Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hFe1ptKN91Kdqkxot9ZcgsgpFmE.roa
File: hFe1ptKN91Kdqkxot9ZcgsgpFmE.roa (raw, json)
Hash identifier: 2e4EUGhSTCZcXpPY0EOb9AXBJmrkfp/GP57oujhZGy4=
Subject key identifier: 84:57:B5:A6:D2:8D:F7:52:9D:AA:4C:68:B7:D6:5C:82:C8:29:16:61
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186AC12160AC7A4C89CB723B895EB961ECD
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hFe1ptKN91Kdqkxot9ZcgsgpFmE.roa
Signing time: Sat 04 Mar 2023 10:01:51 +0000
ROA not before: Sat 04 Mar 2023 10:01:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.110.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:12:16:0a:c7:a4:c8:9c:b7:23:b8:95:eb:96:1e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 4 10:01:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8457b5a6d28df7529daa4c68b7d65c82c8291661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:08:fa:9f:e6:83:09:b7:38:9b:28:41:71:
54:94:de:5c:37:ee:13:e4:d0:96:ee:50:9a:dc:22:
1d:fa:fc:0f:60:1f:9e:0f:75:da:a7:20:a4:d0:5d:
a8:9d:c9:cc:0f:a4:66:90:9b:0a:35:0a:9f:e2:8a:
e7:02:7d:f5:3e:1b:22:ef:6d:14:3c:14:25:f6:4f:
91:07:00:7a:22:7b:93:fc:65:2a:68:16:1d:68:ad:
5b:55:77:78:1d:ff:30:f9:31:8a:cc:53:f6:04:ab:
82:17:e7:52:3b:f9:bb:8e:a1:5f:67:7b:02:25:9c:
b9:98:d3:68:d1:26:d3:3d:41:5f:b6:1a:b2:41:2b:
3c:6a:a3:16:b7:67:af:2e:2c:bb:38:9d:e5:ce:66:
d0:44:d1:f2:ea:38:99:1f:45:ed:70:e7:4b:68:4f:
2b:6c:90:84:bb:33:6b:63:62:1c:6b:72:5a:59:1c:
a3:45:58:13:28:d4:dc:5c:6a:e9:29:e1:47:b5:9c:
35:ab:99:d4:f9:77:b5:61:a1:13:79:b0:69:18:09:
6b:31:8d:04:b7:b6:5e:65:6e:34:63:1c:b6:99:75:
c7:44:b8:7b:17:db:48:ae:8c:4f:f0:dc:ab:cf:19:
19:27:9a:30:78:cd:8b:98:cb:4e:2d:aa:2a:4d:8c:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:B5:A6:D2:8D:F7:52:9D:AA:4C:68:B7:D6:5C:82:C8:29:16:61
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hFe1ptKN91Kdqkxot9ZcgsgpFmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:9a:02:40:0d:aa:ae:17:b0:a2:86:51:9a:48:c6:bd:8e:1d:
32:68:9b:0f:77:43:54:cf:02:c4:78:83:80:65:fa:2e:42:7a:
e4:17:27:00:cb:ff:ee:9a:8d:92:c8:99:91:4c:1b:68:48:d0:
6b:67:ec:98:f7:66:1d:48:36:d1:03:99:c9:77:2d:09:36:c6:
cc:14:4e:9f:c0:d8:24:67:31:f0:d8:6d:b1:29:a3:86:34:eb:
5a:92:76:ca:98:7b:4f:c2:94:66:16:86:f5:50:39:b4:22:1e:
09:5a:0e:da:38:ab:3e:eb:43:23:74:37:2c:1a:f0:fc:3d:7d:
f7:26:b5:3b:ee:a8:03:11:bc:44:6e:46:c0:ec:f6:64:6d:82:
fe:75:ce:f0:99:41:66:ad:e3:dc:ee:1b:09:f6:f7:b9:5d:80:
65:38:cd:a9:f7:bb:0d:4e:d8:7b:cd:6f:3f:90:2e:55:1d:a8:
70:26:f4:c9:97:4c:13:b3:32:2c:71:a0:e2:db:e3:f3:7e:df:
cf:15:fd:1d:10:9e:f9:55:61:09:91:a4:a1:68:27:8d:91:82:
6a:1a:f2:84:89:79:e8:0e:87:77:f2:72:ea:91:cf:70:4f:2a:
84:fa:dd:41:76:92:17:40:7e:10:9d:b3:56:65:d2:13:ac:c0:
12:0a:79:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYasEhYKx6TInLcjuJXrlh7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMzA0MTAwMTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDU3YjVhNmQyOGRmNzUyOWRhYTRjNjhiN2Q2NWM4MmM4MjkxNjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjAI+p/mgwm3OJsoQXFUlN5cN+4T
5NCW7lCa3CId+vwPYB+eD3XapyCk0F2oncnMD6RmkJsKNQqf4ornAn31Phsi720U
PBQl9k+RBwB6InuT/GUqaBYdaK1bVXd4Hf8w+TGKzFP2BKuCF+dSO/m7jqFfZ3sC
JZy5mNNo0SbTPUFfthqyQSs8aqMWt2evLiy7OJ3lzmbQRNHy6jiZH0XtcOdLaE8r
bJCEuzNrY2Ica3JaWRyjRVgTKNTcXGrpKeFHtZw1q5nU+Xe1YaETebBpGAlrMY0E
t7ZeZW40Yxy2mXXHRLh7F9tIroxP8NyrzxkZJ5oweM2LmMtOLaoqTYxY+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIRXtabSjfdSnapMaLfWXILIKRZhMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvaEZlMXB0S045MUtkcWt4b3Q5WmNnc2dwRm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhduAwQC
vEAIMA0GCSqGSIb3DQEBCwUAA4IBAQCqmgJADaquF7CihlGaSMa9jh0yaJsPd0NU
zwLEeIOAZfouQnrkFycAy//umo2SyJmRTBtoSNBrZ+yY92YdSDbRA5nJdy0JNsbM
FE6fwNgkZzHw2G2xKaOGNOtaknbKmHtPwpRmFob1UDm0Ih4JWg7aOKs+60MjdDcs
GvD8PX33JrU77qgDEbxEbkbA7PZkbYL+dc7wmUFmrePc7hsJ9ve5XYBlOM2p97sN
Tth7zW8/kC5VHahwJvTJl0wTszIscaDi2+Pzft/PFf0dEJ75VWEJkaShaCeNkYJq
GvKEiXnoDod38nLqkc9wTyqE+t1BdpIXQH4QnbNWZdITrMASCnkf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org