Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tfpKvyh3QiQV4hvtmad6fPLwD4E.roa
File: tfpKvyh3QiQV4hvtmad6fPLwD4E.roa (raw, json)
Hash identifier: XxhtWSgdsrL6yuHVAWUpiqpDEZ9yxRsKjCVdu4CvQGU=
Subject key identifier: B5:FA:4A:BF:28:77:42:24:15:E2:1B:ED:99:A7:7A:7C:F2:F0:0F:81
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018896621FC000FD57EF428ABBDF80B1634C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tfpKvyh3QiQV4hvtmad6fPLwD4E.roa
Signing time: Wed 07 Jun 2023 15:03:12 +0000
ROA not before: Wed 07 Jun 2023 15:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62
IP address blocks: 46.3.92.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:62:1f:c0:00:fd:57:ef:42:8a:bb:df:80:b1:63:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 7 15:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5fa4abf2877422415e21bed99a77a7cf2f00f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:da:e3:ee:21:e4:7a:8c:c1:15:01:ac:e8:
04:af:6d:f9:94:72:b6:a7:f2:e4:36:49:f4:de:d2:
06:3b:36:14:d3:ed:39:03:75:81:91:85:81:67:68:
76:23:3b:f3:05:f2:89:f9:6a:92:4b:ec:8a:4d:bf:
bb:01:0e:e3:7a:f9:00:d2:03:95:59:fa:ab:11:5a:
ff:63:1f:24:6c:54:49:58:b6:f1:f7:2f:ea:2c:23:
86:e0:e1:5a:48:96:62:e8:80:0c:06:e9:4b:0e:2e:
9e:69:14:cc:4c:9e:cc:4a:8e:70:a0:5f:af:16:d6:
f5:84:09:de:76:7e:e7:aa:e3:af:7d:2d:9a:d3:bf:
b9:13:2d:ad:9f:eb:7f:b3:89:c2:c4:b8:24:de:68:
f2:1f:c7:01:42:c1:af:c1:ee:b2:19:3e:9a:48:ff:
68:c0:e7:91:8a:db:63:9c:26:87:33:99:27:51:6e:
54:a4:b2:7a:af:09:2f:27:c1:52:ef:3a:5c:e9:bd:
a2:3e:6c:aa:7a:35:93:7e:5b:6e:bc:09:ef:94:93:
ff:40:14:f3:e3:d2:b4:57:b3:bc:59:f9:a6:1e:d8:
6c:38:fa:7d:3a:f3:62:96:99:f3:43:e2:88:cf:13:
19:76:b2:73:06:88:86:7d:65:1e:82:e8:06:b5:01:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:4A:BF:28:77:42:24:15:E2:1B:ED:99:A7:7A:7C:F2:F0:0F:81
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/tfpKvyh3QiQV4hvtmad6fPLwD4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/24
46.3.36.0/24
46.3.92.0/24
46.3.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:6e:08:a1:95:fb:85:9e:91:24:87:f0:71:d9:08:6f:1d:5f:
58:ad:e0:af:ba:7f:cb:a9:32:12:61:e5:9f:da:bb:33:b7:94:
36:96:a8:d6:79:ce:39:4e:06:64:e0:cd:64:4c:37:95:f2:0a:
44:c6:09:ec:0d:b1:b0:28:95:d6:cd:55:df:5a:03:e1:37:98:
04:3e:16:36:30:59:b3:18:99:de:e7:b8:24:91:02:33:1a:78:
52:12:f8:df:40:97:15:0a:1c:a3:b1:ab:e4:1d:fb:b2:0c:22:
6e:48:d5:15:84:2a:e4:6a:df:f4:37:81:99:9b:36:1f:bd:7e:
5e:85:af:a0:8c:02:66:c4:90:9e:bf:3e:a4:7e:6b:75:ae:30:
3d:bd:ac:ec:23:5d:54:40:ab:29:de:dd:ae:80:c3:4b:60:b2:
1d:57:be:0c:ba:68:a6:73:0d:23:b1:54:da:f0:3d:c4:48:53:
5a:df:2a:9b:29:eb:b0:4c:90:30:ce:15:d9:a2:fa:fb:84:1d:
e3:4c:d0:19:19:2e:5b:cb:b2:2f:9d:1b:a9:92:96:6c:05:17:
e3:9d:a9:38:03:da:0f:5e:a7:bb:e2:d3:3f:c8:ee:eb:d3:ee:
36:d3:49:4f:3b:17:9b:6d:d1:e8:ac:5e:36:b2:27:d4:5c:93:
2e:43:32:82
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiWYh/AAP1X70KKu9+AsWNMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNjA3MTUwMzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWZhNGFiZjI4Nzc0MjI0MTVlMjFiZWQ5OWE3N2E3Y2YyZjAwZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Pa4+4h5HqMwRUBrOgEr235lHK2
p/LkNkn03tIGOzYU0+05A3WBkYWBZ2h2IzvzBfKJ+WqSS+yKTb+7AQ7jevkA0gOV
WfqrEVr/Yx8kbFRJWLbx9y/qLCOG4OFaSJZi6IAMBulLDi6eaRTMTJ7MSo5woF+v
Ftb1hAnedn7nquOvfS2a07+5Ey2tn+t/s4nCxLgk3mjyH8cBQsGvwe6yGT6aSP9o
wOeRittjnCaHM5knUW5UpLJ6rwkvJ8FS7zpc6b2iPmyqejWTfltuvAnvlJP/QBTz
49K0V7O8WfmmHthsOPp9OvNilpnzQ+KIzxMZdrJzBoiGfWUegugGtQFn1QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLX6Sr8od0IkFeIb7Zmnenzy8A+BMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvdGZwS3Z5aDNRaVFWNGh2dG1hZDZmUEx3RDRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALgMgAwQA
LgMkAwQALgNcAwQALgPLMA0GCSqGSIb3DQEBCwUAA4IBAQAebgihlfuFnpEkh/Bx
2QhvHV9YreCvun/LqTISYeWf2rszt5Q2lqjWec45TgZk4M1kTDeV8gpExgnsDbGw
KJXWzVXfWgPhN5gEPhY2MFmzGJne57gkkQIzGnhSEvjfQJcVChyjsavkHfuyDCJu
SNUVhCrkat/0N4GZmzYfvX5eha+gjAJmxJCevz6kfmt1rjA9vazsI11UQKsp3t2u
gMNLYLIdV74Mumimcw0jsVTa8D3ESFNa3yqbKeuwTJAwzhXZovr7hB3jTNAZGS5b
y7IvnRupkpZsBRfjnak4A9oPXqe74tM/yO7r0+4200lPOxebbdHorF42sifUXJMu
QzKC
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org