Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0jz4i4KuMlsKcu0Ric61JD9t-Bc.roa
File: 0jz4i4KuMlsKcu0Ric61JD9t-Bc.roa (raw, json)
Hash identifier: 0PqUNnFWHYnb9iROj+JyyIcC45ukV+POx8fYygkckf8=
Subject key identifier: D2:3C:F8:8B:82:AE:32:5B:0A:72:ED:11:89:CE:B5:24:3F:6D:F8:17
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018713E5E4A87A09C38A965954ED7EE25EB3
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0jz4i4KuMlsKcu0Ric61JD9t-Bc.roa
Signing time: Fri 24 Mar 2023 13:54:06 +0000
ROA not before: Fri 24 Mar 2023 13:54:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 46.34.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 08:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:e5:e4:a8:7a:09:c3:8a:96:59:54:ed:7e:e2:5e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 24 13:54:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d23cf88b82ae325b0a72ed1189ceb5243f6df817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:df:5b:a0:3f:17:63:25:d1:74:b7:f8:54:19:
b7:3a:eb:fa:f8:45:27:b4:89:83:10:cc:9e:e5:dd:
47:7c:ad:aa:2e:40:92:b9:73:57:37:1e:1d:1e:64:
d1:00:c3:80:f1:d1:e9:11:c2:2c:38:85:b3:0b:2a:
c7:03:90:27:97:58:c5:0d:d1:14:1c:47:b8:57:05:
bc:4d:01:08:84:63:c2:23:1c:f8:b9:fc:1d:03:d4:
bf:9c:4e:ca:4a:27:94:c8:d0:6b:65:71:b1:95:15:
88:5c:8f:50:73:37:9b:0a:ca:33:70:0b:71:31:f7:
9b:74:9e:bd:86:79:9a:e7:2e:26:dc:5f:c7:b5:40:
b5:c7:62:8c:23:72:ff:63:a0:c7:44:a3:5c:c1:59:
39:a2:54:a7:fb:13:b8:f7:c8:f4:1c:5b:3b:c2:b7:
70:20:8f:cc:40:6e:74:c2:68:65:16:61:15:f0:cc:
7b:e7:7f:83:68:0b:bb:9b:9f:83:e6:1b:4f:db:a8:
f9:e2:e5:cf:b0:54:b4:76:0c:cb:0d:99:b6:d1:9a:
67:e2:0c:2f:3d:86:a1:54:06:0e:03:e0:1e:eb:6d:
ee:67:b4:4c:ac:af:4e:59:58:a3:29:16:ad:48:85:
28:bf:71:66:5c:d7:b3:c8:c9:b4:1f:30:dd:8b:aa:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:F8:8B:82:AE:32:5B:0A:72:ED:11:89:CE:B5:24:3F:6D:F8:17
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/0jz4i4KuMlsKcu0Ric61JD9t-Bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:85:05:18:91:06:b3:7c:05:bb:df:b8:90:d5:58:c3:7c:59:
9d:2b:01:96:75:40:96:0f:92:b0:5c:d7:a6:5e:f6:b2:b3:ee:
f2:8b:12:6f:69:21:e3:56:90:81:bd:69:9e:21:72:a1:44:7a:
38:ab:31:e3:10:d3:fa:a9:d8:5e:8b:07:61:f0:4e:0b:d7:27:
f6:43:ed:bb:af:80:75:5a:c6:0b:3f:dc:62:7a:cb:02:58:20:
69:bd:9c:89:8a:55:da:88:e4:0d:c2:fd:d0:25:62:d8:3f:df:
4f:cf:20:bd:a1:34:5d:66:db:0b:1e:d0:88:ce:fb:d6:d2:b1:
c2:5f:a4:0f:a5:7a:ec:2e:7c:33:3b:96:f4:82:2f:f2:a0:ac:
6c:b6:f8:e5:27:10:b6:e7:cb:30:5b:5f:1a:53:ec:57:e4:54:
3f:11:55:24:73:cc:b3:19:1c:ba:e4:6a:fb:b7:68:2c:af:f3:
ed:54:0d:84:8b:a0:23:a9:7a:8c:4e:a1:8d:b9:b7:2b:3a:a2:
bd:ba:51:84:2d:e4:30:90:a0:e6:a6:4a:c8:68:c0:db:0a:d3:
7e:78:2b:27:70:cb:8a:a8:24:76:32:5e:17:bf:aa:13:7b:bd:
91:60:e2:40:77:48:e0:c5:a6:88:33:66:5a:de:44:3f:92:1c:
f8:4a:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org