Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/LAD7i2IOlHTGjlFNDlJGBl0vnP0.roa
File: LAD7i2IOlHTGjlFNDlJGBl0vnP0.roa (raw, json)
Hash identifier: 3latm8JyW7kd104PXoYrAHrkHtsxeIKrybLs1VuELKE=
Subject key identifier: 2C:00:FB:8B:62:0E:94:74:C6:8E:51:4D:0E:52:46:06:5D:2F:9C:FD
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 01856F1D868A005D54397C1A09B0B8A02E60
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/LAD7i2IOlHTGjlFNDlJGBl0vnP0.roa
Signing time: Sun 01 Jan 2023 20:54:43 +0000
ROA not before: Sun 01 Jan 2023 20:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52140
IP address blocks: 46.255.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:86:8a:00:5d:54:39:7c:1a:09:b0:b8:a0:2e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Jan 1 20:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c00fb8b620e9474c68e514d0e5246065d2f9cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:a2:e6:8a:d8:89:81:2d:99:bf:87:b3:bd:
98:7d:21:af:4d:14:21:c7:c1:aa:53:54:a2:71:74:
7d:1e:1c:57:57:6c:c7:43:e8:15:85:11:52:0c:26:
7d:10:5a:98:33:78:59:ed:af:d2:7f:9b:87:6f:3b:
9d:ce:b7:15:40:a3:0d:08:47:ca:cc:1a:53:15:f7:
6c:47:5b:7f:98:82:a0:81:a2:ad:c7:f5:b0:df:06:
11:d2:8c:69:1b:bc:0f:4d:38:3c:dd:47:a9:d8:19:
5a:b7:67:fb:ce:d0:11:2b:e1:80:9a:a7:3c:37:cc:
ad:2b:12:12:28:f7:91:bd:a3:46:b2:91:71:d2:3c:
7b:8c:61:5d:22:ce:db:50:13:b7:d3:9a:20:29:6a:
cd:4a:04:eb:c5:99:21:a0:0f:7e:19:31:3f:57:fa:
c4:56:2e:0f:5a:f2:99:65:c6:36:1b:33:7b:cc:7a:
57:84:02:5d:3f:f7:b3:fa:dd:06:f9:de:f7:2e:f8:
7d:77:45:b4:00:f2:39:85:81:77:06:2b:9f:0b:fe:
e3:a9:72:6a:6c:9b:c1:29:74:1d:32:89:8f:72:8c:
25:4b:a3:16:a8:e0:5c:94:ed:88:16:78:5b:99:85:
13:c1:1c:36:9a:73:84:02:a9:87:95:5b:38:4c:a1:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:FB:8B:62:0E:94:74:C6:8E:51:4D:0E:52:46:06:5D:2F:9C:FD
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/LAD7i2IOlHTGjlFNDlJGBl0vnP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.216.0/21
Signature Algorithm: sha256WithRSAEncryption
10:36:21:56:e2:86:e5:03:77:cf:81:6f:7c:97:4c:f1:48:31:
c3:e7:3c:95:d3:04:1e:4b:dd:2a:da:e6:76:26:c7:09:61:bc:
60:ba:b8:bf:a2:3f:83:39:3d:2f:bd:d2:83:9a:7b:73:88:fc:
e1:9d:75:22:a5:82:51:9a:10:d5:11:1f:d8:1d:d7:4a:23:56:
56:cb:ac:8b:a1:0e:a7:c8:7e:2d:de:d7:27:f8:e8:24:34:0f:
ac:b1:08:a0:3c:da:2e:e2:85:cd:97:04:31:19:ef:1b:cf:0e:
19:78:fd:f3:b7:75:76:b9:06:cb:4d:c4:b9:b5:23:fb:79:b4:
42:76:41:52:be:70:f1:c3:e6:12:25:16:06:50:8b:b3:27:88:
6c:ef:89:e0:33:56:94:41:83:a3:c0:21:19:f1:0b:6f:d5:65:
41:0a:f5:2e:8d:d5:e9:a6:60:2f:58:d4:c3:5a:47:22:48:ae:
90:0e:04:6c:42:e8:fe:30:93:c6:e8:a7:6f:4a:f9:a1:2b:07:
ba:a5:a8:00:90:94:62:f8:c1:3b:57:bd:20:f3:d3:0d:41:1b:
a2:68:dd:45:24:77:74:62:d8:6e:c2:e0:fe:97:b2:6b:7b:c8:
cc:21:39:ed:84:4a:56:d9:fb:44:a1:b4:45:6f:34:29:9c:9b:
c8:06:7a:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHYaKAF1UOXwaCbC4oC5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGM5YzUwY2Y0ZTJkYWMwNWUxZjA0MzI4MjI0ZTIwYTQ2
MDVkNzcwHhcNMjMwMTAxMjA1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzAwZmI4YjYyMGU5NDc0YzY4ZTUxNGQwZTUyNDYwNjVkMmY5Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRii5orYiYEtmb+Hs72YfSGvTRQh
x8GqU1SicXR9HhxXV2zHQ+gVhRFSDCZ9EFqYM3hZ7a/Sf5uHbzudzrcVQKMNCEfK
zBpTFfdsR1t/mIKggaKtx/Ww3wYR0oxpG7wPTTg83Uep2Blat2f7ztARK+GAmqc8
N8ytKxISKPeRvaNGspFx0jx7jGFdIs7bUBO305ogKWrNSgTrxZkhoA9+GTE/V/rE
Vi4PWvKZZcY2GzN7zHpXhAJdP/ez+t0G+d73Lvh9d0W0API5hYF3BiufC/7jqXJq
bJvBKXQdMomPcowlS6MWqOBclO2IFnhbmYUTwRw2mnOEAqmHlVs4TKHL1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwA+4tiDpR0xo5RTQ5SRgZdL5z9MB8GA1UdIwQY
MBaAFOJMnFDPTi2sBeHwQygiTiCkYF13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGIt
MGJmYjg2ODg0NDA0LzEvTEFEN2kySU9sSFRHamxGTkRsSkdCbDB2blAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zMTdjYzEtNjRjMi00NzJlLTkxNGItMGJmYjg2ODg0NDA0
LzEvNGt5Y1VNOU9MYXdGNGZCREtDSk9JS1JnWFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv/YMA0G
CSqGSIb3DQEBCwUAA4IBAQAQNiFW4oblA3fPgW98l0zxSDHD5zyV0wQeS90q2uZ2
JscJYbxguri/oj+DOT0vvdKDmntziPzhnXUipYJRmhDVER/YHddKI1ZWy6yLoQ6n
yH4t3tcn+OgkNA+ssQigPNou4oXNlwQxGe8bzw4ZeP3zt3V2uQbLTcS5tSP7ebRC
dkFSvnDxw+YSJRYGUIuzJ4hs74ngM1aUQYOjwCEZ8Qtv1WVBCvUujdXppmAvWNTD
WkciSK6QDgRsQuj+MJPG6KdvSvmhKwe6pagAkJRi+ME7V70g89MNQRuiaN1FJHd0
YthuwuD+l7Jre8jMITnthEpW2ftEobRFbzQpnJvIBnq8
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:49 2024 by rpki-client on console.sobornost.net