Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4u_HEmnxfeWciqSLZ0s5AauffQc.roa
File: 4u_HEmnxfeWciqSLZ0s5AauffQc.roa (raw, json)
Hash identifier: FoyN4MvF3Nro3+L0VRWRienYB5RTU37E4APqTVBSHpI=
Subject key identifier: E2:EF:C7:12:69:F1:7D:E5:9C:8A:A4:8B:67:4B:39:01:AB:9F:7D:07
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018AE06351F9B57869CAA47A0DF0F4EC6945
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4u_HEmnxfeWciqSLZ0s5AauffQc.roa
Signing time: Fri 29 Sep 2023 10:02:00 +0000
ROA not before: Fri 29 Sep 2023 10:02:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 17:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:63:51:f9:b5:78:69:ca:a4:7a:0d:f0:f4:ec:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 29 10:02:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2efc71269f17de59c8aa48b674b3901ab9f7d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:0e:79:30:bf:5a:66:40:4f:14:81:9f:bb:
93:c1:bb:48:fd:62:b1:49:1d:59:b5:6d:48:9b:d8:
72:d3:0f:d5:6a:2d:ad:bf:ad:09:f5:fd:ce:4c:40:
96:16:23:1f:d8:df:24:ba:6b:70:c6:fb:65:c5:d7:
7f:07:b6:c1:64:61:39:eb:4e:bf:46:36:80:82:20:
be:35:00:cc:b1:56:ab:c2:bd:4d:96:ea:ec:1a:1a:
4f:10:3f:e0:2d:ad:2f:8f:cd:df:59:97:36:b9:58:
15:b4:77:b1:f8:30:96:7e:93:c8:a6:f0:68:a1:ad:
b7:52:97:97:a0:4b:68:7e:61:5e:00:35:c7:ae:71:
2f:91:10:d4:bb:da:c3:f5:9c:a3:6f:80:b2:69:40:
06:0d:7a:89:87:6a:32:ac:0d:9a:3d:16:a3:1e:65:
57:97:f4:e5:8c:e8:6f:03:e9:8c:99:c6:04:1c:a3:
af:a1:12:10:ec:b5:bb:86:22:4b:20:d0:e1:2f:96:
ce:5e:34:7f:6f:c0:3d:83:80:b1:59:2a:1b:b9:a5:
5c:6c:9f:2d:98:f9:fa:7f:c3:33:3b:9a:14:70:69:
4d:dc:c6:6d:b1:87:30:46:5f:67:cd:12:a1:ec:34:
00:f4:ca:92:d7:04:a8:81:3d:1f:6d:7a:25:31:ef:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EF:C7:12:69:F1:7D:E5:9C:8A:A4:8B:67:4B:39:01:AB:9F:7D:07
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/4u_HEmnxfeWciqSLZ0s5AauffQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/24
46.34.58.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fb:12:cb:f7:52:e6:f4:66:7a:f6:51:e2:0b:8b:28:02:10:
15:5b:f0:bc:e4:43:ff:bb:d3:1a:a7:25:91:36:df:06:1e:40:
9e:90:12:0d:a8:8c:14:9b:77:68:ac:2c:b6:fa:0e:d3:dc:23:
84:e2:32:cb:34:5d:24:ce:d9:d1:34:8c:6f:71:92:9a:d1:d1:
ce:16:ee:41:3e:8e:2a:72:e3:51:38:e1:9c:5b:d2:3a:48:2c:
34:e9:cd:66:25:87:ce:16:3b:8b:29:50:07:36:73:fc:4b:a6:
f0:92:cf:ea:cf:72:95:bb:ed:16:03:be:21:bf:99:66:e5:dd:
85:12:07:b4:2a:b6:30:c4:ec:ca:75:38:8f:46:47:49:d6:6c:
29:1b:60:38:d8:cb:64:24:3e:80:2f:32:ea:d5:bf:77:91:4a:
5b:f6:d2:4d:b4:26:b7:c1:74:f9:ce:29:0f:ab:b4:f8:05:23:
85:54:c0:32:a7:fd:c5:d4:7d:83:61:ee:8b:25:29:6a:8c:35:
49:1e:c4:4a:b2:c9:25:60:0c:45:b4:99:19:0a:0e:e5:70:e8:
13:fa:cd:84:c1:e7:b0:ed:f3:9c:70:57:da:6e:e4:65:f2:16:
66:68:0e:cd:55:5c:10:e1:30:78:d0:bd:f9:86:52:d3:44:96:
8c:65:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org