Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-5epCkI_aNBvD3ek-Gb6d9YaLGw.roa
File: 1-5epCkI_aNBvD3ek-Gb6d9YaLGw.roa (raw, json)
Hash identifier: wJqhTYR2A42w3OiZoU4GlpMdZ1oKcqnYY5Q09tOUcNQ=
Subject key identifier: FB:97:A9:0A:42:3F:68:D0:6F:0F:77:A4:F8:66:FA:77:D6:1A:2C:6C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186AC121650A4650FC0E4982821599E3015
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-5epCkI_aNBvD3ek-Gb6d9YaLGw.roa
Signing time: Sat 04 Mar 2023 10:01:51 +0000
ROA not before: Sat 04 Mar 2023 10:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.109.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:12:16:50:a4:65:0f:c0:e4:98:28:21:59:9e:30:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 4 10:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb97a90a423f68d06f0f77a4f866fa77d61a2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:68:e4:32:3f:1e:81:d1:07:09:cc:67:62:
95:43:e7:32:a4:d1:dd:80:ed:0c:8a:e3:0c:38:08:
0f:50:d2:eb:48:3f:8e:f5:83:9a:3a:0a:c7:1d:36:
d6:ea:ef:8e:0e:9c:2e:ff:1f:b7:37:66:68:af:c3:
cf:de:b7:bf:47:66:7b:45:22:73:a7:19:95:5f:3f:
c4:6f:31:43:f3:ad:a0:a5:01:20:29:73:e0:b6:f0:
6c:c8:a5:4c:6c:22:d2:f2:31:70:7c:2e:bf:b9:5b:
37:81:36:05:e2:d4:db:94:cd:ee:9e:6f:c8:51:2d:
65:71:16:d2:34:12:f8:aa:3b:73:f8:48:b6:3e:e3:
cb:85:91:cc:6f:0a:9b:5c:2d:d0:55:f5:bc:5c:29:
ab:ac:64:63:c4:5a:9e:58:ea:c9:1e:43:e1:44:e3:
e7:7f:f6:a5:13:d6:7e:ba:c1:82:ce:54:94:27:e2:
15:60:3d:65:eb:ad:29:ff:13:49:19:34:c6:cb:c7:
ef:d4:ff:ca:2e:60:dd:60:29:39:c8:8a:01:ce:24:
72:9c:95:62:f0:7e:c7:78:e2:38:13:9a:a9:6f:b0:
a3:7f:22:7b:cd:30:d0:fb:58:d4:6a:e1:9b:d4:f4:
53:f1:85:c8:fc:8c:33:d7:45:9d:d9:33:3d:a5:bb:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:A9:0A:42:3F:68:D0:6F:0F:77:A4:F8:66:FA:77:D6:1A:2C:6C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-5epCkI_aNBvD3ek-Gb6d9YaLGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
109.205.211.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1c:e6:49:be:40:87:9e:dd:53:a1:27:28:b4:8a:66:ef:87:
c4:88:75:11:aa:d0:ff:69:1b:1a:e2:8a:4d:b6:ea:8a:11:5d:
17:3b:ca:28:fe:a4:97:78:c3:8f:8d:e0:ff:f2:41:e9:11:ed:
cd:17:c5:d8:68:c3:1f:dd:4c:43:77:d1:22:1c:05:6d:bd:0c:
de:97:c3:a5:73:0f:dc:89:37:48:cb:6f:52:d6:0c:e8:f1:57:
03:48:b0:ce:a2:11:bb:dd:c8:bf:09:e0:0a:50:eb:3d:82:d8:
f0:6f:8f:64:89:dd:ff:03:4e:c2:4e:8b:85:36:57:45:60:48:
ab:16:ed:c3:74:e9:40:10:0e:66:c5:78:ef:81:04:51:9a:4f:
24:82:cd:38:5d:67:86:91:b5:fb:46:5a:9d:8a:82:b6:d5:10:
1e:34:84:b1:ca:b1:9a:3a:2e:07:2e:67:f0:56:d3:22:f8:5d:
d9:ff:68:33:cd:bb:a6:a9:5e:f0:56:77:fb:c2:78:46:db:dd:
a9:f3:eb:e1:d4:00:16:df:5a:43:39:72:b3:e4:bc:3e:c9:85:
b4:9f:cc:b9:ee:3f:1f:bd:28:ad:1d:31:8e:68:d2:7e:00:63:
d8:f4:f9:6b:c3:0b:2a:24:01:3b:0d:28:85:c1:3f:f2:fb:7b:
3d:25:88:b1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAYasEhZQpGUPwOSYKCFZnjAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMzA0MTAwMTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk3YTkwYTQyM2Y2OGQwNmYwZjc3YTRmODY2ZmE3N2Q2MWEyYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7xo5DI/HoHRBwnMZ2KVQ+cypNHd
gO0MiuMMOAgPUNLrSD+O9YOaOgrHHTbW6u+ODpwu/x+3N2Zor8PP3re/R2Z7RSJz
pxmVXz/EbzFD862gpQEgKXPgtvBsyKVMbCLS8jFwfC6/uVs3gTYF4tTblM3unm/I
US1lcRbSNBL4qjtz+Ei2PuPLhZHMbwqbXC3QVfW8XCmrrGRjxFqeWOrJHkPhROPn
f/alE9Z+usGCzlSUJ+IVYD1l660p/xNJGTTGy8fv1P/KLmDdYCk5yIoBziRynJVi
8H7HeOI4E5qpb7CjfyJ7zTDQ+1jUauGb1PRT8YXI/Iwz10Wd2TM9pbtSbQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPuXqQpCP2jQbw93pPhm+nfWGixsMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvMS01ZXBDa0lfYU5CdkQzZWstR2I2ZDlZYUxHdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBm
Mi8xL2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4XbQME
AG3N0wMEAG3N1jANBgkqhkiG9w0BAQsFAAOCAQEAjhzmSb5Ah57dU6EnKLSKZu+H
xIh1EarQ/2kbGuKKTbbqihFdFzvKKP6kl3jDj43g//JB6RHtzRfF2GjDH91MQ3fR
IhwFbb0M3pfDpXMP3Ik3SMtvUtYM6PFXA0iwzqIRu93IvwngClDrPYLY8G+PZInd
/wNOwk6LhTZXRWBIqxbtw3TpQBAOZsV474EEUZpPJILNOF1nhpG1+0ZanYqCttUQ
HjSEscqxmjouBy5n8FbTIvhd2f9oM827pqle8FZ3+8J4RtvdqfPr4dQAFt9aQzly
s+S8PsmFtJ/Mue4/H70orR0xjmjSfgBj2PT5a8MLKiQBOw0ohcE/8vt7PSWIsQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org