Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2LvUnddoivV5_T0Zci2CzVzlmCA.roa
File: 2LvUnddoivV5_T0Zci2CzVzlmCA.roa (raw, json)
Hash identifier: Q2Gme3clPRR3PMR413RkgLdDnTs63YBzYZYg0aFtDzQ=
Subject key identifier: D8:BB:D4:9D:D7:68:8A:F5:79:FD:3D:19:72:2D:82:CD:5C:E5:98:20
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186750B41EF1590917C78DF7C09AC0D2E07
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2LvUnddoivV5_T0Zci2CzVzlmCA.roa
Signing time: Tue 21 Feb 2023 17:35:17 +0000
ROA not before: Tue 21 Feb 2023 17:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 46.34.50.0/24 maxlen: 24
46.34.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:0b:41:ef:15:90:91:7c:78:df:7c:09:ac:0d:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 21 17:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8bbd49dd7688af579fd3d19722d82cd5ce59820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1e:73:cb:b1:57:97:7f:e8:ae:2e:7a:95:77:
d1:b7:2f:b3:1f:f8:1c:2a:65:3e:3a:bb:c6:9d:10:
fa:e8:a4:a8:a7:5b:12:8e:49:2f:69:61:a5:3a:06:
1b:d6:ef:6f:36:e3:00:c8:ec:60:8d:17:11:72:91:
a1:ac:e9:64:a9:c6:2e:93:b9:9b:9a:c7:aa:4b:88:
f6:8a:db:17:dd:37:08:b3:af:5e:5b:3a:e8:82:07:
a4:86:56:dd:78:ce:c5:b5:0d:19:ad:ea:fd:91:7a:
92:c4:a1:8f:7c:5f:d4:28:94:70:1a:db:e7:a7:56:
10:85:d9:8a:c4:bb:8c:26:c6:da:06:73:85:a3:b3:
c9:af:d5:04:65:84:8d:76:49:80:1b:cc:d9:78:12:
cc:8d:23:6e:cb:1a:79:53:ab:77:18:e6:c0:c9:7a:
87:1b:9b:61:c4:47:29:ee:6c:a5:e3:08:14:d7:8c:
ab:f3:71:cc:c0:66:22:87:1d:81:c7:c1:99:d2:84:
c2:97:74:5d:a6:2f:99:e5:2b:6c:ea:d5:28:2a:a6:
b7:f8:50:f8:f5:05:ed:2a:b8:a1:46:7d:fa:9c:ab:
da:92:76:9b:33:3b:43:a6:b4:6e:a0:73:cd:dc:98:
0f:b8:7f:15:57:f1:0f:51:a5:a0:52:cd:b5:cd:fe:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BB:D4:9D:D7:68:8A:F5:79:FD:3D:19:72:2D:82:CD:5C:E5:98:20
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2LvUnddoivV5_T0Zci2CzVzlmCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.50.0/24
46.34.56.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:f0:c9:2b:32:3f:69:60:84:e6:eb:27:ba:65:8f:78:ac:c1:
93:7f:9a:3e:b6:f5:5d:b2:89:6c:2b:48:76:d8:b1:d1:fa:b5:
79:a3:c9:69:50:c6:c7:82:2d:15:fe:f2:28:25:70:3a:50:98:
a9:ca:75:4b:49:83:ea:26:f3:c9:53:22:94:5e:c1:80:38:4a:
4c:5b:7a:29:4e:16:a1:a2:b5:6e:98:50:ab:28:15:7b:cc:06:
d6:2f:45:b4:dd:ba:02:f8:5c:f3:68:d7:5a:df:f4:af:ab:80:
66:4b:f9:63:56:07:e1:9b:98:9e:19:34:2c:25:77:b0:d4:d7:
b9:de:d3:9a:3c:a2:0d:be:1b:26:95:9e:92:a5:6e:99:59:53:
e4:03:f9:25:e4:74:43:07:6c:a5:55:af:eb:f3:58:10:af:da:
b4:b6:95:af:8f:51:43:8e:93:ec:ad:c2:0a:1d:e4:9b:61:58:
09:f3:34:8e:ea:62:86:c7:3c:e4:a8:97:89:b1:8d:54:90:f1:
44:3f:f9:f5:c6:f4:24:8c:31:a9:27:90:a0:b3:54:2c:6d:10:
66:65:07:fc:f3:0c:e0:66:c0:eb:da:f7:24:34:73:91:7e:e4:
1f:60:52:7c:22:2a:3a:9d:a3:3c:45:13:40:64:19:06:53:78:
87:81:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org