Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s3NISRnY_9cFl-7AaEuTCrqJD4s.roa
File: s3NISRnY_9cFl-7AaEuTCrqJD4s.roa (raw, json)
Hash identifier: jYqUbCm2VzdsziUXljetPwiquZtWshRca2bgKTjhrUs=
Subject key identifier: B3:73:48:49:19:D8:FF:D7:05:97:EE:C0:68:4B:93:0A:BA:89:0F:8B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F3F9397DA79E7EDA1AADA6DD2697F633
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s3NISRnY_9cFl-7AaEuTCrqJD4s.roa
Signing time: Sun 25 Jun 2023 19:12:56 +0000
ROA not before: Sun 25 Jun 2023 19:12:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146839
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 20
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:f9:39:7d:a7:9e:7e:da:1a:ad:a6:dd:26:97:f6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 25 19:12:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b373484919d8ffd70597eec0684b930aba890f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:db:9b:c0:94:54:43:6d:cb:cc:6e:72:8f:
58:9a:2b:b9:90:04:00:e5:d6:bd:fe:f2:85:21:e7:
bb:3f:7b:b9:3a:98:bc:50:0d:25:ab:6d:a3:fb:1c:
8a:65:0e:77:0b:63:b0:6b:5c:11:ef:dc:e9:24:f5:
7f:26:b8:34:b8:12:01:4d:82:d9:9a:9d:96:ac:6c:
db:dd:aa:15:98:f2:50:97:e5:51:5e:ee:0f:1a:91:
c0:00:12:15:7a:cd:ce:b8:00:61:10:b5:c3:e8:c8:
07:08:2a:71:80:88:75:b0:b7:e5:16:fe:d2:3e:6d:
d0:7c:06:99:79:53:4f:9c:7f:18:09:ca:01:c9:e9:
01:99:55:96:b6:c2:2d:d8:d0:41:60:4c:bf:78:96:
4e:88:27:67:f2:39:d9:99:23:90:18:2f:ef:61:7c:
0d:e2:bd:43:0a:75:87:c3:f4:5a:44:c3:31:3a:0b:
66:dc:c0:04:da:82:f9:62:ed:6b:ef:ed:01:28:88:
ab:70:3d:96:61:3d:00:a0:5e:83:6e:6f:0a:40:e6:
15:64:cb:0e:9c:02:c7:13:bc:13:27:3e:7f:9f:4f:
5c:19:c0:71:48:2c:2a:ca:f3:be:a8:90:e3:65:9b:
09:74:c7:33:29:b9:25:c9:2b:0d:ba:69:8c:1a:96:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:48:49:19:D8:FF:D7:05:97:EE:C0:68:4B:93:0A:BA:89:0F:8B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/s3NISRnY_9cFl-7AaEuTCrqJD4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
06:4f:3a:35:78:86:86:4e:68:a0:a7:28:4a:ba:c1:35:8e:85:
71:62:68:5e:a3:97:34:ad:5d:54:3c:96:cd:f8:db:31:db:82:
92:1d:8a:b5:6a:b1:a5:16:70:bc:48:60:f9:98:ae:eb:7c:a4:
21:98:35:be:8e:21:ee:39:35:c0:84:ac:b4:33:cd:5c:ad:c7:
30:7e:e9:fb:49:bc:ce:b7:7a:59:fb:d5:e8:99:de:05:11:bd:
3d:e1:52:f8:e2:bb:d3:4d:bd:af:9d:f1:d5:61:d1:1a:71:da:
f8:22:d2:18:c5:fe:06:be:52:12:0c:b3:fd:2a:ac:11:51:e9:
35:92:dd:ee:06:be:ea:76:0a:74:28:17:b6:5b:09:fc:89:85:
cb:4b:51:28:fc:02:de:54:55:59:3b:c7:4d:d1:4d:77:ee:d8:
31:ae:1b:d2:51:40:b4:5b:38:15:c5:e5:2f:84:39:a9:67:46:
28:90:fe:24:7b:cf:52:80:41:e8:fb:50:33:0b:09:69:89:73:
1d:b3:10:68:da:4d:ff:f3:db:97:99:94:8e:57:73:59:0c:25:
c5:9e:95:87:fa:4f:c8:b5:98:3a:e9:41:97:b2:a1:58:4a:7d:
2e:6a:64:52:6c:b4:2a:f4:df:a4:cf:f9:28:c5:61:34:01:63:
7f:ba:b6:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjz+Tl9p55+2hqtpt0ml/YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNjI1MTkxMjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzczNDg0OTE5ZDhmZmQ3MDU5N2VlYzA2ODRiOTMwYWJhODkwZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjbm8CUVENty8xuco9Ymiu5kAQA
5da9/vKFIee7P3u5Opi8UA0lq22j+xyKZQ53C2Owa1wR79zpJPV/Jrg0uBIBTYLZ
mp2WrGzb3aoVmPJQl+VRXu4PGpHAABIVes3OuABhELXD6MgHCCpxgIh1sLflFv7S
Pm3QfAaZeVNPnH8YCcoByekBmVWWtsIt2NBBYEy/eJZOiCdn8jnZmSOQGC/vYXwN
4r1DCnWHw/RaRMMxOgtm3MAE2oL5Yu1r7+0BKIircD2WYT0AoF6Dbm8KQOYVZMsO
nALHE7wTJz5/n09cGcBxSCwqyvO+qJDjZZsJdMczKbklySsNummMGpbTEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLNzSEkZ2P/XBZfuwGhLkwq6iQ+LMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvczNOSVNSbllfOWNGbC03QWFFdVRDcnFKRDRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELgNgAwQE
LugwMA0GCSqGSIb3DQEBCwUAA4IBAQAGTzo1eIaGTmigpyhKusE1joVxYmheo5c0
rV1UPJbN+Nsx24KSHYq1arGlFnC8SGD5mK7rfKQhmDW+jiHuOTXAhKy0M81crccw
fun7SbzOt3pZ+9Xomd4FEb094VL44rvTTb2vnfHVYdEacdr4ItIYxf4GvlISDLP9
KqwRUek1kt3uBr7qdgp0KBe2Wwn8iYXLS1Eo/ALeVFVZO8dN0U137tgxrhvSUUC0
WzgVxeUvhDmpZ0YokP4ke89SgEHo+1AzCwlpiXMdsxBo2k3/89uXmZSOV3NZDCXF
npWH+k/ItZg66UGXsqFYSn0uamRSbLQq9N+kz/koxWE0AWN/ura6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org