Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3a5_WcIw4SwLdmuRWllwCBvx_z4.roa
File: 3a5_WcIw4SwLdmuRWllwCBvx_z4.roa (raw, json)
Hash identifier: mMzHCZ0c52VEfKuFuw+1vj84AiB5jtL83wrnJmgheb8=
Subject key identifier: DD:AE:7F:59:C2:30:E1:2C:0B:76:6B:91:5A:59:70:08:1B:F1:FF:3E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189DFE78320546DC7193D6239FF4B856244
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3a5_WcIw4SwLdmuRWllwCBvx_z4.roa
Signing time: Thu 10 Aug 2023 14:43:58 +0000
ROA not before: Thu 10 Aug 2023 14:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 10:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:e7:83:20:54:6d:c7:19:3d:62:39:ff:4b:85:62:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 10 14:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddae7f59c230e12c0b766b915a5970081bf1ff3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:87:4e:07:0f:b8:60:8b:49:13:24:a9:bc:
f8:8f:bd:db:65:53:74:f7:f9:34:78:10:18:f6:dc:
f7:41:06:5d:8f:b5:65:65:fa:f6:c5:c8:e7:6e:fc:
93:05:e0:f6:93:b2:45:48:20:79:f4:72:f4:d7:ce:
aa:28:e8:02:30:28:ed:0c:cd:9a:80:92:38:86:00:
73:5f:b1:7c:08:1b:e8:3c:d6:d5:c7:04:2b:50:dd:
7e:bd:80:c3:cd:23:6e:2e:9d:86:28:31:12:85:3a:
31:82:32:af:0b:ce:c2:24:3c:a7:94:4a:7f:fd:f0:
3a:ac:14:7a:17:aa:08:dd:3d:4f:ba:54:bf:df:6b:
e3:9d:f3:50:20:00:81:22:fd:9a:a5:0d:61:f0:11:
1e:ab:62:73:25:d7:cf:00:8c:36:c9:d3:29:a8:12:
3b:15:e3:f6:dc:34:11:76:7d:d1:1d:5a:77:67:8d:
03:cd:87:d1:78:b5:fe:f0:cc:b7:f9:88:c7:92:b8:
cb:f3:f3:67:f0:51:0a:40:4c:5c:15:0f:dd:57:9f:
e2:df:2d:e8:4f:d4:28:28:d2:27:d9:7d:36:8a:10:
46:ec:10:e2:60:71:a3:79:2c:ba:33:59:63:04:93:
69:44:76:5f:79:00:cc:71:c5:d9:86:ae:ee:1b:d1:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:7F:59:C2:30:E1:2C:0B:76:6B:91:5A:59:70:08:1B:F1:FF:3E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3a5_WcIw4SwLdmuRWllwCBvx_z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
20:33:63:00:22:ea:68:c8:53:43:99:8b:93:4a:4f:7b:42:a3:
57:d1:b0:59:07:13:63:30:f8:76:27:f1:3b:1a:e3:67:df:46:
3e:b9:55:6d:66:61:e6:07:44:62:8c:ca:f2:ac:b2:39:0d:40:
f0:c2:18:92:64:48:44:ab:f3:e4:30:20:22:2b:9a:0d:56:c7:
b1:e4:49:1a:62:5c:af:39:26:23:be:20:80:57:a3:6a:c8:33:
54:3e:97:45:db:31:29:d2:ba:d4:a5:b3:b1:68:dd:79:a0:63:
53:fb:f7:71:1b:44:56:4f:2f:09:58:1a:2a:26:56:6a:ab:c3:
c1:43:80:72:55:80:30:96:55:5a:42:4d:23:b5:d6:07:7e:f8:
40:48:7c:7d:0b:4d:aa:3b:28:4d:fc:72:72:77:fd:ab:b0:34:
ab:d9:b1:96:5c:7b:be:a5:63:b9:5c:3a:50:0f:df:63:b4:de:
2d:d8:e4:ad:8c:91:20:99:82:f0:3d:fe:8e:6c:b5:ad:63:4b:
1a:2f:4e:d4:95:da:96:45:a4:a4:32:7e:45:08:5f:0d:dd:d2:
24:6c:a5:52:12:c1:fa:a9:47:b5:bc:33:a4:f9:21:04:f9:77:
de:19:2d:8a:14:83:73:4a:ff:c5:32:51:ae:77:ca:45:73:60:
e6:97:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org