Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rSSRtv8FfIzZbZqSFiifUB7zfuU.roa
File: rSSRtv8FfIzZbZqSFiifUB7zfuU.roa (raw, json)
Hash identifier: YJgkhGC1+o/qW3oJ81VfmGSklHwRJIQvUjNi+iQWdFE=
Subject key identifier: AD:24:91:B6:FF:05:7C:8C:D9:6D:9A:92:16:28:9F:50:1E:F3:7E:E5
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955B1B066E5F0825928CD48225E2B2
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rSSRtv8FfIzZbZqSFiifUB7zfuU.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 46.3.164.0/22 maxlen: 22
46.232.112.0/21 maxlen: 24
46.232.124.0/22 maxlen: 24
46.232.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5b:1b:06:6e:5f:08:25:92:8c:d4:82:25:e2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad2491b6ff057c8cd96d9a9216289f501ef37ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:3e:26:93:0d:00:f6:60:85:ad:28:96:43:
e4:59:29:eb:3e:24:cf:b5:58:87:5c:6f:e1:6f:f6:
13:3f:a0:a8:ea:2f:06:5e:18:c4:21:40:30:b5:68:
df:73:3d:ad:51:35:73:0c:87:11:b9:03:c4:57:39:
f4:80:3e:3d:b1:66:c2:90:25:26:a2:3c:3f:48:f7:
4a:ad:84:ad:a6:0f:b7:ca:82:96:05:3e:c2:15:f1:
32:bd:e8:db:9b:89:4c:27:e7:ac:5e:32:b2:aa:d7:
01:ce:39:78:43:91:d9:a0:ad:c8:5e:82:6f:c4:82:
1c:2b:70:d5:7e:8d:28:2d:84:f2:95:7b:51:31:fe:
02:e5:2b:9c:9f:96:20:7f:f0:32:86:d0:cf:e0:2c:
6a:35:18:47:1e:de:a2:48:56:7b:06:86:eb:e8:35:
bb:f7:ed:c9:97:b0:19:bf:db:51:2e:28:b8:1d:f6:
ec:13:b8:e5:c8:a7:a0:71:d7:1c:3b:3d:3c:de:4e:
a8:6e:b1:c7:db:d1:e7:6a:a0:c8:bd:9c:de:2a:29:
8d:3f:b6:a7:c1:e7:fc:71:6f:a9:8f:d3:9a:b3:d0:
6b:d9:b8:9e:16:66:d8:83:96:f9:89:33:7f:56:96:
dc:d1:5e:9b:84:53:e0:5a:02:27:6b:25:83:88:e3:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:24:91:B6:FF:05:7C:8C:D9:6D:9A:92:16:28:9F:50:1E:F3:7E:E5
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/rSSRtv8FfIzZbZqSFiifUB7zfuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.164.0/22
46.232.16.0/22
46.232.112.0/21
46.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:ad:73:df:76:46:87:47:cb:66:62:aa:17:cb:05:fe:cc:03:
c3:a9:7c:23:85:a0:b8:50:ce:90:fe:e6:35:ed:60:00:0a:53:
c6:5f:3d:ac:b2:4b:20:75:5b:cf:c6:6f:dd:9b:38:7c:33:5f:
cb:e7:5d:18:5c:42:83:54:37:8c:f9:de:89:7c:48:ef:37:7f:
7c:5f:22:cb:0c:89:e1:83:44:ae:c7:5b:7a:b5:66:0f:09:8f:
50:86:cc:07:46:2b:7f:d1:a1:f9:66:ac:0f:89:78:a8:bc:a6:
36:69:db:44:dd:55:19:f6:a5:b8:ce:7f:0d:61:e6:2f:18:2d:
b9:c5:b8:1e:d4:4c:46:07:7a:b4:f0:46:5a:4d:b0:72:68:8a:
c3:1a:d6:db:c0:61:66:60:fb:a3:d3:2f:03:14:1b:48:45:7c:
5f:6a:c3:e7:2f:1e:bd:3a:f5:bc:70:79:7d:ed:b0:21:ea:ac:
11:06:9e:86:9f:74:32:43:5e:1b:99:a2:21:a2:38:86:91:6b:
e3:7c:bb:3b:d4:bd:a3:22:0b:77:db:5d:2a:b6:21:16:a8:28:
9a:d6:e9:c1:87:79:a4:45:68:48:99:25:b6:1c:71:ae:11:1f:
31:bf:19:73:90:79:3d:da:33:94:b6:72:37:41:db:0f:39:dd:
75:03:aa:8a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVxlVsbBm5fCCWSjNSCJeKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDI0OTFiNmZmMDU3YzhjZDk2ZDlhOTIxNjI4OWY1MDFlZjM3ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLc+JpMNAPZgha0olkPkWSnrPiTP
tViHXG/hb/YTP6Co6i8GXhjEIUAwtWjfcz2tUTVzDIcRuQPEVzn0gD49sWbCkCUm
ojw/SPdKrYStpg+3yoKWBT7CFfEyvejbm4lMJ+esXjKyqtcBzjl4Q5HZoK3IXoJv
xIIcK3DVfo0oLYTylXtRMf4C5Sucn5Ygf/AyhtDP4CxqNRhHHt6iSFZ7Bobr6DW7
9+3Jl7AZv9tRLii4HfbsE7jlyKegcdccOz083k6obrHH29HnaqDIvZzeKimNP7an
wef8cW+pj9Oas9Br2bieFmbYg5b5iTN/Vpbc0V6bhFPgWgInayWDiOPpjwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFK0kkbb/BXyM2W2akhYon1Ae837lMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvclNTUnR2OEZmSXpaYlpxU0ZpaWZVQjd6ZnVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLgOkAwQC
LugQAwQDLuhwAwQCLuh8MA0GCSqGSIb3DQEBCwUAA4IBAQCarXPfdkaHR8tmYqoX
ywX+zAPDqXwjhaC4UM6Q/uY17WAAClPGXz2ssksgdVvPxm/dmzh8M1/L510YXEKD
VDeM+d6JfEjvN398XyLLDInhg0Sux1t6tWYPCY9QhswHRit/0aH5ZqwPiXiovKY2
adtE3VUZ9qW4zn8NYeYvGC25xbge1ExGB3q08EZaTbByaIrDGtbbwGFmYPuj0y8D
FBtIRXxfasPnLx69OvW8cHl97bAh6qwRBp6Gn3QyQ14bmaIhojiGkWvjfLs71L2j
Igt3210qtiEWqCia1unBh3mkRWhImSW2HHGuER8xvxlzkHk92jOUtnI3QdsPOd11
A6qK
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org