Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H2pNbCO-DfIPnk7boQ5Z6IgNSL4.roa
File: H2pNbCO-DfIPnk7boQ5Z6IgNSL4.roa (raw, json)
Hash identifier: 7dkZnpsEtRX5ptZa8rWnuYdcNRlZvQuEiG8pRvQPaSg=
Subject key identifier: 1F:6A:4D:6C:23:BE:0D:F2:0F:9E:4E:DB:A1:0E:59:E8:88:0D:48:BE
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0188961B9D8D139FD76F91A053B3A26383B8
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H2pNbCO-DfIPnk7boQ5Z6IgNSL4.roa
Signing time: Wed 07 Jun 2023 13:46:12 +0000
ROA not before: Wed 07 Jun 2023 13:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 46.23.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:1b:9d:8d:13:9f:d7:6f:91:a0:53:b3:a2:63:83:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 7 13:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f6a4d6c23be0df20f9e4edba10e59e8880d48be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:89:f5:d9:31:49:d0:57:6b:2c:5d:dd:87:
d9:5a:05:fe:59:a0:0b:8d:b2:98:d4:74:46:a6:34:
13:28:93:4d:10:c2:1a:8d:b3:e9:8c:58:90:8c:75:
27:29:bd:1f:e8:19:22:bd:b0:35:51:0e:b5:3b:28:
e0:8f:4a:3e:7e:b2:af:54:12:ee:20:af:90:05:17:
b6:14:1b:7b:dc:e6:2e:a7:80:e2:64:3d:d7:4f:f0:
b0:63:4a:cf:ba:e8:ac:c3:48:45:93:b6:45:c2:da:
c3:f2:18:97:25:28:40:f3:82:17:93:dc:a4:e5:99:
5a:73:40:92:18:09:e4:e0:29:61:de:f5:c9:1d:6b:
d1:a3:88:41:e6:63:2e:5f:4f:81:f0:5a:35:d6:72:
95:5e:fb:52:58:2f:64:d2:30:aa:52:c0:8c:52:70:
3a:ea:36:c7:d0:db:36:8f:10:fc:03:bf:12:81:ec:
8d:59:aa:4a:04:c2:67:20:b2:ac:a8:62:79:dd:ef:
bb:11:f1:ac:d6:ad:6f:dc:59:fb:9c:79:a8:27:ea:
9f:93:9c:5b:e2:d8:b1:c7:2e:30:8e:dd:ce:8f:10:
d8:4f:00:3f:df:5b:46:fa:d9:77:84:65:b8:f0:40:
28:5e:c9:47:be:6e:1d:07:b3:06:c5:c8:36:1a:77:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6A:4D:6C:23:BE:0D:F2:0F:9E:4E:DB:A1:0E:59:E8:88:0D:48:BE
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/H2pNbCO-DfIPnk7boQ5Z6IgNSL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:4d:8d:3d:88:57:ba:ca:c3:d9:38:7b:25:a1:d5:fe:29:08:
85:6b:a5:4a:c5:d6:34:47:02:dd:87:0c:26:b6:59:2b:d9:6c:
35:d6:61:eb:f1:5c:77:23:94:4b:8c:d6:0b:f8:16:6c:04:92:
65:af:25:82:ce:ef:88:f0:03:20:20:56:f4:55:27:10:95:ab:
e6:51:83:0f:d1:a9:c4:b0:09:64:5a:f0:6f:9f:ea:c8:a8:76:
60:4c:b7:d1:0f:af:de:b4:17:ef:e6:6f:1a:05:99:12:33:4e:
da:c3:d4:b9:28:96:11:0b:84:2d:5d:61:37:b6:31:7a:42:89:
2c:0a:92:14:fd:f3:98:32:3b:35:e3:90:9d:43:80:20:1f:34:
c0:55:33:3e:4c:e6:71:04:0b:d9:b3:90:df:f3:1c:94:cb:47:
6a:12:8d:9b:96:28:4e:2a:32:bf:66:a8:06:8b:68:e1:5c:8c:
e5:62:f2:36:c8:e5:06:50:16:ae:7d:9e:05:ea:3f:a3:9c:29:
5f:8e:3b:e6:33:da:3a:45:f0:af:c5:7e:23:01:23:1f:80:ab:
d0:fa:a3:b3:11:b5:f2:a6:1d:8e:49:be:99:6a:fa:8a:ab:4f:
c4:78:03:9b:d9:c7:52:ab:4d:00:50:6c:54:be:4c:ac:35:54:
a3:7d:96:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiWG52NE5/Xb5GgU7OiY4O4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNjA3MTM0NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjZhNGQ2YzIzYmUwZGYyMGY5ZTRlZGJhMTBlNTllODg4MGQ0OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/OJ9dkxSdBXayxd3YfZWgX+WaAL
jbKY1HRGpjQTKJNNEMIajbPpjFiQjHUnKb0f6BkivbA1UQ61Oyjgj0o+frKvVBLu
IK+QBRe2FBt73OYup4DiZD3XT/CwY0rPuuisw0hFk7ZFwtrD8hiXJShA84IXk9yk
5Zlac0CSGAnk4Clh3vXJHWvRo4hB5mMuX0+B8Fo11nKVXvtSWC9k0jCqUsCMUnA6
6jbH0Ns2jxD8A78SgeyNWapKBMJnILKsqGJ53e+7EfGs1q1v3Fn7nHmoJ+qfk5xb
4tixxy4wjt3OjxDYTwA/31tG+tl3hGW48EAoXslHvm4dB7MGxcg2GneX2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9qTWwjvg3yD55O26EOWeiIDUi+MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvSDJwTmJDTy1EZklQbms3Ym9RNVo2SWdOU0w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhdtMA0G
CSqGSIb3DQEBCwUAA4IBAQDRTY09iFe6ysPZOHslodX+KQiFa6VKxdY0RwLdhwwm
tlkr2Ww11mHr8Vx3I5RLjNYL+BZsBJJlryWCzu+I8AMgIFb0VScQlavmUYMP0anE
sAlkWvBvn+rIqHZgTLfRD6/etBfv5m8aBZkSM07aw9S5KJYRC4QtXWE3tjF6Qoks
CpIU/fOYMjs145CdQ4AgHzTAVTM+TOZxBAvZs5Df8xyUy0dqEo2blihOKjK/ZqgG
i2jhXIzlYvI2yOUGUBaufZ4F6j+jnClfjjvmM9o6RfCvxX4jASMfgKvQ+qOzEbXy
ph2OSb6ZavqKq0/EeAOb2cdSq00AUGxUvkysNVSjfZaD
-----END CERTIFICATE-----
Generated at Tue Aug 1 12:31:26 2023 by rpki-client on console-fra.rpki-client.org