Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa
File: 0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa (raw, json)
Hash identifier: OJAlvnhTR8IZ82b4OowOcvafK3A9DFpAKyuUZF8mOgc=
Subject key identifier: D1:1D:04:F8:07:44:D9:28:82:8B:69:D4:AD:69:12:4B:37:EF:60:E7
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01863B79E0256D375CBDF552E5C2126FEF74
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa
Signing time: Fri 10 Feb 2023 13:18:08 +0000
ROA not before: Fri 10 Feb 2023 13:18:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/21 maxlen: 21
46.34.32.0/19 maxlen: 19
46.34.48.0/20 maxlen: 20
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 Feb 2023 13:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:79:e0:25:6d:37:5c:bd:f5:52:e5:c2:12:6f:ef:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 10 13:18:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d11d04f80744d928828b69d4ad69124b37ef60e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:18:90:53:d3:8c:0f:e9:ab:90:0c:f7:62:
db:fb:52:ac:0d:4c:4c:6b:ce:37:9c:14:3b:63:7d:
83:e5:66:42:59:7e:54:0c:22:be:45:b9:56:da:ed:
bd:a6:f5:3b:67:3a:6c:2b:3b:3d:20:06:91:31:80:
b8:0c:80:45:24:aa:f4:e2:8f:48:79:b5:b1:38:c8:
66:22:a5:01:8b:0d:e1:08:06:d6:59:26:42:b4:28:
c5:38:7d:12:da:ce:4f:6d:c7:77:a0:5f:95:4b:c9:
43:6a:8c:20:d4:9c:24:3a:b2:93:80:ff:01:77:ee:
ad:7d:5c:4a:8c:5d:9f:13:e2:c5:a5:39:cf:54:0d:
03:be:4e:ba:fc:6d:61:79:9a:ba:3e:c3:a8:19:de:
3e:63:da:cc:ad:01:27:60:ee:73:a7:e4:32:9f:a4:
42:95:96:29:2f:a3:b5:a8:eb:3a:65:e7:cf:ab:32:
fa:90:c3:c4:43:78:77:cb:cf:d7:54:d3:6d:02:71:
66:77:b9:4b:f5:ba:ad:cd:71:4e:c1:b7:d7:98:75:
c9:25:35:f5:e5:72:6a:a5:ac:24:f7:f2:97:a9:5d:
e8:26:49:c8:c6:12:93:a8:1c:ac:83:11:f0:ec:c5:
ab:c6:d0:43:8a:a5:81:5e:d1:69:93:15:d9:1e:3f:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1D:04:F8:07:44:D9:28:82:8B:69:D4:AD:69:12:4B:37:EF:60:E7
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0R0E-AdE2SiCi2nUrWkSSzfvYOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
58:d8:fd:ec:9b:a1:07:45:dc:f3:1f:32:aa:32:0f:a6:54:b4:
2d:74:a9:8e:66:10:61:1f:a1:7a:12:ce:1b:c2:2d:25:87:44:
15:78:de:26:40:5d:ae:15:da:9b:67:44:34:5f:a4:84:dc:1b:
b1:28:eb:92:97:27:fe:43:14:4e:02:09:c5:22:32:ca:6c:dc:
f9:9b:f5:b1:07:00:3d:5b:2a:c6:99:42:95:52:35:12:4a:59:
3b:f0:e0:cf:af:68:10:45:f9:dc:c7:85:ec:39:6e:ab:41:10:
73:bf:17:d0:a0:2c:79:22:59:1f:68:29:63:13:47:d1:88:31:
7a:cb:87:4c:bd:3b:76:aa:61:de:41:7b:bb:0b:79:0f:a7:a1:
96:56:31:ad:b3:44:e6:ca:e3:d1:51:75:cf:7c:53:4e:9e:a4:
fa:61:51:9f:7c:e4:c8:e8:2a:ba:17:aa:9b:39:3f:78:a7:6d:
05:4c:dc:ea:45:fc:8a:08:6a:80:94:8e:33:88:7b:0c:dc:0e:
60:54:dc:f0:60:e8:92:7a:08:e4:7a:66:63:0e:c3:8d:0b:37:
00:c2:26:ae:eb:35:c9:ed:c1:55:21:de:78:44:f9:66:92:91:
67:e2:55:ad:b3:bf:c4:b5:fb:01:57:1b:1f:ca:9c:08:99:45:
3e:cd:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org