Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2pVB-5GoJQp5Z91hx5gJuPQmPMw.roa
File: 2pVB-5GoJQp5Z91hx5gJuPQmPMw.roa (raw, json)
Hash identifier: g8Uz7WiypnitfIjc8x0p7CVGV4etrsmgA2N45xyL7Eo=
Subject key identifier: DA:95:41:FB:91:A8:25:0A:79:67:DD:61:C7:98:09:B8:F4:26:3C:CC
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01856FC2593B8509D20CAF37FA24D5104F16
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2pVB-5GoJQp5Z91hx5gJuPQmPMw.roa
Signing time: Sun 01 Jan 2023 23:54:45 +0000
ROA not before: Sun 01 Jan 2023 23:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/19 maxlen: 19
46.34.32.0/20 maxlen: 20
46.34.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 10:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:59:3b:85:09:d2:0c:af:37:fa:24:d5:10:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 1 23:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9541fb91a8250a7967dd61c79809b8f4263ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:51:73:49:dc:c3:f5:15:58:9a:90:98:21:
a7:ee:9d:d6:77:a3:a0:47:7f:98:e6:63:10:c2:58:
95:24:c9:26:37:88:07:52:33:73:11:0f:4d:09:1e:
97:7d:06:b2:d4:20:29:8d:e7:95:96:ec:21:e4:d4:
2c:1d:c1:a6:7a:5b:81:bd:81:f2:50:68:59:86:38:
f6:c3:e2:d7:77:d6:ad:3f:35:3a:4f:f0:75:24:16:
b2:75:37:1e:fa:45:67:79:57:f1:8b:75:7b:1e:b6:
a7:32:de:2e:16:33:44:41:4c:db:1e:82:bf:80:64:
26:0a:e7:00:6f:f4:19:df:b8:63:f2:cd:02:59:b5:
1a:71:2e:51:2e:23:90:1e:81:8e:c0:9e:5b:73:bd:
ce:07:a8:4f:b2:ec:33:3a:58:8c:c3:ff:bc:db:0b:
f8:0b:bd:a2:2a:38:41:df:2d:35:59:6e:24:ab:b8:
76:ad:04:ba:97:c8:6d:3e:d8:7c:16:5d:9a:d6:88:
70:5c:02:0a:92:f5:68:15:6a:c9:c0:9d:53:84:c4:
07:e8:84:77:17:f4:35:26:6f:44:c6:2a:9a:46:d1:
27:a6:cf:7b:e1:4b:d2:09:dc:99:14:25:22:c9:38:
6e:4b:8a:f1:2f:d9:82:1a:ff:c9:97:75:39:bb:f2:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:41:FB:91:A8:25:0A:79:67:DD:61:C7:98:09:B8:F4:26:3C:CC
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/2pVB-5GoJQp5Z91hx5gJuPQmPMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
45:b0:83:6b:80:5e:df:ec:6c:a7:2c:0c:31:6b:a9:d3:0c:4a:
7a:0b:2b:be:69:9b:9d:77:52:84:2a:7b:14:9a:9f:4a:2c:db:
c5:f1:40:42:c9:c9:9b:01:24:74:97:f1:b7:13:f5:8d:b9:33:
34:c7:97:f9:23:ad:49:42:12:75:7c:30:f8:8d:17:53:ee:a0:
27:d1:7c:75:a6:51:ae:9f:4b:6e:80:ce:88:a4:8a:56:ee:19:
a3:9b:72:1f:4c:4f:ec:e7:fc:62:a4:80:d1:ee:fc:75:3f:87:
04:46:cf:a5:48:cc:9d:0d:31:83:5f:b2:4e:d9:88:6d:35:7a:
83:52:ad:2d:c1:05:96:8e:1b:bd:2d:74:59:7d:e6:28:25:ad:
86:01:f4:ec:81:84:5e:78:ef:96:3b:48:5e:be:6d:d1:d6:98:
f6:38:b5:47:38:36:36:df:12:3b:5e:05:25:94:fe:79:bf:da:
1a:7b:ac:18:67:87:c7:a4:ed:68:b9:41:d1:d0:03:44:8d:0d:
e5:44:62:82:30:bc:1c:31:39:5b:3c:da:94:05:44:83:ed:b2:
ae:2d:8f:d4:7d:e9:d3:ed:92:64:66:2a:7d:81:cf:f7:d9:66:
b9:ef:bc:33:43:6e:3f:ac:0b:2c:2b:cd:57:95:7c:35:cb:4b:
52:8e:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org