUH
KbwOee80CHoIPSLLiRkkZ4+CIqk1DlwPfvPqxAcnefj1KokkskScjFhVDsJubxod
kToNykpE07O0NyYGb/Ka826aWtVCXck8H8sDOY7CClTjelpmPQpMxwPDLBlmdKo6
Kdl9+SXHmHC+IfLCior2+fyRyY1ALlawgofnUNsw6azT1skPQblEjMqtECaasKwk
8IG588GmfuhCPyJyGLxmWsiERmYXM3XsJnalXnqWc9KHLK1SVQLZGtLe7bZ7uT4J
w31XTc/3oAsr4xxoLR5zEJDfB8xd5wTHt38WIDxOk+ox
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org