Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9RNF2PLyF4aKyTIKb-dUmpp_oTM.roa
File: 9RNF2PLyF4aKyTIKb-dUmpp_oTM.roa (raw, json)
Hash identifier: W5BT6s1Gk3HA6Qd53bViyH2v+cchVQit3Purr1RS0xw=
Subject key identifier: F5:13:45:D8:F2:F2:17:86:8A:C9:32:0A:6F:E7:54:9A:9A:7F:A1:33
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0192724F4CCFAEBC6550B3A62F4D3F550B00
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9RNF2PLyF4aKyTIKb-dUmpp_oTM.roa
Signing time: Wed 09 Oct 2024 17:24:12 +0000
ROA not before: Wed 09 Oct 2024 17:24:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.39.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 13:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:4f:4c:cf:ae:bc:65:50:b3:a6:2f:4d:3f:55:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 9 17:24:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51345d8f2f217868ac9320a6fe7549a9a7fa133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:98:5e:11:36:f7:0a:e1:38:25:7b:09:e0:
20:49:53:56:b4:33:74:08:df:95:89:33:57:b0:ca:
af:4c:97:31:02:55:0e:ca:0a:54:43:90:77:59:ed:
9f:6f:2a:da:79:34:a1:a3:c6:c4:2a:55:69:07:2b:
be:f2:a1:20:e2:fb:b5:df:70:e2:b0:a9:3e:a9:0d:
e6:34:d0:60:b2:07:41:be:8b:ea:56:7d:2b:1c:93:
e7:40:0a:42:a3:81:0d:5d:81:0c:e2:40:ae:2b:ba:
75:87:dc:04:a4:00:67:f6:cb:0c:2c:0e:26:06:10:
d5:65:3e:95:3a:0a:ab:6f:ec:87:f2:2e:85:d8:88:
1a:70:93:a9:b7:52:0c:76:99:da:dd:93:c9:cd:e0:
c1:3c:7e:27:f9:bd:9d:0c:ad:80:1a:a1:86:4d:52:
a6:a8:87:d4:a0:83:f4:94:97:95:36:9b:15:5a:64:
21:32:b5:ef:01:d6:be:10:5b:a4:42:ac:44:1b:67:
2b:d1:3d:42:85:4f:6d:06:28:a6:69:de:6b:6e:b0:
7d:49:2f:06:6d:17:55:b6:57:a3:bf:02:21:02:ba:
e9:79:e6:e9:8d:96:6c:23:0a:77:98:b4:7e:91:89:
8a:01:90:4a:82:58:65:b7:31:e2:f4:d9:49:04:18:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:45:D8:F2:F2:17:86:8A:C9:32:0A:6F:E7:54:9A:9A:7F:A1:33
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/9RNF2PLyF4aKyTIKb-dUmpp_oTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.39.0-46.34.40.255
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c5:b5:a8:0b:7e:26:3f:c5:ca:0d:25:90:f4:86:6b:e5:50:
f2:27:ea:28:1a:d7:ab:b5:ac:28:1a:e4:61:d7:36:5b:21:c0:
9d:b6:8e:6e:49:33:71:80:94:d4:de:1b:38:27:a2:e0:3e:44:
55:75:48:7e:69:dc:0b:91:a0:2a:b9:42:2b:8f:47:dc:50:cc:
d0:c3:1e:ee:33:88:dd:8d:b1:dc:1b:bb:4b:b6:98:e5:0a:b4:
2c:62:da:eb:4b:4f:2b:ad:2f:84:1c:9d:85:eb:c3:93:c5:de:
e3:61:5f:ab:d9:57:88:cd:a1:38:4e:e8:98:ce:b2:c8:9a:10:
40:93:b5:56:55:e6:48:7a:05:58:06:c1:f0:bd:e6:3e:61:2d:
95:2b:81:5c:0a:90:86:9f:fd:fd:cd:5d:cb:82:15:9e:45:7f:
f3:b6:51:a4:1f:e6:f6:e7:29:4d:14:d3:21:01:8e:78:c8:f4:
18:dc:ae:e6:bf:35:3e:b3:b4:12:4c:07:c7:93:5e:fc:67:07:
5a:e1:b3:b9:9c:ca:c2:b1:60:b5:24:2a:4a:53:77:9b:ee:be:
3a:74:0d:c8:55:61:96:34:73:24:df:13:25:02:18:8d:aa:72:
c7:26:0d:b9:0f:19:b6:58:37:f6:bf:9e:86:b3:37:b2:62:a9:
bc:e8:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 17:50:19 2024 by rpki-client on console-ams.rpki-client.org