Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/AVMqakJALrUBHd0iWbX-Vrio_9U.roa
File: AVMqakJALrUBHd0iWbX-Vrio_9U.roa (raw, json)
Hash identifier: jx1r2iZgAYplydxPkQpZZDOJeIzkPoa7/WnDlIC9H9w=
Subject key identifier: 01:53:2A:6A:42:40:2E:B5:01:1D:DD:22:59:B5:FE:56:B8:A8:FF:D5
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B65CD500859D6F5204DCBCF9EFB90A7E8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/AVMqakJALrUBHd0iWbX-Vrio_9U.roa
Signing time: Wed 25 Oct 2023 07:47:15 +0000
ROA not before: Wed 25 Oct 2023 07:47:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 15:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:65:cd:50:08:59:d6:f5:20:4d:cb:cf:9e:fb:90:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 25 07:47:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01532a6a42402eb5011ddd2259b5fe56b8a8ffd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:6b:ca:2e:f4:dd:37:65:42:b1:2b:a1:92:
bd:c1:f2:cf:49:c8:f8:ed:82:43:ec:7e:5d:d8:10:
85:ef:8f:a3:c0:e9:4e:c6:6d:df:7b:33:00:5c:3c:
ea:10:e4:bc:05:65:75:ba:89:5d:a3:f2:aa:7d:a1:
4e:60:a3:1a:c1:6e:4a:a1:f4:d6:87:e5:83:bf:02:
1e:7e:b3:c9:af:4f:33:14:42:40:e0:20:d7:f0:7f:
0f:4f:f0:fc:da:a0:eb:42:01:81:bb:0b:44:b2:2e:
c4:cd:0e:d0:f2:e6:a0:30:db:8c:aa:e0:4c:2e:66:
65:d5:ea:b0:34:91:2c:06:62:e6:5e:f6:70:b0:cc:
9b:e0:17:ac:4c:c9:d6:8b:6a:d1:53:a3:a5:11:93:
f6:d4:c7:ad:21:dc:8b:d5:72:8a:fd:a7:6b:d9:7f:
2b:27:62:a3:6a:33:61:09:a3:72:d0:e2:4e:93:79:
db:6f:ff:c6:5f:6e:3f:1a:91:65:19:5e:d8:1d:b2:
d1:fb:bb:e9:38:e2:94:85:51:7a:80:95:c7:e7:3f:
4a:8e:a5:f7:b9:06:e0:69:cd:64:bd:45:1c:e9:b2:
34:fc:3a:6b:f8:c2:75:27:b6:a2:14:a7:35:64:75:
72:65:6b:64:1c:b4:a2:fb:ab:70:58:7f:dd:e7:c3:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:2A:6A:42:40:2E:B5:01:1D:DD:22:59:B5:FE:56:B8:A8:FF:D5
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/AVMqakJALrUBHd0iWbX-Vrio_9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c9:c8:34:50:ce:b1:bf:6c:58:44:f8:72:45:39:de:d6:a2:
c4:dc:e1:78:4f:63:57:6c:30:93:29:ef:9e:0c:e7:ee:dd:9c:
ad:d1:65:23:30:24:c1:d0:ed:f8:60:7d:5b:e4:28:6e:e7:3f:
be:70:a5:c2:00:57:35:03:8e:4d:f5:cc:e7:80:f1:e5:e1:b8:
fa:3e:63:3b:9b:d6:fb:85:0b:b5:8c:16:81:41:e7:0e:40:6b:
9b:ad:ed:35:73:ff:d3:b5:bb:42:86:07:d8:8e:ff:30:90:bf:
63:5f:ce:fa:38:1a:a1:7e:c2:3b:8c:19:64:9c:ab:77:e1:1f:
1d:c9:c6:f5:e2:cf:80:d2:d1:bc:a2:d9:6a:ce:0f:a6:fe:c5:
83:6e:23:a4:87:be:7b:03:00:43:03:8b:ec:d0:c9:7b:27:12:
18:09:9b:74:fd:92:db:b9:47:2f:4d:e3:02:a8:29:bf:a7:fe:
8d:56:a5:c9:7d:35:69:e7:2d:d6:dc:a5:db:2e:9a:0e:4f:a1:
ad:ea:36:d4:c6:a5:05:18:6a:21:2d:2f:58:10:b5:c7:d8:a0:
16:a9:1d:ce:37:0c:55:44:41:08:67:c2:67:dd:fe:61:f9:75:
3b:21:d9:bd:d5:5a:44:68:1b:cd:57:37:05:99:05:cb:cb:ab:
ae:ab:ad:81
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYtlzVAIWdb1IE3Lz577kKfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMDI1MDc0NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTUzMmE2YTQyNDAyZWI1MDExZGRkMjI1OWI1ZmU1NmI4YThmZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx75ryi703TdlQrEroZK9wfLPScj4
7YJD7H5d2BCF74+jwOlOxm3fezMAXDzqEOS8BWV1uoldo/KqfaFOYKMawW5KofTW
h+WDvwIefrPJr08zFEJA4CDX8H8PT/D82qDrQgGBuwtEsi7EzQ7Q8uagMNuMquBM
LmZl1eqwNJEsBmLmXvZwsMyb4BesTMnWi2rRU6OlEZP21MetIdyL1XKK/adr2X8r
J2KjajNhCaNy0OJOk3nbb//GX24/GpFlGV7YHbLR+7vpOOKUhVF6gJXH5z9KjqX3
uQbgac1kvUUc6bI0/Dpr+MJ1J7aiFKc1ZHVyZWtkHLSi+6twWH/d58PxwwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAFTKmpCQC61AR3dIlm1/la4qP/VMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvQVZNcWFrSkFMclVCSGQwaVdiWC1WcmlvXzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAGXJyDRQzrG/bFhE
+HJFOd7WosTc4XhPY1dsMJMp754M5+7dnK3RZSMwJMHQ7fhgfVvkKG7nP75wpcIA
VzUDjk31zOeA8eXhuPo+Yzub1vuFC7WMFoFB5w5Aa5ut7TVz/9O1u0KGB9iO/zCQ
v2Nfzvo4GqF+wjuMGWScq3fhHx3JxvXiz4DS0byi2WrOD6b+xYNuI6SHvnsDAEMD
i+zQyXsnEhgJm3T9ktu5Ry9N4wKoKb+n/o1Wpcl9NWnnLdbcpdsumg5Poa3qNtTG
pQUYaiEtL1gQtcfYoBapHc43DFVEQQhnwmfd/mH5dTsh2b3VWkRoG81XNwWZBcvL
q66rrYE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org