Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7Xz8ICarmBydsFVwW6-EeHXoPnE.roa
File: 7Xz8ICarmBydsFVwW6-EeHXoPnE.roa (raw, json)
Hash identifier: bALDZUWQz2PrOCdQsrViABAUMhGcVsOchPx6Z/4RGl8=
Subject key identifier: ED:7C:FC:20:26:AB:98:1C:9D:B0:55:70:5B:AF:84:78:75:E8:3E:71
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A6BC1240EB5CDD30DAD008B1A06C68C5C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7Xz8ICarmBydsFVwW6-EeHXoPnE.roa
Signing time: Wed 06 Sep 2023 18:28:54 +0000
ROA not before: Wed 06 Sep 2023 18:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.39.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 07:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:c1:24:0e:b5:cd:d3:0d:ad:00:8b:1a:06:c6:8c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 6 18:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed7cfc2026ab981c9db055705baf847875e83e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:48:13:b6:8a:86:d3:1b:29:3b:6f:53:bd:
f7:e9:15:79:ed:c5:83:ec:19:13:78:25:bc:82:0f:
32:ec:f2:ac:1b:cb:b5:27:51:c6:8b:62:f3:77:d4:
03:7c:50:07:1c:38:08:d5:3c:b3:15:41:2c:42:4d:
4d:c3:4e:fa:f4:ca:b6:ef:91:0f:8c:09:6d:f7:87:
a9:ac:f3:fe:d6:13:0c:4a:9b:cb:f8:6e:4a:17:eb:
21:57:0d:11:98:56:34:62:95:c9:97:8b:39:0e:26:
ef:b0:17:4d:05:36:cc:cb:2f:15:cd:35:da:ec:1c:
d8:d8:da:d1:17:60:b6:3b:6d:fd:23:53:87:8f:81:
79:4a:be:d6:d9:21:1b:2b:e8:18:ec:bc:da:4a:a9:
62:90:34:ee:d0:85:68:ac:42:73:11:28:1c:e2:63:
28:ad:69:d7:1f:fe:9f:f6:0c:37:0c:69:8d:43:e4:
87:d0:25:9d:2d:8b:f1:79:39:e0:12:3f:af:81:f3:
90:40:7d:43:01:64:a0:03:17:37:d9:08:d1:83:a2:
2b:fb:18:b0:61:2e:d1:92:17:43:c4:46:2f:18:71:
b1:60:af:86:43:37:17:1e:e4:5a:da:61:28:9f:e1:
f8:69:2b:60:b1:15:90:f9:3d:a9:ee:f0:7a:fc:75:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:FC:20:26:AB:98:1C:9D:B0:55:70:5B:AF:84:78:75:E8:3E:71
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7Xz8ICarmBydsFVwW6-EeHXoPnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.39.0-46.34.40.255
46.34.42.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:61:88:67:98:f7:92:a4:41:61:f2:2c:89:7d:a4:82:3c:1b:
e6:15:1f:7a:7a:67:d3:7d:58:dc:51:fd:b6:be:a1:15:a7:dc:
c8:39:50:93:b7:e7:e8:6f:17:e7:a7:5f:2f:95:4e:17:41:0e:
65:26:18:4b:20:a0:2d:7c:c4:6d:94:4c:d7:c9:6f:41:66:02:
8f:ab:1b:00:42:e9:aa:2c:4d:6b:24:1d:8a:d5:ea:13:aa:f8:
a0:5f:c3:95:c9:58:cd:c1:89:3a:1e:47:a1:96:46:25:39:fe:
ed:f7:95:2b:9d:22:d3:b1:f4:23:0b:c0:76:f5:5a:6c:66:65:
63:e4:d4:e0:ac:b5:0c:fa:fb:b5:ef:14:a8:50:99:e0:f0:30:
8b:6d:e1:07:74:47:9c:c8:39:12:ac:81:04:f1:43:f8:7c:c3:
e3:86:5d:da:4d:e2:e7:ca:d7:3f:69:d1:46:71:86:d0:01:12:
e7:d7:32:5e:d6:e9:7d:9f:5d:0c:8d:e9:ce:ff:49:f9:63:79:
55:26:61:f3:aa:d4:66:31:cd:d5:bd:62:c8:d1:a0:8a:ef:7f:
66:7c:41:a6:d9:65:b2:69:c4:cb:38:86:22:81:c8:56:4b:fc:
e6:8e:9a:e5:93:27:bb:af:b1:ee:57:87:a4:55:36:ff:a8:a3:
ec:6a:9b:3e
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYprwSQOtc3TDa0AixoGxoxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwOTA2MTgyODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdjZmMyMDI2YWI5ODFjOWRiMDU1NzA1YmFmODQ3ODc1ZTgzZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKRIE7aKhtMbKTtvU7336RV57cWD
7BkTeCW8gg8y7PKsG8u1J1HGi2Lzd9QDfFAHHDgI1TyzFUEsQk1Nw0769Mq275EP
jAlt94eprPP+1hMMSpvL+G5KF+shVw0RmFY0YpXJl4s5DibvsBdNBTbMyy8VzTXa
7BzY2NrRF2C2O239I1OHj4F5Sr7W2SEbK+gY7LzaSqlikDTu0IVorEJzESgc4mMo
rWnXH/6f9gw3DGmNQ+SH0CWdLYvxeTngEj+vgfOQQH1DAWSgAxc32QjRg6Ir+xiw
YS7RkhdDxEYvGHGxYK+GQzcXHuRa2mEon+H4aStgsRWQ+T2p7vB6/HXR9wIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFO18/CAmq5gcnbBVcFuvhHh16D5xMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvN1h6OElDYXJtQnlkc0ZWd1c2LUVlSFhvUG5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAUuIiAD
BAAuIiQwDAMEAC4iJwMEAC4iKAMEAS4iKgMEAC4iPzANBgkqhkiG9w0BAQsFAAOC
AQEATWGIZ5j3kqRBYfIsiX2kgjwb5hUfenpn031Y3FH9tr6hFafcyDlQk7fn6G8X
56dfL5VOF0EOZSYYSyCgLXzEbZRM18lvQWYCj6sbAELpqixNayQditXqE6r4oF/D
lclYzcGJOh5HoZZGJTn+7feVK50i07H0IwvAdvVabGZlY+TU4Ky1DPr7te8UqFCZ
4PAwi23hB3RHnMg5EqyBBPFD+HzD44Zd2k3i58rXP2nRRnGG0AES59cyXtbpfZ9d
DI3pzv9J+WN5VSZh86rUZjHN1b1iyNGgiu9/ZnxBptllsmnEyziGIoHIVkv85o6a
5ZMnu6+x7leHpFU2/6ij7GqbPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org