Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/36okcEqyJwBEmjqPensdrlJAZQE.roa
File: 36okcEqyJwBEmjqPensdrlJAZQE.roa (raw, json)
Hash identifier: VKpPcieQLNOOV1zq9Xmz7aseITxZFu3xU7GWxvPWPho=
Subject key identifier: DF:AA:24:70:4A:B2:27:00:44:9A:3A:8F:7A:7B:1D:AE:52:40:65:01
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018E381F65594DF51B23B94FCAD15EA8AA2C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/36okcEqyJwBEmjqPensdrlJAZQE.roa
Signing time: Wed 13 Mar 2024 14:02:45 +0000
ROA not before: Wed 13 Mar 2024 14:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 46.23.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 08:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:1f:65:59:4d:f5:1b:23:b9:4f:ca:d1:5e:a8:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 14:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfaa24704ab22700449a3a8f7a7b1dae52406501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:bc:1d:c9:96:f3:75:c4:05:1d:3f:e2:42:
02:09:fc:3b:a3:b7:d1:35:a6:4a:58:e2:15:6e:e4:
45:0f:6d:4d:76:ed:3a:7a:b9:49:45:f8:e6:8d:a5:
36:e1:81:f4:aa:e9:51:80:25:fc:7c:b9:f8:19:f2:
f6:eb:1a:f4:7f:04:f1:03:bf:53:51:42:2a:9a:83:
a1:0f:5a:38:10:b3:fa:15:3c:e4:11:27:29:b9:03:
f7:c0:d5:c3:f1:36:0e:83:25:99:b7:a8:34:d9:1d:
85:25:d4:f4:1a:84:28:ab:dd:52:5f:4c:52:95:4f:
a1:46:9d:2d:20:36:29:e9:0a:86:66:7e:63:4e:76:
48:4d:18:fe:35:c5:9b:f5:ec:b6:2c:cd:18:55:e8:
c5:99:a5:02:28:e4:d6:4a:cd:98:b8:83:68:72:39:
18:59:0f:b2:59:a5:42:a7:ae:74:cc:89:00:b7:b6:
5e:10:ab:67:da:a0:91:80:b6:3e:02:b9:c0:61:b1:
04:bc:cf:ec:0f:84:29:d0:cc:48:c3:84:b5:0d:ce:
86:83:99:70:72:4f:05:b7:76:1a:11:41:04:cc:ee:
12:c5:d6:9d:fd:3f:31:44:d8:0b:a0:12:88:b7:a2:
ab:f8:38:fb:ec:c4:57:38:82:9f:49:a2:1a:f6:7a:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AA:24:70:4A:B2:27:00:44:9A:3A:8F:7A:7B:1D:AE:52:40:65:01
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/36okcEqyJwBEmjqPensdrlJAZQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6a:29:f1:e1:74:44:02:99:ea:4a:05:c1:a8:23:30:56:fb:
cd:66:05:91:8f:12:f6:09:19:05:f8:fd:c5:24:d0:a3:11:dd:
7b:13:46:08:29:5c:6c:57:e6:67:82:63:ab:e2:a1:7f:8b:86:
7e:57:98:bf:8c:2e:ba:f6:22:c9:7c:39:7f:24:46:c2:39:2c:
a8:2b:52:e0:d2:bc:25:3f:81:d1:d1:8c:48:2f:63:05:0a:e5:
53:f2:2c:38:0b:99:8d:b3:5a:9e:24:ea:40:d1:1b:7e:c1:9a:
8d:15:63:1b:2b:75:e5:c5:44:e1:cf:26:e2:50:00:ad:d6:3e:
90:bd:3e:b9:c6:c2:9b:c1:dc:e3:c8:06:91:6a:0b:57:cb:db:
9f:3c:5a:f4:6c:d1:9a:39:a3:68:55:44:12:0f:8a:3f:4a:3c:
97:2a:10:ad:3a:5a:4e:92:93:f9:6a:e9:4d:54:ce:c5:24:46:
82:43:d1:36:73:97:3c:c5:2a:86:55:35:32:54:4b:d0:2f:f9:
53:0a:aa:8b:dc:53:c7:bf:ca:75:19:67:99:f9:25:ed:d4:b2:
b8:72:17:f5:6f:1b:fa:1e:dd:90:e9:0f:fa:4d:61:db:5f:04:
17:5e:1f:19:1a:e3:f9:89:84:ed:81:40:5e:bc:36:c2:47:6b:
31:29:e0:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY44H2VZTfUbI7lPytFeqKosMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQwMzEzMTQwMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmFhMjQ3MDRhYjIyNzAwNDQ5YTNhOGY3YTdiMWRhZTUyNDA2NTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMa8HcmW83XEBR0/4kICCfw7o7fR
NaZKWOIVbuRFD21Ndu06erlJRfjmjaU24YH0qulRgCX8fLn4GfL26xr0fwTxA79T
UUIqmoOhD1o4ELP6FTzkEScpuQP3wNXD8TYOgyWZt6g02R2FJdT0GoQoq91SX0xS
lU+hRp0tIDYp6QqGZn5jTnZITRj+NcWb9ey2LM0YVejFmaUCKOTWSs2YuINocjkY
WQ+yWaVCp650zIkAt7ZeEKtn2qCRgLY+ArnAYbEEvM/sD4Qp0MxIw4S1Dc6Gg5lw
ck8Ft3YaEUEEzO4Sxdad/T8xRNgLoBKIt6Kr+Dj77MRXOIKfSaIa9np08wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN+qJHBKsicARJo6j3p7Ha5SQGUBMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvMzZva2NFcXlKd0JFbWpxUGVuc2RybEpBWlFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhduMA0G
CSqGSIb3DQEBCwUAA4IBAQAMainx4XREApnqSgXBqCMwVvvNZgWRjxL2CRkF+P3F
JNCjEd17E0YIKVxsV+ZngmOr4qF/i4Z+V5i/jC669iLJfDl/JEbCOSyoK1Lg0rwl
P4HR0YxIL2MFCuVT8iw4C5mNs1qeJOpA0Rt+wZqNFWMbK3XlxUThzybiUACt1j6Q
vT65xsKbwdzjyAaRagtXy9ufPFr0bNGaOaNoVUQSD4o/SjyXKhCtOlpOkpP5aulN
VM7FJEaCQ9E2c5c8xSqGVTUyVEvQL/lTCqqL3FPHv8p1GWeZ+SXt1LK4chf1bxv6
Ht2Q6Q/6TWHbXwQXXh8ZGuP5iYTtgUBevDbCR2sxKeAr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:40 2025 by rpki-client