Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1pWjWEbiIThc48OHDXq47qo0zHg.roa
File: 1pWjWEbiIThc48OHDXq47qo0zHg.roa (raw, json)
Hash identifier: vcpMyGz1QcJxNsbp4skeiaX7Ttays+uuU08fA1QikOs=
Subject key identifier: D6:95:A3:58:46:E2:21:38:5C:E3:C3:87:0D:7A:B8:EE:AA:34:CC:78
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B3EDBFE060BB5A1AC4A9F0796459BD47B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1pWjWEbiIThc48OHDXq47qo0zHg.roa
Signing time: Tue 17 Oct 2023 18:18:06 +0000
ROA not before: Tue 17 Oct 2023 18:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209492
IP address blocks: 46.34.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:db:fe:06:0b:b5:a1:ac:4a:9f:07:96:45:9b:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 17 18:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d695a35846e221385ce3c3870d7ab8eeaa34cc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:ad:d0:7d:d9:85:f3:ac:a0:f0:ad:c2:46:
9b:f1:20:25:6f:fc:e1:67:5f:d3:0a:42:98:4d:69:
29:ed:fe:23:76:e3:21:9c:1a:64:82:f5:4c:0a:04:
b4:9a:62:b8:25:a8:25:7b:d7:4f:4e:59:9f:55:90:
f6:00:77:ad:f6:36:0f:d6:1f:8e:30:40:84:ad:d2:
a1:97:eb:a7:5d:bf:54:4f:42:e5:5f:1b:e6:82:39:
50:c7:e1:88:07:d3:2c:f6:3e:66:9d:57:7e:a7:19:
d0:92:f7:dd:07:5b:30:7b:a4:10:13:47:fd:2c:1f:
29:88:a0:3d:21:f4:82:aa:37:67:af:1c:bf:bb:ac:
96:8a:99:71:67:47:69:31:99:40:bd:8d:65:27:d0:
91:48:d6:f5:b1:33:00:5a:90:5c:38:23:dd:b7:8a:
ca:26:b7:1d:6b:4e:29:a2:48:2d:03:87:8c:6c:ab:
d9:e2:12:c8:34:2c:bc:c6:d2:89:ea:ac:c3:bb:e9:
ab:0c:fe:8d:78:ca:70:74:4e:51:da:d8:81:3b:7d:
64:c7:79:36:a1:0f:b2:52:61:c6:6f:5b:17:12:76:
b9:03:c4:e4:9b:91:84:de:68:42:77:84:c7:cf:dc:
5a:e4:df:2a:1f:21:b3:d4:18:d5:96:c0:9a:1f:ca:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:A3:58:46:E2:21:38:5C:E3:C3:87:0D:7A:B8:EE:AA:34:CC:78
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1pWjWEbiIThc48OHDXq47qo0zHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:56:3a:91:34:17:d9:2c:75:cb:2a:b4:ec:30:28:37:71:40:
92:72:a1:e7:80:37:83:52:f3:38:13:0a:67:f0:c8:41:8b:e2:
e4:41:b2:a9:7c:be:49:5c:c4:8f:64:d1:d4:43:fb:42:50:cf:
82:6f:a4:3d:5a:91:c3:a8:3c:69:f7:38:7b:d9:9a:31:a5:92:
0a:18:92:d5:19:e0:88:5a:8a:a3:07:55:7a:8c:ae:3a:a7:4c:
9c:73:00:ec:32:14:14:d2:26:80:f1:4a:83:80:4e:e8:48:fb:
c5:01:b8:ee:96:4d:f3:2f:4a:b5:a4:b0:32:4a:38:3a:26:7d:
ae:9f:56:1b:cf:b6:80:82:37:10:97:99:cc:a4:44:21:86:53:
40:57:af:79:1a:e3:a8:62:7e:3e:eb:2c:24:a3:6c:b3:c1:69:
ad:f3:b3:16:26:37:68:5b:9c:f0:55:7c:ac:3a:30:74:ad:a5:
6b:df:bd:4a:fb:0d:e1:a1:fe:69:c9:4d:03:47:9a:e2:14:3d:
8e:cb:7e:ca:83:ff:a2:7f:57:7b:bd:dc:7c:9d:32:d3:f6:78:
4f:c4:1a:e4:09:92:78:0c:3c:f8:2f:2d:47:4f:b3:4c:e3:8b:
af:f6:40:fe:2d:0f:49:af:b7:1a:9b:b4:6c:02:f4:53:1c:ec:
03:ac:20:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org