Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7uIOTKKQR5py8Y6uzwoiFioH2hs.roa
File: 7uIOTKKQR5py8Y6uzwoiFioH2hs.roa (raw, json)
Hash identifier: yRv25LRr8ywxLsK7cQYjGHRVvy4yj5Gr0YDKMmHN63g=
Subject key identifier: EE:E2:0E:4C:A2:90:47:9A:72:F1:8E:AE:CF:0A:22:16:2A:07:DA:1B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01892A30D42F10EACEF9AC57DCC24A0714AE
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7uIOTKKQR5py8Y6uzwoiFioH2hs.roa
Signing time: Thu 06 Jul 2023 07:53:10 +0000
ROA not before: Thu 06 Jul 2023 07:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 46.34.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 07:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:30:d4:2f:10:ea:ce:f9:ac:57:dc:c2:4a:07:14:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 6 07:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eee20e4ca290479a72f18eaecf0a22162a07da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:60:7d:1d:87:b3:04:36:06:3b:23:ef:aa:
41:f2:e5:c6:bd:ad:1a:8a:b1:2e:56:2e:8c:e6:27:
33:bf:43:c6:81:1f:43:68:89:10:38:ac:24:a3:a3:
51:fb:2a:cb:72:2d:d0:b7:94:bb:cf:7e:71:fc:48:
e3:4d:e0:f1:e0:a1:6c:8c:ce:15:65:59:91:c6:6b:
56:a7:59:41:42:bc:0e:29:5a:31:23:5d:1b:bb:45:
43:38:d0:ac:1b:cd:87:f1:fd:11:c1:39:15:19:36:
8e:73:ff:63:7c:a1:27:a6:ec:80:4f:cb:52:9b:5d:
cb:13:13:1b:6b:45:a6:ef:03:12:9c:23:04:7d:4a:
d1:aa:2d:9b:bc:01:e9:de:1f:de:23:64:24:47:8e:
fe:65:42:d9:ef:6d:2b:33:54:6d:af:bd:55:9f:67:
9f:5f:81:33:87:1e:65:c0:49:d4:d9:4b:f9:c7:d9:
5b:d9:cf:85:7a:d8:36:03:63:fb:76:94:26:56:88:
9a:cd:1a:0e:85:bd:48:6b:f1:05:ed:d5:2b:17:ec:
20:3d:33:98:6d:ce:93:c1:d0:4d:b0:58:5f:a1:23:
af:ba:a4:cc:26:a4:9d:f2:37:22:12:d9:e0:68:0f:
8b:91:f0:68:4a:1a:4c:a1:ab:cf:bf:35:f5:c7:40:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E2:0E:4C:A2:90:47:9A:72:F1:8E:AE:CF:0A:22:16:2A:07:DA:1B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/7uIOTKKQR5py8Y6uzwoiFioH2hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:3a:5f:d3:d5:57:0f:ad:a9:f3:7a:34:2b:45:93:c6:47:8d:
8c:f3:5e:c3:1e:ee:ed:2c:24:72:c6:71:cc:98:a8:d6:8c:64:
e9:f1:1c:6a:cd:70:74:74:99:84:d2:01:35:26:f4:aa:db:96:
5a:97:be:d4:f4:77:96:cc:5f:73:95:cc:9c:b7:92:04:88:55:
03:b0:9a:0d:d8:bf:92:a5:e6:54:f6:fe:38:97:66:a2:0a:54:
74:85:7e:5b:58:81:93:b8:2f:97:0b:d1:53:b6:a3:2d:19:a3:
65:bf:a6:82:0c:e3:9d:5d:72:8c:3d:3b:e5:f7:a6:41:20:84:
21:b6:ac:e7:fb:a7:5a:7c:13:67:a3:6b:c6:35:c1:d5:32:3f:
1e:8f:19:f7:b2:c9:13:77:f9:54:90:04:c4:71:6e:7f:66:72:
7d:74:a4:12:fa:8f:cd:3c:2c:e2:f9:db:a8:23:6a:a2:8f:91:
2a:17:8f:9c:c3:a5:25:e5:99:00:1a:ec:d4:25:ac:a1:3e:09:
8f:f3:1e:1b:bf:5a:30:59:cd:3b:0a:28:6a:dc:0d:68:2c:0d:
0b:0b:66:9f:54:68:c9:5f:f6:53:17:b4:f0:00:b0:20:dd:0e:
cb:71:9f:57:ee:6a:3f:8a:ce:94:c1:78:b9:7b:83:62:ce:62:
bd:eb:b9:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkqMNQvEOrO+axX3MJKBxSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwNzA2MDc1MzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWUyMGU0Y2EyOTA0NzlhNzJmMThlYWVjZjBhMjIxNjJhMDdkYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sRgfR2HswQ2Bjsj76pB8uXGva0a
irEuVi6M5iczv0PGgR9DaIkQOKwko6NR+yrLci3Qt5S7z35x/EjjTeDx4KFsjM4V
ZVmRxmtWp1lBQrwOKVoxI10bu0VDONCsG82H8f0RwTkVGTaOc/9jfKEnpuyAT8tS
m13LExMba0Wm7wMSnCMEfUrRqi2bvAHp3h/eI2QkR47+ZULZ720rM1Rtr71Vn2ef
X4Ezhx5lwEnU2Uv5x9lb2c+Fetg2A2P7dpQmVoiazRoOhb1Ia/EF7dUrF+wgPTOY
bc6TwdBNsFhfoSOvuqTMJqSd8jciEtngaA+LkfBoShpMoavPvzX1x0Bz0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO7iDkyikEeacvGOrs8KIhYqB9obMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvN3VJT1RLS1FSNXB5OFk2dXp3b2lGaW9IMmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIpMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Ol/T1VcPranzejQrRZPGR42M817DHu7tLCRyxnHM
mKjWjGTp8RxqzXB0dJmE0gE1JvSq25Zal77U9HeWzF9zlcyct5IEiFUDsJoN2L+S
peZU9v44l2aiClR0hX5bWIGTuC+XC9FTtqMtGaNlv6aCDOOdXXKMPTvl96ZBIIQh
tqzn+6dafBNno2vGNcHVMj8ejxn3sskTd/lUkATEcW5/ZnJ9dKQS+o/NPCzi+duo
I2qij5EqF4+cw6Ul5ZkAGuzUJayhPgmP8x4bv1owWc07Cihq3A1oLA0LC2afVGjJ
X/ZTF7TwALAg3Q7LcZ9X7mo/is6UwXi5e4NizmK967m2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org