Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kRAQ-V46DXnYv83Es5-oEwtkUP4.roa
File: kRAQ-V46DXnYv83Es5-oEwtkUP4.roa (raw, json)
Hash identifier: Qbi1PwUwJ14ShuzXFxsMEmPysiRSGDohvOAtm3Ci+g8=
Subject key identifier: 91:10:10:F9:5E:3A:0D:79:D8:BF:CD:C4:B3:9F:A8:13:0B:64:50:FE
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018CC5DC9D7616189EE759B7A605F3F6AD59
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kRAQ-V46DXnYv83Es5-oEwtkUP4.roa
Signing time: Mon 01 Jan 2024 16:30:18 +0000
ROA not before: Mon 01 Jan 2024 16:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206003
IP address blocks: 46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 10:16:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:9d:76:16:18:9e:e7:59:b7:a6:05:f3:f6:ad:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 16:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=911010f95e3a0d79d8bfcdc4b39fa8130b6450fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:11:65:aa:73:e3:53:6f:96:4f:c2:88:3b:
75:79:f9:56:9e:4e:9b:3b:0d:83:ee:b7:28:37:84:
a6:2c:e9:f9:4e:e3:41:4b:e2:28:dc:65:6d:c1:22:
e9:dd:98:c2:5b:34:f1:72:26:5f:c8:41:1a:2d:40:
a7:ab:2f:35:07:c1:fa:29:7e:8c:5e:bc:99:cc:09:
f6:8c:9a:36:47:8c:f0:22:dd:35:b3:1e:96:7c:72:
3f:f2:fa:7f:74:11:2a:3e:95:fe:14:e3:b9:23:62:
ea:8c:47:d1:9d:a6:e3:cc:e2:05:1a:05:f1:94:78:
48:62:1b:a3:92:d6:14:9f:61:83:18:99:ff:43:fe:
7b:85:8f:90:ab:40:94:5b:ec:ae:07:5a:b6:e8:2d:
2f:42:46:b8:f4:14:77:1b:7e:3a:8e:a2:db:8b:c3:
af:cf:18:18:c3:55:7f:cd:7a:9d:10:14:82:80:f0:
9e:a5:2b:d9:a2:1e:85:50:c0:7e:1a:c5:0f:85:94:
c7:c5:51:70:9f:31:2c:f6:56:15:e0:d0:d0:5c:45:
6d:a3:3d:5b:b7:aa:1e:13:c6:4f:fb:a5:c0:a8:b0:
ac:99:60:60:bc:7d:17:1f:04:8f:b9:60:e5:a7:17:
88:1f:53:fb:4c:6a:46:c5:f5:eb:50:ea:49:d8:8e:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:10:F9:5E:3A:0D:79:D8:BF:CD:C4:B3:9F:A8:13:0B:64:50:FE
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kRAQ-V46DXnYv83Es5-oEwtkUP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.100.0/22
46.23.110.0/24
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e3:94:65:ec:75:45:6c:da:ed:c9:40:6e:c5:de:29:03:73:
72:6e:02:48:4a:0d:b3:01:7b:76:f5:59:2d:ca:24:73:f7:fb:
61:fa:00:78:84:5a:43:03:b8:9e:a2:67:98:1f:dc:c1:0b:46:
dd:23:fb:01:56:20:95:f9:a0:7d:aa:0b:69:95:74:62:34:a6:
14:33:d3:ea:39:2a:d6:e1:5b:df:23:cb:1a:8e:3f:07:ca:db:
7d:8a:44:16:98:42:b6:2b:ea:f7:cf:4a:7f:9a:51:27:02:d4:
a9:3d:b0:0d:e3:66:10:cc:19:4c:18:42:ea:fa:11:69:cc:2e:
16:0c:aa:84:05:36:c9:5a:f5:4d:5b:92:fb:50:c6:47:8c:64:
f2:8f:5a:f5:ad:78:f6:64:8b:63:6a:23:4a:ab:d9:fd:83:dd:
88:f1:d5:4b:72:92:86:1a:1c:ba:ee:ba:c1:d4:16:ae:cc:ad:
87:fb:f0:1d:88:04:17:e3:ab:6a:fa:65:47:6b:57:af:5a:aa:
ef:42:b5:57:3a:15:ec:bc:a3:0f:95:12:62:a5:17:2e:a1:d0:
2d:40:8d:09:91:f8:66:fa:2c:4f:3f:62:72:31:06:54:7f:78:
03:57:bf:e1:99:e8:84:52:c7:a5:90:a7:a3:b2:d5:51:08:bb:
61:fd:db:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3J12Fhie51m3pgXz9q1ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQwMTAxMTYzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTEwMTBmOTVlM2EwZDc5ZDhiZmNkYzRiMzlmYTgxMzBiNjQ1MGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbURZapz41Nvlk/CiDt1eflWnk6b
Ow2D7rcoN4SmLOn5TuNBS+Io3GVtwSLp3ZjCWzTxciZfyEEaLUCnqy81B8H6KX6M
XryZzAn2jJo2R4zwIt01sx6WfHI/8vp/dBEqPpX+FOO5I2LqjEfRnabjzOIFGgXx
lHhIYhujktYUn2GDGJn/Q/57hY+Qq0CUW+yuB1q26C0vQka49BR3G346jqLbi8Ov
zxgYw1V/zXqdEBSCgPCepSvZoh6FUMB+GsUPhZTHxVFwnzEs9lYV4NDQXEVtoz1b
t6oeE8ZP+6XAqLCsmWBgvH0XHwSPuWDlpxeIH1P7TGpGxfXrUOpJ2I5T2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJEQEPleOg152L/NxLOfqBMLZFD+MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEva1JBUS1WNDZEWG5ZdjgzRXM1LW9Fd3RrVVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLhdkAwQA
LhduAwQAuVHZMA0GCSqGSIb3DQEBCwUAA4IBAQCQ45Rl7HVFbNrtyUBuxd4pA3Ny
bgJISg2zAXt29VktyiRz9/th+gB4hFpDA7ieomeYH9zBC0bdI/sBViCV+aB9qgtp
lXRiNKYUM9PqOSrW4VvfI8sajj8Hytt9ikQWmEK2K+r3z0p/mlEnAtSpPbAN42YQ
zBlMGELq+hFpzC4WDKqEBTbJWvVNW5L7UMZHjGTyj1r1rXj2ZItjaiNKq9n9g92I
8dVLcpKGGhy67rrB1BauzK2H+/AdiAQX46tq+mVHa1evWqrvQrVXOhXsvKMPlRJi
pRcuodAtQI0Jkfhm+ixPP2JyMQZUf3gDV7/hmeiEUselkKejstVRCLth/dvW
Generated at Tue Jan 23 14:58:10 2024 by rpki-client on console-ams.rpki-client.org