Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/8hIGQM-b_FP6B86mfOOIbVswiBM.roa
File: 8hIGQM-b_FP6B86mfOOIbVswiBM.roa (raw, json)
Hash identifier: Wa/CCI4FIZY7WJgT3eE/g93Raa94/Rf/4L9y3DZBOLM=
Subject key identifier: F2:12:06:40:CF:9B:FC:53:FA:07:CE:A6:7C:E3:88:6D:5B:30:88:13
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018898751D5C6F941D40CDEBF6901969803E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/8hIGQM-b_FP6B86mfOOIbVswiBM.roa
Signing time: Thu 08 Jun 2023 00:43:11 +0000
ROA not before: Thu 08 Jun 2023 00:43:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.48.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 16:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:75:1d:5c:6f:94:1d:40:cd:eb:f6:90:19:69:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 8 00:43:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2120640cf9bfc53fa07cea67ce3886d5b308813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:5e:be:c7:af:70:ca:da:71:1b:38:8b:c7:
d8:68:67:35:d1:1a:a6:6f:4d:33:fd:03:05:e6:3e:
1e:a6:38:8d:b2:b8:d9:fd:55:e6:51:a5:90:6d:86:
d5:43:4c:1c:41:86:65:4a:27:e9:e1:8f:c7:dd:18:
d0:70:93:f4:3d:ba:75:88:7b:e2:54:0c:66:17:1c:
42:53:3f:c5:66:3c:10:b2:06:35:d8:c4:b2:e6:c4:
c8:56:d6:30:cf:70:13:3d:65:26:ac:f6:7c:26:3b:
0d:7b:d3:a3:c7:7e:03:7a:54:c1:5c:56:c7:bc:5e:
38:00:cc:9f:14:0b:d5:7e:23:03:20:0d:33:b4:de:
ae:cd:9f:96:c6:7e:98:ee:07:fc:27:af:8b:2e:f8:
40:4f:d9:38:3c:b1:14:d9:c0:5c:63:15:64:5a:81:
ca:92:ea:67:62:04:23:4b:bd:85:52:92:9a:d9:cc:
fb:c0:bf:e7:4a:25:9a:2f:48:59:24:d8:14:49:4e:
d4:37:80:bd:5c:b7:8d:b5:f1:35:44:b5:49:49:0e:
23:c0:1c:8d:54:c3:5f:82:b3:47:df:bc:e2:2f:a1:
1b:dd:b6:aa:4b:6f:5e:38:43:36:50:b7:39:49:36:
7e:3c:34:56:dc:5a:9a:4b:6a:76:64:3f:cb:75:83:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:06:40:CF:9B:FC:53:FA:07:CE:A6:7C:E3:88:6D:5B:30:88:13
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/8hIGQM-b_FP6B86mfOOIbVswiBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.48.0/23
46.34.54.0/23
46.34.58.0/23
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
23:41:a8:c4:b1:76:86:6b:70:82:51:81:c7:8a:a6:b8:a5:08:
59:25:f0:c9:4d:93:49:21:8b:05:d6:44:08:26:b1:5e:42:bb:
bf:ba:d3:d1:73:56:63:e1:19:c9:f0:5f:08:7a:bf:1e:cf:21:
8c:3b:f3:a6:9d:0f:8e:fb:fa:c8:85:91:db:ed:47:22:4a:c1:
6e:a0:52:ab:6f:02:56:b3:e9:41:62:ee:7d:75:72:d0:13:21:
c6:fa:f4:5e:9b:c3:b6:3e:32:b4:e4:82:f9:1b:5e:c6:7f:3c:
60:8b:f6:c0:5c:5f:b2:26:13:f5:3a:f0:95:5a:56:7a:06:9e:
ba:90:79:c4:04:de:d7:ef:0c:3c:26:03:36:3b:2d:5f:03:e6:
f3:c3:b7:15:5b:48:70:27:99:53:7b:20:c3:ac:0e:df:62:10:
7e:3f:6f:f6:6e:f7:c7:08:a5:95:20:e8:f6:82:71:ce:62:46:
2a:1a:2f:5b:5a:d3:17:2a:af:96:8f:53:91:9f:b3:df:c8:19:
d4:0d:f5:1d:2b:5a:70:1d:de:17:85:c6:53:72:df:44:bb:2f:
26:62:3b:a5:0f:7c:fc:8f:bc:ad:e2:2f:37:84:2a:b8:4f:fd:
7e:f6:ed:3a:6c:ec:09:f5:55:d0:79:50:f9:82:6d:84:01:4e:
2a:20:14:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org