Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ac12su4bfNK9DUfZ5DnLB7bNz9w.roa
File: Ac12su4bfNK9DUfZ5DnLB7bNz9w.roa (raw, json)
Hash identifier: 9bwUBNsYwa5oMXMjpqah7DEdKbILGEo2DpKmcOrZ7O8=
Subject key identifier: 01:CD:76:B2:EE:1B:7C:D2:BD:0D:47:D9:E4:39:CB:07:B6:CD:CF:DC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018CAF782F3718095B740973657BE38BD19E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ac12su4bfNK9DUfZ5DnLB7bNz9w.roa
Signing time: Thu 28 Dec 2023 08:08:58 +0000
ROA not before: Thu 28 Dec 2023 08:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 46.37.115.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:af:78:2f:37:18:09:5b:74:09:73:65:7b:e3:8b:d1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 28 08:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01cd76b2ee1b7cd2bd0d47d9e439cb07b6cdcfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:76:7b:62:3a:d7:58:4d:e9:0e:35:44:fa:
88:a7:26:d4:3a:90:c8:f0:e3:5c:66:12:1e:7d:9c:
1f:cd:a4:d8:cd:3f:9e:20:46:c4:87:d9:ed:1b:5b:
09:10:48:82:68:87:2a:e7:b7:19:26:74:38:31:dc:
75:06:62:25:48:06:39:6e:97:be:88:88:72:15:3e:
92:9e:37:a0:81:b8:f6:56:38:c6:98:2f:8c:07:1b:
7f:ba:0f:46:a0:0e:da:c9:f9:87:03:d0:04:ed:1f:
1e:0c:9d:53:02:7f:fe:26:09:13:eb:27:f7:a5:4a:
7a:8d:45:63:48:b0:8f:03:ed:92:af:37:23:ca:8f:
e0:89:e7:17:f9:60:5b:ec:6d:41:2b:ef:be:56:e4:
29:f1:78:d0:74:e8:7e:f1:ea:2e:24:a4:bc:d0:b3:
9c:aa:b0:00:a4:57:02:20:b3:fc:41:14:52:bb:5a:
f1:e0:52:95:7f:35:1a:d0:05:cb:1f:69:60:22:34:
8d:79:29:68:30:32:c5:c9:94:77:89:7f:e9:23:fc:
7a:68:90:98:d9:b8:d8:4e:b9:0f:90:8c:f4:76:42:
ea:76:f1:18:68:97:3b:70:19:4f:c5:c6:fe:b5:1a:
56:47:ca:f3:23:02:6b:cf:9e:6b:96:09:35:6b:62:
81:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:76:B2:EE:1B:7C:D2:BD:0D:47:D9:E4:39:CB:07:B6:CD:CF:DC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Ac12su4bfNK9DUfZ5DnLB7bNz9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.115.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8a:0a:82:f3:3c:68:77:b1:28:6f:fb:eb:e1:80:f0:ee:33:
fa:91:76:dd:d6:f0:18:b1:92:a1:7f:a3:ad:b7:1a:c8:29:4b:
73:1e:02:66:d3:d3:be:e9:fd:a8:6f:2f:e9:1a:ff:3f:4f:5a:
57:c4:c7:14:04:d4:44:d7:17:77:86:47:c6:4e:c9:e6:4a:d5:
0c:51:e7:79:62:7d:d0:34:0b:6c:e8:dc:79:62:e9:d2:e2:43:
46:0c:f5:c4:60:94:5f:a2:fa:5f:0b:4a:40:8d:ae:55:99:df:
f5:c8:7d:0f:95:77:12:21:f2:35:06:65:10:99:b3:e4:01:f4:
94:cb:3f:2c:1b:cf:bf:4e:b4:9a:29:57:f4:dd:15:8b:a8:49:
78:ce:a0:e8:45:c5:48:fd:fb:76:50:42:40:9f:a8:eb:2a:c4:
84:27:69:19:2c:69:19:0e:54:08:8e:2a:3b:6f:00:06:f2:80:
33:3a:64:6a:49:bb:2b:c6:49:00:65:22:82:45:21:53:26:52:
65:8c:55:0d:76:a1:b3:6a:04:af:0e:73:28:95:92:e4:7b:51:
3c:90:91:84:70:4f:ad:5a:9e:7d:52:45:60:2f:d4:9d:6a:a1:
1f:b5:7c:97:6c:19:37:5f:da:29:7c:c4:f1:7f:18:8c:a4:14:
96:d3:ca:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyveC83GAlbdAlzZXvji9GeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMxMjI4MDgwODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWNkNzZiMmVlMWI3Y2QyYmQwZDQ3ZDllNDM5Y2IwN2I2Y2RjZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnid2e2I611hN6Q41RPqIpybUOpDI
8ONcZhIefZwfzaTYzT+eIEbEh9ntG1sJEEiCaIcq57cZJnQ4Mdx1BmIlSAY5bpe+
iIhyFT6Snjeggbj2VjjGmC+MBxt/ug9GoA7ayfmHA9AE7R8eDJ1TAn/+JgkT6yf3
pUp6jUVjSLCPA+2Srzcjyo/giecX+WBb7G1BK+++VuQp8XjQdOh+8eouJKS80LOc
qrAApFcCILP8QRRSu1rx4FKVfzUa0AXLH2lgIjSNeSloMDLFyZR3iX/pI/x6aJCY
2bjYTrkPkIz0dkLqdvEYaJc7cBlPxcb+tRpWR8rzIwJrz55rlgk1a2KBpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAHNdrLuG3zSvQ1H2eQ5ywe2zc/cMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvQWMxMnN1NGJmTks5RFVmWjVEbkxCN2JOejl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiVzAwQA
LiV5MA0GCSqGSIb3DQEBCwUAA4IBAQAbigqC8zxod7Eob/vr4YDw7jP6kXbd1vAY
sZKhf6OttxrIKUtzHgJm09O+6f2oby/pGv8/T1pXxMcUBNRE1xd3hkfGTsnmStUM
Ued5Yn3QNAts6Nx5YunS4kNGDPXEYJRfovpfC0pAja5Vmd/1yH0PlXcSIfI1BmUQ
mbPkAfSUyz8sG8+/TrSaKVf03RWLqEl4zqDoRcVI/ft2UEJAn6jrKsSEJ2kZLGkZ
DlQIjio7bwAG8oAzOmRqSbsrxkkAZSKCRSFTJlJljFUNdqGzagSvDnMolZLke1E8
kJGEcE+tWp59UkVgL9SdaqEftXyXbBk3X9opfMTxfxiMpBSW08qd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org