Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_HtbfzzFMep1Ikw9C2FVDp-YvNU.roa
File: _HtbfzzFMep1Ikw9C2FVDp-YvNU.roa (raw, json)
Hash identifier: SSQIwAwug79O11CybWlkonzZOL29jJgBkCyODRVQpRE=
Subject key identifier: FC:7B:5B:7F:3C:C5:31:EA:75:22:4C:3D:0B:61:55:0E:9F:98:BC:D5
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 018F1A10E82AB7BEA6C0083E5DAE0CF015B6
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_HtbfzzFMep1Ikw9C2FVDp-YvNU.roa
Signing time: Fri 26 Apr 2024 11:01:06 +0000
ROA not before: Fri 26 Apr 2024 11:01:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48045
IP address blocks: 46.46.64.0/18 maxlen: 18
94.240.128.0/22 maxlen: 22
94.240.136.0/21 maxlen: 21
2a09:65c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 26 Apr 2024 13:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:10:e8:2a:b7:be:a6:c0:08:3e:5d:ae:0c:f0:15:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 26 11:01:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc7b5b7f3cc531ea75224c3d0b61550e9f98bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:41:34:ec:af:f7:4a:65:3e:4b:ca:25:cb:
aa:0c:f5:e6:bc:4c:ea:82:ae:ea:34:41:a5:88:e4:
23:5b:a0:07:f5:34:f2:8f:7d:b5:87:3d:ae:56:53:
ae:48:67:12:5f:9f:de:30:f3:2e:99:a9:33:eb:13:
0d:75:2a:44:23:70:7e:83:64:28:bf:60:5f:30:34:
25:a3:58:25:9c:8d:9d:9b:06:76:90:f6:49:c3:a3:
85:41:6a:a8:fe:51:49:78:2a:85:d9:8d:0d:28:a5:
72:e4:d4:8c:c8:e9:73:a7:5e:43:2c:53:fd:01:17:
84:10:9d:f0:06:96:04:bd:cf:64:62:ab:10:fe:21:
9a:ca:f3:15:d3:6b:78:ef:e4:c3:5e:27:7e:1e:d5:
e0:42:48:9c:ed:3b:27:20:1a:0c:5d:a1:79:5f:34:
79:d6:ab:2c:51:f4:ae:d5:40:6b:e5:ff:52:dd:67:
7d:94:4a:7c:5e:d6:da:a1:11:b2:95:94:b5:95:44:
0c:63:2c:d0:64:67:91:14:e0:36:2b:77:2e:87:a0:
9b:dd:2e:03:c0:be:fd:34:16:27:cb:5d:84:ba:0f:
19:ef:67:f3:06:7c:38:39:96:c6:54:9e:e6:93:95:
b0:59:cf:e0:63:d8:84:1c:de:3c:79:a9:4c:41:38:
ef:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7B:5B:7F:3C:C5:31:EA:75:22:4C:3D:0B:61:55:0E:9F:98:BC:D5
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/_HtbfzzFMep1Ikw9C2FVDp-YvNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.46.64.0/18
94.240.128.0/22
94.240.136.0/21
IPv6:
2a09:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e5:57:c0:a1:e5:18:3b:87:b1:9a:4e:53:b6:5a:a1:92:2d:
9f:64:16:6d:b4:99:da:90:e7:0c:80:5a:04:0d:c0:9d:dd:82:
3e:e5:39:e5:21:92:d7:7a:d6:12:ac:7a:6f:e5:65:4a:22:3f:
75:a8:28:93:1f:c9:11:cb:29:33:d6:c9:b7:17:32:f7:43:e6:
aa:2e:81:b9:7f:09:da:75:19:df:83:a4:01:9b:d5:8b:5c:08:
c3:a4:1d:01:51:2c:73:60:5f:c5:ea:d7:bf:e3:aa:05:e9:0b:
66:84:c8:fc:11:9b:36:27:00:b2:81:5f:56:4c:08:1d:29:de:
ef:5c:c9:0e:ca:78:83:48:3e:d7:e4:2b:1f:87:f8:39:eb:08:
fc:85:50:1a:8d:a8:03:45:32:b5:8a:d7:8f:fc:53:0d:3a:aa:
a0:0d:53:1a:f3:3a:c0:30:f5:11:77:7a:f9:9a:88:63:d4:f9:
a9:03:02:c8:71:6d:63:7d:04:0d:42:17:1d:7a:16:92:88:5d:
8e:6c:0c:11:13:fc:6b:91:49:04:fe:f5:1f:9d:a9:71:7a:bf:
54:12:c5:ba:56:56:96:6d:0b:d2:60:2c:fe:c3:45:23:45:92:
54:00:6e:65:e4:14:82:eb:a7:de:4d:2d:97:97:bd:9c:c5:5c:
56:0c:c5:27
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY8aEOgqt76mwAg+Xa4M8BW2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjQwNDI2MTEwMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzdiNWI3ZjNjYzUzMWVhNzUyMjRjM2QwYjYxNTUwZTlmOThiY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbVBNOyv90plPkvKJcuqDPXmvEzq
gq7qNEGliOQjW6AH9TTyj321hz2uVlOuSGcSX5/eMPMumakz6xMNdSpEI3B+g2Qo
v2BfMDQlo1glnI2dmwZ2kPZJw6OFQWqo/lFJeCqF2Y0NKKVy5NSMyOlzp15DLFP9
AReEEJ3wBpYEvc9kYqsQ/iGayvMV02t47+TDXid+HtXgQkic7TsnIBoMXaF5XzR5
1qssUfSu1UBr5f9S3Wd9lEp8XtbaoRGylZS1lUQMYyzQZGeRFOA2K3cuh6Cb3S4D
wL79NBYny12Eug8Z72fzBnw4OZbGVJ7mk5WwWc/gY9iEHN48ealMQTjviQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPx7W388xTHqdSJMPQthVQ6fmLzVMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvX0h0YmZ6ekZNZXAxSWt3OUMyRlZEcC1Zdk5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2QtMDQxYWIzMDJjMmY5
LzEvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGLi5AAwQC
XvCAAwQDXvCIMA0EAgACMAcDBQAqCWXAMA0GCSqGSIb3DQEBCwUAA4IBAQAd5VfA
oeUYO4exmk5Ttlqhki2fZBZttJnakOcMgFoEDcCd3YI+5TnlIZLXetYSrHpv5WVK
Ij91qCiTH8kRyykz1sm3FzL3Q+aqLoG5fwnadRnfg6QBm9WLXAjDpB0BUSxzYF/F
6te/46oF6QtmhMj8EZs2JwCygV9WTAgdKd7vXMkOyniDSD7X5Csfh/g56wj8hVAa
jagDRTK1iteP/FMNOqqgDVMa8zrAMPURd3r5mohj1PmpAwLIcW1jfQQNQhcdehaS
iF2ObAwRE/xrkUkE/vUfnalxer9UEsW6VlaWbQvSYCz+w0UjRZJUAG5l5BSC66fe
TS2Xl72cxVxWDMUn
-----END CERTIFICATE-----
Generated at Fri Apr 26 18:27:25 2024 by rpki-client on console.sobornost.net