Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ANJcp3SKLeAgU95cLmIHpHglKZE.roa
File: ANJcp3SKLeAgU95cLmIHpHglKZE.roa (raw, json)
Hash identifier: cpAcOpmyuSncS6fhqnnSHJmtpBxschoBQlLrbkHNxPE=
Subject key identifier: 00:D2:5C:A7:74:8A:2D:E0:20:53:DE:5C:2E:62:07:A4:78:25:29:91
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186BED514CAA169C31AD85CFE12193304C1
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ANJcp3SKLeAgU95cLmIHpHglKZE.roa
Signing time: Wed 08 Mar 2023 01:28:00 +0000
ROA not before: Wed 08 Mar 2023 01:28:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.48.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 17:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:d5:14:ca:a1:69:c3:1a:d8:5c:fe:12:19:33:04:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 8 01:28:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d25ca7748a2de02053de5c2e6207a478252991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:75:e4:54:e7:48:3c:01:45:df:05:41:7f:
87:bb:18:75:c5:ea:c0:f8:c2:22:4f:d0:22:c5:b1:
da:ee:4a:f1:79:e5:a6:e5:33:b2:cd:75:96:9e:5b:
07:00:6d:46:75:d0:f5:5b:71:91:ad:b0:53:c4:4f:
df:8b:5e:2d:9e:5f:2a:07:90:86:f5:5b:fa:9a:4c:
bf:78:57:b3:30:57:a0:87:ec:1f:95:a0:88:38:a8:
90:41:2a:26:7b:4a:c1:05:6a:b9:65:ca:94:7e:ef:
67:69:2e:80:eb:15:5a:32:1d:5e:9c:09:99:7a:22:
52:b6:46:26:6e:a7:6c:d7:f0:2b:5e:aa:ce:06:28:
05:74:25:f2:1c:d1:5b:10:c7:9f:35:dd:7d:20:de:
25:71:4c:00:62:21:86:c7:f2:35:72:1e:33:8f:c0:
fd:dc:27:67:96:40:fc:5c:af:7b:e7:cf:0e:cc:7d:
bb:40:b1:0f:51:5c:92:59:c7:f0:44:b7:6d:99:50:
83:a5:b2:71:a4:dd:8d:55:77:85:98:07:9e:3e:de:
42:d8:87:c1:8e:91:67:2d:1e:db:8b:5d:8d:9e:53:
4b:06:cc:87:a0:e5:15:70:30:db:c0:70:13:63:d4:
03:d2:4b:2e:70:73:f0:fe:ac:d4:26:ee:66:b1:2b:
63:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D2:5C:A7:74:8A:2D:E0:20:53:DE:5C:2E:62:07:A4:78:25:29:91
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ANJcp3SKLeAgU95cLmIHpHglKZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.48.0/23
46.34.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ef:25:91:e1:5d:30:cd:13:78:65:60:a2:04:ef:e2:01:49:
a5:04:fc:15:dc:01:c1:6b:2f:df:60:8d:66:30:63:bc:56:2d:
ea:89:b7:b7:07:30:b6:f7:f4:1a:17:3c:5b:e7:29:55:f1:56:
45:52:48:c9:fd:1f:f1:fa:3a:81:7e:5e:4c:3e:ae:c9:e0:e1:
8c:34:af:fe:06:4f:e2:69:a1:80:c6:62:f1:db:1c:76:3e:e2:
3a:6c:52:2e:32:65:b1:45:39:2b:c6:f5:b8:d1:81:16:46:74:
d0:30:ce:68:95:64:bd:4c:8f:c9:33:c5:00:fb:ae:51:66:88:
a0:0d:3f:52:1e:22:b9:fb:3c:9e:1a:8a:9b:44:26:34:89:55:
d6:f8:85:7d:68:01:8f:c1:ee:84:67:85:68:ce:ba:2c:15:27:
16:be:ae:94:99:fd:3a:10:f7:44:b6:8f:37:ff:82:02:1f:01:
42:ad:8c:f0:9b:53:53:53:97:6d:53:94:84:59:f6:b7:30:80:
6f:f5:08:74:95:f4:33:8e:ed:fc:59:e1:e5:d6:42:f1:01:05:
37:88:67:76:f2:81:cb:d5:7c:da:11:7a:d6:94:18:e6:08:4f:
a0:5c:0c:e4:cd:c0:62:d2:17:bd:ae:a4:ae:93:0e:37:b8:ee:
cf:92:4d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org