Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TBrog61yzeCMCDpV81cwvSqlM7U.roa
File: TBrog61yzeCMCDpV81cwvSqlM7U.roa (raw, json)
Hash identifier: 7ZP2fhvDWEI75R1H8hziRkBFSxFGoDRvKLWvIz5JfVM=
Subject key identifier: 4C:1A:E8:83:AD:72:CD:E0:8C:08:3A:55:F3:57:30:BD:2A:A5:33:B5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01881EF5DDE8637AFE80B6AA92929E6F86AD
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TBrog61yzeCMCDpV81cwvSqlM7U.roa
Signing time: Mon 15 May 2023 10:30:09 +0000
ROA not before: Mon 15 May 2023 10:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 46.232.72.0/21 maxlen: 21
46.232.96.0/20 maxlen: 20
46.232.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:f5:dd:e8:63:7a:fe:80:b6:aa:92:92:9e:6f:86:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 15 10:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1ae883ad72cde08c083a55f35730bd2aa533b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:7f:bd:8b:a8:08:64:ea:12:42:d5:56:00:
d1:35:b7:5e:96:84:89:ff:a2:68:76:d2:a2:7b:a7:
f3:e8:a3:8a:b3:76:18:4e:64:59:c7:74:f0:1e:c6:
63:5f:98:77:2f:b4:f1:9c:98:73:74:68:47:f2:b2:
79:60:96:98:ed:4b:6a:bd:1d:e7:09:da:cf:11:43:
08:a2:6b:c3:39:89:cc:b0:54:b4:33:5b:5f:7e:e7:
1f:b2:fb:34:0b:31:65:f6:0e:b9:87:eb:0a:8e:96:
cf:0a:a7:f8:a7:8d:41:d9:b9:36:af:87:c9:3a:3f:
0b:96:c3:b7:97:7d:e3:ac:13:16:be:1b:ab:9b:f1:
7e:a1:40:65:31:d4:ce:34:5f:aa:83:72:50:81:a2:
88:5e:c9:67:70:aa:0a:ef:b0:59:cc:a2:62:8e:2f:
ce:0e:18:65:7c:21:14:3c:de:2e:8e:ca:4d:e0:d1:
c9:ba:cc:aa:87:0a:08:b4:3a:8e:a3:fe:f6:1b:6e:
bb:bc:7e:39:49:99:98:85:c7:93:ca:89:a4:35:1e:
c7:27:20:c8:d6:47:26:82:46:bb:1d:21:bc:8f:66:
06:60:ab:b9:9a:7d:cb:00:ff:d5:3e:3c:48:f0:da:
73:f5:40:b9:a4:67:67:19:96:71:63:60:ce:59:d4:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1A:E8:83:AD:72:CD:E0:8C:08:3A:55:F3:57:30:BD:2A:A5:33:B5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TBrog61yzeCMCDpV81cwvSqlM7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.20.0/22
46.232.72.0/21
46.232.96.0/20
Signature Algorithm: sha256WithRSAEncryption
17:41:e1:92:22:10:cb:12:3a:be:c1:46:65:33:2d:fa:67:46:
89:25:7b:ba:93:e6:59:76:01:79:12:b3:e1:40:fc:53:ae:b9:
88:d6:81:c8:be:b9:42:8f:c7:fd:13:ff:5b:27:a6:a7:46:33:
48:fa:93:c1:71:bd:80:bf:b8:db:b0:e1:18:77:36:ee:36:30:
60:73:6f:90:3f:f4:7e:70:60:b9:a8:e9:05:0d:f1:99:bf:97:
2c:9d:14:2c:65:82:0f:a6:77:34:04:8d:73:21:ae:91:e5:9c:
cc:36:66:d6:b8:af:3e:ce:11:26:b7:a5:67:c4:81:a7:4f:5c:
6a:c6:39:5f:19:a1:a9:89:64:a8:8e:d1:37:f1:03:b4:0d:4f:
af:9a:b2:ec:38:0e:19:d2:cc:16:d6:2a:fb:52:c2:fd:66:71:
9d:c1:f3:13:b9:bf:ef:52:06:f8:43:ad:b9:39:cc:3f:37:cd:
01:8e:fd:f4:4a:e1:66:be:fb:1e:e8:95:df:76:ca:63:1e:69:
1c:ec:f6:b9:6a:2c:62:41:2d:64:91:89:81:15:02:e9:6a:c6:
1b:f4:e1:89:94:36:27:0e:b3:1c:53:a2:80:60:22:1b:21:16:
fd:7f:82:02:fd:f8:1f:f5:d9:7c:5f:7d:18:64:50:75:d2:bb:
96:3a:6b:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYge9d3oY3r+gLaqkpKeb4atMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNTE1MTAzMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzFhZTg4M2FkNzJjZGUwOGMwODNhNTVmMzU3MzBiZDJhYTUzM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTh/vYuoCGTqEkLVVgDRNbdeloSJ
/6JodtKie6fz6KOKs3YYTmRZx3TwHsZjX5h3L7TxnJhzdGhH8rJ5YJaY7UtqvR3n
CdrPEUMIomvDOYnMsFS0M1tffucfsvs0CzFl9g65h+sKjpbPCqf4p41B2bk2r4fJ
Oj8LlsO3l33jrBMWvhurm/F+oUBlMdTONF+qg3JQgaKIXslncKoK77BZzKJiji/O
DhhlfCEUPN4ujspN4NHJusyqhwoItDqOo/72G267vH45SZmYhceTyomkNR7HJyDI
1kcmgka7HSG8j2YGYKu5mn3LAP/VPjxI8Npz9UC5pGdnGZZxY2DOWdRNPQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEwa6IOtcs3gjAg6VfNXML0qpTO1MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvVEJyb2c2MXl6ZUNNQ0RwVjgxY3d2U3FsTTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLugUAwQD
LuhIAwQELuhgMA0GCSqGSIb3DQEBCwUAA4IBAQAXQeGSIhDLEjq+wUZlMy36Z0aJ
JXu6k+ZZdgF5ErPhQPxTrrmI1oHIvrlCj8f9E/9bJ6anRjNI+pPBcb2Av7jbsOEY
dzbuNjBgc2+QP/R+cGC5qOkFDfGZv5csnRQsZYIPpnc0BI1zIa6R5ZzMNmbWuK8+
zhEmt6VnxIGnT1xqxjlfGaGpiWSojtE38QO0DU+vmrLsOA4Z0swW1ir7UsL9ZnGd
wfMTub/vUgb4Q625Ocw/N80Bjv30SuFmvvse6JXfdspjHmkc7Pa5aixiQS1kkYmB
FQLpasYb9OGJlDYnDrMcU6KAYCIbIRb9f4IC/fgf9dl8X30YZFB10ruWOmvW
Generated at Sat Jul 29 21:26:28 2023 by rpki-client on console-fra.rpki-client.org