Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4kAGgaQLqEWc1nFHfdbigc5_w7g.roa
File: 4kAGgaQLqEWc1nFHfdbigc5_w7g.roa (raw, json)
Hash identifier: 19tMr4ljpFenjHdaG73cCZRj2W8Qe3nnfpcq+UM8ogE=
Subject key identifier: E2:40:06:81:A4:0B:A8:45:9C:D6:71:47:7D:D6:E2:81:CE:7F:C3:B8
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018731E65A794DB2E33D1235B7305403F028
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4kAGgaQLqEWc1nFHfdbigc5_w7g.roa
Signing time: Thu 30 Mar 2023 09:43:12 +0000
ROA not before: Thu 30 Mar 2023 09:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.42.0/23 maxlen: 23
46.34.38.0/23 maxlen: 23
46.34.48.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 15:57:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:e6:5a:79:4d:b2:e3:3d:12:35:b7:30:54:03:f0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 30 09:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2400681a40ba8459cd671477dd6e281ce7fc3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:4c:08:a3:01:30:d0:30:be:9b:2a:cc:05:
a3:bb:77:8b:c8:25:79:24:96:28:c6:db:a1:ee:19:
2b:15:e2:ab:ec:aa:89:bb:48:88:77:d7:54:08:69:
5f:57:0d:fe:92:78:79:50:97:89:72:61:38:68:42:
42:d8:8c:d6:5f:46:39:e4:cd:22:01:08:d1:31:40:
19:d7:7a:b6:c6:f1:fe:76:c6:f5:01:a6:fa:af:47:
64:e5:c1:5e:38:73:48:7c:c0:35:11:ab:1a:a9:da:
61:ee:4e:24:1f:46:5a:f9:9c:5d:03:49:8f:c7:38:
9c:e2:6a:f8:8b:dc:3d:e8:81:06:72:66:52:81:df:
a3:40:a0:79:f5:e4:7e:67:77:25:60:83:12:18:12:
09:52:c8:ad:34:de:0c:02:25:69:0a:e1:65:22:5a:
e5:f8:bd:0d:87:ea:de:6a:44:5a:5c:50:63:14:fa:
89:86:60:44:f0:75:2c:82:e8:28:b0:52:2e:a3:bc:
bb:fb:4a:3e:41:e3:a4:4f:17:a8:62:03:9c:b3:ff:
18:bc:23:fc:1b:bc:24:b4:55:6d:2d:a9:8b:1e:1b:
1e:71:b9:b0:76:d9:88:e4:36:3c:71:5f:c5:27:9e:
dc:5d:bf:68:73:27:85:3b:94:26:46:8d:a4:c3:45:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:06:81:A4:0B:A8:45:9C:D6:71:47:7D:D6:E2:81:CE:7F:C3:B8
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4kAGgaQLqEWc1nFHfdbigc5_w7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0-46.34.39.255
46.34.42.0/23
46.34.48.0/23
46.34.54.0/23
46.34.58.0/23
Signature Algorithm: sha256WithRSAEncryption
78:87:74:ba:6c:6e:59:23:d0:3e:3a:12:21:68:dc:be:01:98:
27:78:89:da:a3:cb:5a:b1:1d:ec:e0:a6:e8:33:33:49:e8:42:
07:f2:4d:fb:da:27:67:3f:9d:05:83:2b:25:8c:63:ca:ec:96:
34:a1:55:38:19:94:ef:1f:24:3b:21:f3:99:d6:72:f9:ed:95:
6e:82:a9:81:6c:ad:16:3a:a8:af:dc:08:f8:9a:c1:fe:ac:79:
06:95:fe:f8:d3:9a:75:31:03:76:eb:a9:b3:e3:3f:3a:64:b9:
c4:89:78:66:9a:15:44:3b:50:f9:8b:26:44:70:b5:30:87:31:
43:d3:e9:d9:89:22:e9:e0:f1:05:bb:e3:04:6b:10:5f:e3:0c:
fc:cf:06:68:fb:5a:b6:25:28:e5:2c:6e:c6:05:8b:37:8e:2c:
79:ac:e5:ea:01:40:36:74:13:5b:64:14:04:9e:fa:59:3a:b0:
06:b3:a8:9a:84:d8:8b:ba:8e:4f:c3:39:dd:f9:b9:39:6a:ce:
1c:c3:c7:e3:b3:be:8f:ad:e4:f9:3c:d2:f3:0a:54:f3:10:23:
9c:bd:7f:ca:a5:c3:9d:fd:4f:ea:44:94:6f:9f:1d:46:97:c2:
e0:65:a3:64:8e:43:6d:90:77:4f:4c:42:f0:46:36:96:db:01:
16:71:1f:21
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYcx5lp5TbLjPRI1tzBUA/AoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMzMwMDk0MzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQwMDY4MWE0MGJhODQ1OWNkNjcxNDc3ZGQ2ZTI4MWNlN2ZjM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtxMCKMBMNAwvpsqzAWju3eLyCV5
JJYoxtuh7hkrFeKr7KqJu0iId9dUCGlfVw3+knh5UJeJcmE4aEJC2IzWX0Y55M0i
AQjRMUAZ13q2xvH+dsb1Aab6r0dk5cFeOHNIfMA1Easaqdph7k4kH0Za+ZxdA0mP
xzic4mr4i9w96IEGcmZSgd+jQKB59eR+Z3clYIMSGBIJUsitNN4MAiVpCuFlIlrl
+L0Nh+reakRaXFBjFPqJhmBE8HUsgugosFIuo7y7+0o+QeOkTxeoYgOcs/8YvCP8
G7wktFVtLamLHhsecbmwdtmI5DY8cV/FJ57cXb9ocyeFO5QmRo2kw0UghwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFOJABoGkC6hFnNZxR33W4oHOf8O4MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvNGtBR2dhUUxxRVdjMW5GSGZkYmlnYzVfdzdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAuIiUD
BAMuIiADBAEuIioDBAEuIjADBAEuIjYDBAEuIjowDQYJKoZIhvcNAQELBQADggEB
AHiHdLpsblkj0D46EiFo3L4BmCd4idqjy1qxHezgpugzM0noQgfyTfvaJ2c/nQWD
KyWMY8rsljShVTgZlO8fJDsh85nWcvntlW6CqYFsrRY6qK/cCPiawf6seQaV/vjT
mnUxA3brqbPjPzpkucSJeGaaFUQ7UPmLJkRwtTCHMUPT6dmJIung8QW74wRrEF/j
DPzPBmj7WrYlKOUsbsYFizeOLHms5eoBQDZ0E1tkFASe+lk6sAazqJqE2Iu6jk/D
Od35uTlqzhzDx+Ozvo+t5Pk80vMKVPMQI5y9f8qlw539T+pElG+fHUaXwuBlo2SO
Q22Qd09MQvBGNpbbARZxHyE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org