Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TNrr9KiBj_CgHL-7w7vu3382HY8.roa
File: TNrr9KiBj_CgHL-7w7vu3382HY8.roa (raw, json)
Hash identifier: cXuRciRsp35YnSHKFJb7DCG2s03TTaEx+R0SZ0Zp5+Y=
Subject key identifier: 4C:DA:EB:F4:A8:81:8F:F0:A0:1C:BF:BB:C3:BB:EE:DF:7F:36:1D:8F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955DEB6065EDB408B8181E18BB92A9
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TNrr9KiBj_CgHL-7w7vu3382HY8.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54197
IP address blocks: 46.3.80.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5d:eb:60:65:ed:b4:08:b8:18:1e:18:bb:92:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cdaebf4a8818ff0a01cbfbbc3bbeedf7f361d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:b1:56:fe:9b:f2:3f:85:80:22:a2:1c:3d:
78:44:b9:18:e9:0a:3f:7e:1a:3c:19:70:24:b9:97:
3c:be:9f:dc:1c:c9:80:a1:78:09:0d:68:9c:67:a2:
bd:06:2f:e2:de:40:e0:2e:69:a7:c3:69:5a:27:71:
f0:61:4c:be:d8:07:33:76:55:35:ef:8e:f7:4a:63:
9a:2b:d0:ed:30:5b:a5:48:e4:8e:ea:89:be:a6:71:
f5:10:bd:72:b6:c1:57:d3:af:33:4f:83:3c:13:e9:
ae:d9:14:05:bf:2e:c6:69:13:b1:02:c6:58:bb:0d:
7a:ae:3f:51:24:fa:a5:76:1c:73:78:83:53:0b:a4:
2e:ab:ff:41:2a:87:8d:71:9b:3b:db:f1:42:35:bb:
5b:ec:60:51:e6:24:e4:ae:68:23:4c:d6:bf:c6:c2:
e0:9c:8b:2d:2f:11:6f:b0:5f:3b:dd:ee:69:38:4b:
1f:f0:03:41:21:3d:93:a0:1b:3c:50:ba:3b:a9:c1:
71:4f:49:3f:21:84:f9:a5:09:c6:fd:53:7d:73:72:
17:4e:f8:13:a4:b3:f1:f3:56:3d:bf:fa:23:51:3f:
a5:9e:84:4d:1c:d7:59:7f:a6:68:80:50:8d:14:ca:
91:dc:db:07:ef:6c:2c:cd:73:47:1d:f3:20:45:f4:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DA:EB:F4:A8:81:8F:F0:A0:1C:BF:BB:C3:BB:EE:DF:7F:36:1D:8F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/TNrr9KiBj_CgHL-7w7vu3382HY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
Signature Algorithm: sha256WithRSAEncryption
97:af:26:c0:38:fa:eb:7d:6f:44:bf:91:c7:a2:54:bb:00:6d:
98:32:31:b0:97:07:89:8b:e8:45:e1:73:2a:8b:71:e0:89:c9:
9a:fb:58:b2:bb:b2:1c:c8:35:51:5d:1a:d6:e6:ce:c4:ec:c6:
a4:7b:c0:a5:8c:45:3b:f0:a5:d7:6f:60:ce:4c:a3:9e:95:39:
c0:f9:68:42:05:83:d9:5c:60:61:2a:7b:9e:f0:7d:24:1b:28:
0f:93:42:33:45:28:28:d4:70:17:8d:c7:be:28:30:3a:5a:b4:
2c:cd:2a:12:b6:11:a0:01:42:0a:dc:3f:d5:48:68:c6:4d:b9:
38:35:f1:c5:6c:97:aa:b0:9e:d2:32:f1:f4:6a:06:79:82:c3:
9c:33:c4:4b:da:e6:48:29:6e:0a:c3:05:48:13:aa:8c:84:5b:
7c:6b:7a:80:5b:08:50:36:a8:21:f1:90:39:d1:e3:c8:ca:c1:
bc:0f:2e:fd:e6:25:7f:38:12:16:c5:62:74:f6:ba:da:96:48:
a1:5f:df:6f:74:4f:1d:96:a1:e1:cc:c2:c7:c3:9a:5b:a2:19:
9a:24:46:15:97:ac:8d:64:5e:a0:0b:7b:8f:e9:ec:8c:c5:be:
cf:89:03:7d:13:e4:7a:2c:e2:76:53:4f:44:06:15:5d:5a:d5:
cf:ab:70:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlV3rYGXttAi4GB4Yu5KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2RhZWJmNGE4ODE4ZmYwYTAxY2JmYmJjM2JiZWVkZjdmMzYxZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKaxVv6b8j+FgCKiHD14RLkY6Qo/
fho8GXAkuZc8vp/cHMmAoXgJDWicZ6K9Bi/i3kDgLmmnw2laJ3HwYUy+2AczdlU1
7473SmOaK9DtMFulSOSO6om+pnH1EL1ytsFX068zT4M8E+mu2RQFvy7GaROxAsZY
uw16rj9RJPqldhxzeINTC6Quq/9BKoeNcZs72/FCNbtb7GBR5iTkrmgjTNa/xsLg
nIstLxFvsF873e5pOEsf8ANBIT2ToBs8ULo7qcFxT0k/IYT5pQnG/VN9c3IXTvgT
pLPx81Y9v/ojUT+lnoRNHNdZf6ZogFCNFMqR3NsH72wszXNHHfMgRfSThwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEza6/SogY/woBy/u8O77t9/Nh2PMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvVE5ycjlLaUJqX0NnSEwtN3c3dnUzMzgySFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLgNQMA0G
CSqGSIb3DQEBCwUAA4IBAQCXrybAOPrrfW9Ev5HHolS7AG2YMjGwlweJi+hF4XMq
i3Hgicma+1iyu7IcyDVRXRrW5s7E7Make8CljEU78KXXb2DOTKOelTnA+WhCBYPZ
XGBhKnue8H0kGygPk0IzRSgo1HAXjce+KDA6WrQszSoSthGgAUIK3D/VSGjGTbk4
NfHFbJeqsJ7SMvH0agZ5gsOcM8RL2uZIKW4KwwVIE6qMhFt8a3qAWwhQNqgh8ZA5
0ePIysG8Dy795iV/OBIWxWJ09rralkihX99vdE8dlqHhzMLHw5pbohmaJEYVl6yN
ZF6gC3uP6eyMxb7PiQN9E+R6LOJ2U09EBhVdWtXPq3DX
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org