Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/9B2sCTNJ1m5zaLpkqAGoT7GJJA0.roa
File: 9B2sCTNJ1m5zaLpkqAGoT7GJJA0.roa (raw, json)
Hash identifier: wm3fPCXYYmAaHrGOuHGHST6lVFmDtrcVc4uxyLteHIk=
Subject key identifier: F4:1D:AC:09:33:49:D6:6E:73:68:BA:64:A8:01:A8:4F:B1:89:24:0D
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0188A432CB070F06FCA0D36AC99D4AAA3CBD
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/9B2sCTNJ1m5zaLpkqAGoT7GJJA0.roa
Signing time: Sat 10 Jun 2023 07:26:12 +0000
ROA not before: Sat 10 Jun 2023 07:26:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 46.34.160.0/22 maxlen: 24
89.47.201.0/24 maxlen: 24
89.47.200.0/24 maxlen: 24
89.47.202.0/24 maxlen: 24
89.42.196.0/24 maxlen: 24
89.42.136.0/22 maxlen: 24
92.114.51.0/24 maxlen: 24
92.114.48.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
92.114.49.0/24 maxlen: 24
89.47.196.0/22 maxlen: 24
89.47.197.0/24 maxlen: 24
89.47.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:32:cb:07:0f:06:fc:a0:d3:6a:c9:9d:4a:aa:3c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jun 10 07:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f41dac093349d66e7368ba64a801a84fb189240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:b5:a3:ec:b0:ac:51:71:b8:84:78:e5:bf:
09:8e:6d:16:b8:cf:ab:cb:d0:92:69:64:00:c5:76:
9e:9f:15:59:9a:5e:cf:cd:a2:3a:3d:de:3d:d6:1e:
7e:ea:41:32:60:94:4c:56:f6:0d:5c:ee:b5:a9:bc:
d1:57:46:ca:10:1b:a6:a2:6c:da:81:f8:8b:af:5a:
9a:ef:a3:ed:c5:ca:d8:61:ec:05:c0:a7:1d:92:a8:
1d:be:5e:e4:3e:0a:23:47:b2:14:80:e1:0d:6b:ee:
8a:ba:35:40:a2:00:e3:eb:b5:df:36:c0:1a:70:1c:
84:a8:5a:34:e7:61:b2:46:ac:85:96:1f:4c:8c:1d:
b0:20:8b:e8:84:fa:3c:31:0e:09:ca:59:81:71:78:
1a:0b:f4:90:14:c5:66:dd:1a:49:a3:d6:8e:dc:be:
a0:e9:d9:c2:7c:7c:80:57:40:03:27:31:f6:6a:c0:
03:5f:c5:cc:67:15:7b:f2:f5:4c:90:1d:93:f0:e7:
89:0d:b9:5e:4b:fe:84:0d:8e:d2:f2:df:e3:a7:b2:
e1:0e:37:cb:d2:cc:29:c5:d9:57:14:d9:21:08:fe:
58:1e:74:f8:fd:d5:d4:5d:36:af:09:a3:d1:1f:5c:
dc:cb:ff:f5:c9:bb:9c:16:fb:5d:5a:a9:eb:dd:83:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:AC:09:33:49:D6:6E:73:68:BA:64:A8:01:A8:4F:B1:89:24:0D
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/9B2sCTNJ1m5zaLpkqAGoT7GJJA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.136.0/22
89.42.196.0/24
89.47.196.0-89.47.202.255
92.114.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:c2:42:41:e5:ec:3d:d6:60:57:38:64:a4:9d:78:6e:bf:a9:
0c:09:dd:8c:72:95:3b:6f:d8:c7:18:be:01:bf:14:d6:c0:e0:
96:42:e7:92:68:ee:52:d6:99:d0:64:b8:01:78:44:97:06:38:
0f:fc:f0:60:62:87:ad:1f:49:89:a7:5f:53:a8:13:6f:77:a3:
83:3c:26:9e:36:f7:b1:a4:10:04:f0:f5:5a:9d:34:e5:44:39:
b1:b2:f8:0a:b8:a9:de:4e:cf:b3:e7:7c:92:4e:b4:9b:d6:95:
b0:5e:48:88:4f:d7:00:be:c2:0f:45:07:7f:cc:55:36:50:c8:
d3:52:93:36:da:63:d3:22:4d:49:49:b4:0a:8a:93:62:c1:e6:
fa:04:71:77:22:bb:96:18:49:d7:b8:a1:d7:71:3b:bc:bd:05:
f3:4b:ee:44:c1:20:60:84:3b:d9:00:c0:18:4a:d1:4d:8c:da:
f0:9e:fc:19:5b:85:84:ea:1a:36:4f:34:12:43:13:cf:b3:f2:
51:d3:dc:bf:96:eb:d1:7e:b4:b1:d2:99:57:ff:20:c0:29:2c:
db:7c:27:72:c7:dc:4b:aa:4b:08:3b:02:68:bc:d5:ee:0e:3d:
fd:9c:a7:50:aa:29:c4:d3:08:e2:c7:8d:68:78:bf:f7:c0:f9:
09:18:7c:f0
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYikMssHDwb8oNNqyZ1Kqjy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjMwNjEwMDcyNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDFkYWMwOTMzNDlkNjZlNzM2OGJhNjRhODAxYTg0ZmIxODkyNDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGK1o+ywrFFxuIR45b8Jjm0WuM+r
y9CSaWQAxXaenxVZml7PzaI6Pd491h5+6kEyYJRMVvYNXO61qbzRV0bKEBumomza
gfiLr1qa76PtxcrYYewFwKcdkqgdvl7kPgojR7IUgOENa+6KujVAogDj67XfNsAa
cByEqFo052GyRqyFlh9MjB2wIIvohPo8MQ4JylmBcXgaC/SQFMVm3RpJo9aO3L6g
6dnCfHyAV0ADJzH2asADX8XMZxV78vVMkB2T8OeJDbleS/6EDY7S8t/jp7LhDjfL
0swpxdlXFNkhCP5YHnT4/dXUXTavCaPRH1zcy//1ybucFvtdWqnr3YP54wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPQdrAkzSdZuc2i6ZKgBqE+xiSQNMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEvOUIyc0NUTkoxbTV6YUxwa3FBR29UN0dKSkEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCLiKgAwQC
WSqIAwQAWSrEMAwDBAJZL8QDBABZL8oDBAJccjAwDQYJKoZIhvcNAQELBQADggEB
AD7CQkHl7D3WYFc4ZKSdeG6/qQwJ3YxylTtv2McYvgG/FNbA4JZC55Jo7lLWmdBk
uAF4RJcGOA/88GBih60fSYmnX1OoE293o4M8Jp4297GkEATw9VqdNOVEObGy+Aq4
qd5Oz7PnfJJOtJvWlbBeSIhP1wC+wg9FB3/MVTZQyNNSkzbaY9MiTUlJtAqKk2LB
5voEcXciu5YYSde4oddxO7y9BfNL7kTBIGCEO9kAwBhK0U2M2vCe/BlbhYTqGjZP
NBJDE8+z8lHT3L+W69F+tLHSmVf/IMApLNt8J3LH3EuqSwg7Ami81e4OPf2cp1Cq
KcTTCOLHjWh4v/fA+QkYfPA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:27 2024 by rpki-client on console-ams.rpki-client.org