Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6eYf5FnmJCcL86Q9_ljH4XgWMTY.roa
File: 6eYf5FnmJCcL86Q9_ljH4XgWMTY.roa (raw, json)
Hash identifier: F7IxDeSTKASBA2J/khMXJMRJuSLx7yWmBwI4SvUshWU=
Subject key identifier: E9:E6:1F:E4:59:E6:24:27:0B:F3:A4:3D:FE:58:C7:E1:78:16:31:36
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A2277534305E5EF567D8340A3BFCF6B0B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6eYf5FnmJCcL86Q9_ljH4XgWMTY.roa
Signing time: Wed 23 Aug 2023 12:55:59 +0000
ROA not before: Wed 23 Aug 2023 12:55:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 19:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:77:53:43:05:e5:ef:56:7d:83:40:a3:bf:cf:6b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 23 12:55:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e61fe459e624270bf3a43dfe58c7e178163136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:9e:83:d9:0c:0f:f0:30:5f:a9:8a:24:bd:
f0:3a:4d:ca:0d:a4:09:0e:c6:9d:d5:36:42:d7:db:
2c:b5:8e:61:11:dd:15:57:5a:e8:19:9d:9b:20:cf:
08:3f:44:7e:3d:57:01:45:86:da:0a:89:03:9e:f7:
1c:da:22:32:72:6c:fb:5e:ab:be:db:0d:bd:a8:01:
f4:07:53:67:a7:76:d9:9c:51:4d:04:76:5f:36:c6:
3a:28:e8:0e:46:fa:e6:bb:08:80:88:f8:93:fd:df:
cf:22:6f:66:f6:59:ba:a8:7c:69:6a:23:f9:da:dd:
68:59:13:cd:d2:b4:89:56:f4:f7:06:46:66:c1:b2:
23:ef:b2:0f:e8:0f:ff:52:0f:64:13:29:07:c2:cb:
90:dd:b1:20:0a:46:74:81:2a:ee:0d:3a:9d:2b:a4:
87:fc:9f:84:20:f3:db:0a:6b:03:b1:85:9e:ee:c7:
a3:1f:77:a7:fb:81:59:35:47:3a:4d:74:b4:0b:d5:
fd:f3:63:c3:dd:3e:f2:1e:be:77:b4:34:a6:57:89:
d6:e7:0a:c7:2c:da:6b:d3:94:6c:06:55:11:32:15:
b6:8f:95:62:c2:09:38:dc:d1:a6:30:6a:14:b0:7f:
5e:1d:79:a0:f6:d0:fe:ff:5e:11:93:fd:86:b6:79:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E6:1F:E4:59:E6:24:27:0B:F3:A4:3D:FE:58:C7:E1:78:16:31:36
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/6eYf5FnmJCcL86Q9_ljH4XgWMTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
46.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ea:74:ec:69:e2:b9:f2:6f:e2:ba:f2:6e:ce:cd:85:48:52:
60:61:61:2a:e8:2b:44:f5:82:bf:b2:55:e5:5c:69:fc:e6:7c:
c9:71:37:a9:ac:87:d2:e6:42:d0:92:31:bd:e9:96:c7:4f:ae:
0d:03:39:09:b7:fc:b2:97:66:2d:6f:f5:8d:ef:da:73:ff:bc:
f4:bc:49:a7:01:f9:02:ba:73:4b:f4:29:3d:e8:c4:c1:6b:2e:
65:86:ab:52:0a:83:38:e7:7d:b8:f1:57:1b:01:78:5e:d8:bb:
8e:d3:26:69:44:3f:f2:78:c5:0b:7f:bc:29:76:1d:d7:5a:df:
7e:06:6b:ab:ce:01:b1:6a:d7:ad:ef:87:ee:1c:93:e5:ed:fa:
24:b4:b7:f6:8a:03:55:85:b7:f3:60:88:64:e2:95:f5:71:e6:
41:93:d1:29:ce:67:5e:dc:27:07:c9:4f:26:02:d5:1e:bf:59:
07:e7:a2:3c:60:ef:69:e4:8a:ae:07:92:09:b6:41:d0:09:6b:
10:b3:69:c7:aa:04:e1:69:35:ec:dd:3d:3d:99:76:a3:a6:e2:
b7:4e:b4:cb:0c:23:46:99:94:51:bc:50:2e:d0:cb:80:85:f9:
14:1c:e6:75:1a:a2:00:0e:f0:b5:a8:d9:6a:38:65:b0:ff:ea:
80:c3:f9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org