Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pvoS7T5Zle5iLJeGLpKoiL7gzn4.roa
File: pvoS7T5Zle5iLJeGLpKoiL7gzn4.roa (raw, json)
Hash identifier: r5ZB2wUWou27sf0NIseHGRuow3yuUnmExS+mMFRO6Qc=
Subject key identifier: A6:FA:12:ED:3E:59:95:EE:62:2C:97:86:2E:92:A8:88:BE:E0:CE:7E
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01898CEC0BE11EEFBD4705F1FA5AD33C57DC
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pvoS7T5Zle5iLJeGLpKoiL7gzn4.roa
Signing time: Tue 25 Jul 2023 12:00:27 +0000
ROA not before: Tue 25 Jul 2023 12:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:ec:0b:e1:1e:ef:bd:47:05:f1:fa:5a:d3:3c:57:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 25 12:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6fa12ed3e5995ee622c97862e92a888bee0ce7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:21:89:b6:77:1b:3d:45:bf:f7:e0:a9:61:
c4:19:b7:7d:13:26:c2:b6:22:35:df:43:4f:4a:6b:
a8:b6:5c:1f:9f:db:1c:50:2f:33:37:d3:de:2d:55:
e4:12:e2:3e:b9:54:f6:09:9a:0c:1f:87:67:1f:53:
65:02:fd:20:6a:cb:c0:07:98:c4:fe:af:62:f2:4b:
47:79:c0:39:ee:ef:3d:e1:31:a1:47:0d:8e:e4:53:
be:a9:fb:a0:93:c1:af:93:23:a5:a3:2a:66:17:5b:
73:95:87:88:59:87:ee:0a:c7:1d:0e:88:9b:08:f6:
d8:8b:90:3a:a7:12:a8:45:ef:fd:26:a2:06:25:b2:
cd:b9:37:31:8b:50:b9:e6:0b:5c:20:b3:59:3c:2b:
82:26:83:5e:04:1c:0a:2f:ab:da:43:eb:86:36:9b:
44:de:e4:76:fe:ef:ea:fe:91:32:8c:4c:ce:7d:68:
ee:e2:01:e8:e6:75:b1:bd:ab:ec:1f:ab:82:50:91:
dd:d9:b9:8a:0b:ff:ec:a2:bf:7f:22:5b:9b:1a:96:
fd:de:58:b5:15:c7:99:d5:ae:4e:fa:9c:00:9c:59:
32:5c:7e:e5:69:53:f6:50:05:c8:54:a3:2d:f0:3a:
66:18:d9:b1:39:d7:84:87:dc:80:e9:ba:56:11:3b:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FA:12:ED:3E:59:95:EE:62:2C:97:86:2E:92:A8:88:BE:E0:CE:7E
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/pvoS7T5Zle5iLJeGLpKoiL7gzn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
46.23.108.0/24
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a7:7a:bd:18:80:53:d0:6a:4e:03:c4:38:fd:71:22:16:70:
a5:f3:b0:23:ce:d5:11:e8:1d:d9:37:b9:1e:df:37:fb:23:45:
60:6c:28:00:7f:ec:aa:e3:12:5a:95:45:44:ef:48:35:7e:0d:
a4:5a:11:5c:54:ec:f2:60:41:b3:1b:44:f7:29:57:c7:bc:ec:
68:61:46:eb:aa:3b:9c:33:3c:83:13:51:61:8f:61:4d:43:4a:
95:4a:69:49:37:2c:d6:74:78:ba:52:fc:2c:11:aa:03:7a:2e:
3a:2e:1e:23:4a:50:8a:c4:4d:9a:ea:d4:09:ff:b0:84:0b:ee:
8b:0e:8b:ba:18:eb:5d:e4:07:27:88:98:a7:47:63:a3:94:f9:
12:d0:ab:b0:b9:05:c4:f2:28:70:05:97:6a:f0:ea:05:21:47:
ba:8c:69:59:be:48:db:02:3a:08:d3:4c:ae:bf:cb:8d:ee:c5:
84:7e:06:3a:0f:ef:4c:7c:c6:d7:00:af:86:ed:30:c1:bc:2e:
67:80:33:2c:20:10:c9:99:22:c1:b7:c7:4d:7c:e5:d5:2a:ca:
39:d0:b4:53:50:02:05:66:59:01:e3:3a:b7:50:cb:0a:49:45:
fb:f5:ad:1e:25:08:24:9b:20:8d:97:b9:b9:67:dc:06:aa:f7:
c0:92:82:86
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmM7AvhHu+9RwXx+lrTPFfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNzI1MTIwMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmZhMTJlZDNlNTk5NWVlNjIyYzk3ODYyZTkyYTg4OGJlZTBjZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfshibZ3Gz1Fv/fgqWHEGbd9EybC
tiI130NPSmuotlwfn9scUC8zN9PeLVXkEuI+uVT2CZoMH4dnH1NlAv0gasvAB5jE
/q9i8ktHecA57u894TGhRw2O5FO+qfugk8GvkyOloypmF1tzlYeIWYfuCscdDoib
CPbYi5A6pxKoRe/9JqIGJbLNuTcxi1C55gtcILNZPCuCJoNeBBwKL6vaQ+uGNptE
3uR2/u/q/pEyjEzOfWju4gHo5nWxvavsH6uCUJHd2bmKC//sor9/IlubGpb93li1
FceZ1a5O+pwAnFkyXH7laVP2UAXIVKMt8DpmGNmxOdeEh9yA6bpWETsLhwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKb6Eu0+WZXuYiyXhi6SqIi+4M5+MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvcHZvUzdUNVpsZTVpTEplR0xwS29pTDdnem40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbIDAwQA
LhdgAwQALhdiAwQALhdsAwQAbc3UMA0GCSqGSIb3DQEBCwUAA4IBAQBjp3q9GIBT
0GpOA8Q4/XEiFnCl87AjztUR6B3ZN7ke3zf7I0VgbCgAf+yq4xJalUVE70g1fg2k
WhFcVOzyYEGzG0T3KVfHvOxoYUbrqjucMzyDE1Fhj2FNQ0qVSmlJNyzWdHi6Uvws
EaoDei46Lh4jSlCKxE2a6tQJ/7CEC+6LDou6GOtd5AcniJinR2OjlPkS0KuwuQXE
8ihwBZdq8OoFIUe6jGlZvkjbAjoI00yuv8uN7sWEfgY6D+9MfMbXAK+G7TDBvC5n
gDMsIBDJmSLBt8dNfOXVKso50LRTUAIFZlkB4zq3UMsKSUX79a0eJQgkmyCNl7m5
Z9wGqvfAkoKG
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:09 2024 by rpki-client on console-ams.rpki-client.org