Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7QxeQ9dSXii9ncGq3-XwKl7R9vo.roa
File: 7QxeQ9dSXii9ncGq3-XwKl7R9vo.roa (raw, json)
Hash identifier: Ag6utExwsMSK8TdeojLYP6p43iit/5JPAvbiv+2Aolg=
Subject key identifier: ED:0C:5E:43:D7:52:5E:28:BD:9D:C1:AA:DF:E5:F0:2A:5E:D1:F6:FA
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01897786732FA6BB7D6ECDAD9BFA8E1C4CFB
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7QxeQ9dSXii9ncGq3-XwKl7R9vo.roa
Signing time: Fri 21 Jul 2023 08:17:27 +0000
ROA not before: Fri 21 Jul 2023 08:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.44.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 08:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:86:73:2f:a6:bb:7d:6e:cd:ad:9b:fa:8e:1c:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 21 08:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0c5e43d7525e28bd9dc1aadfe5f02a5ed1f6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:0f:a1:ce:ff:cd:7d:0d:65:3d:e7:ba:c2:
5b:89:da:68:59:3b:00:bf:28:29:87:65:ef:d2:9d:
9d:9a:7d:9e:32:f3:dc:d0:b8:51:e8:ee:5f:37:a8:
08:cd:3c:66:73:de:f1:1c:3a:1b:71:80:2f:7e:7c:
7b:5d:3f:c1:40:2e:f5:de:83:36:1a:06:f3:03:81:
c7:89:17:5a:b4:e9:ff:23:28:62:d9:b3:96:02:fb:
f9:f1:1f:85:53:a0:f8:66:52:41:8b:b0:13:13:a5:
a4:b2:fc:b6:e4:bc:af:b6:6e:d0:1f:05:c3:50:02:
48:a0:6f:4a:e8:74:14:c9:96:7c:8f:04:e8:9a:0c:
50:f7:09:0e:d3:e3:8d:f2:ed:90:39:e2:b7:33:30:
1a:30:30:3f:e5:bf:33:b0:f5:63:2d:74:56:5c:a4:
51:6e:a8:68:b1:39:af:78:72:3d:5d:d7:f1:27:22:
f6:e3:f5:5d:b3:93:1c:d1:4b:5a:02:30:82:da:e7:
5d:6b:1b:fe:76:96:df:6b:b4:65:2c:e1:09:d5:66:
3f:81:0e:4e:2f:8a:0e:4d:9d:85:7f:de:18:61:bf:
05:83:01:ed:96:13:ce:a1:a3:46:87:b4:ac:64:8e:
dd:6f:10:0d:e1:33:7d:d8:0d:35:2a:c4:1b:f5:ab:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:5E:43:D7:52:5E:28:BD:9D:C1:AA:DF:E5:F0:2A:5E:D1:F6:FA
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7QxeQ9dSXii9ncGq3-XwKl7R9vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.38.0/24
46.34.40.0/24
46.34.44.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f2:1a:55:79:30:8b:e4:c2:17:e9:c2:3c:3d:05:2f:9c:28:
ae:f5:1a:d2:5f:a8:71:62:a2:a3:2f:13:f9:44:75:2d:22:5b:
d5:7a:00:e9:7e:16:2c:4a:0a:4f:0c:a6:07:50:16:45:6a:93:
06:a0:b0:14:f7:67:46:05:53:af:4a:4b:7b:0b:38:cf:19:8a:
2e:f9:90:c9:8c:29:8b:9a:36:b2:87:cd:15:0c:20:51:2c:71:
e7:39:7b:3a:86:83:6b:d0:25:6a:54:a3:38:8b:02:ef:88:9a:
43:ee:b9:f9:79:83:7f:f3:e8:c3:59:91:f5:6a:b1:1f:44:19:
c3:b9:e1:dd:44:ad:cf:5e:3f:82:a7:27:4a:bf:be:86:3d:b8:
f6:9e:e0:52:2c:5b:2e:60:94:f2:03:0e:9f:56:06:8e:8a:ed:
0d:5a:d4:97:07:d8:fc:b3:d4:85:11:fb:05:d4:90:66:4c:cb:
cb:09:06:bf:70:56:07:e1:32:5b:c5:0e:75:84:f5:e9:24:a8:
74:4f:82:ca:16:f2:6c:ba:18:50:69:b3:45:8c:13:8b:8b:29:
25:d1:17:bf:f1:08:f4:75:7c:eb:6c:3c:80:be:27:2a:7d:23:
d0:99:10:9b:5b:74:71:31:a4:0b:47:7d:59:70:28:ab:4a:9e:
65:67:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org