Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BcnS0ra2vbuomiaD6VA6A8JI91I.roa
File: BcnS0ra2vbuomiaD6VA6A8JI91I.roa (raw, json)
Hash identifier: qpPu2Q0isiBbBAPGKP6jpI58bXmuvUuVoLeDNA+ecjo=
Subject key identifier: 05:C9:D2:D2:B6:B6:BD:BB:A8:9A:26:83:E9:50:3A:03:C2:48:F7:52
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A6EF74875A2B9F6F84F0D768B614D7151
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BcnS0ra2vbuomiaD6VA6A8JI91I.roa
Signing time: Thu 07 Sep 2023 09:26:54 +0000
ROA not before: Thu 07 Sep 2023 09:26:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.34.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 17:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:f7:48:75:a2:b9:f6:f8:4f:0d:76:8b:61:4d:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 7 09:26:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c9d2d2b6b6bdbba89a2683e9503a03c248f752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:ab:0c:18:0c:0e:e5:e1:b6:3f:74:30:4f:
51:ee:87:53:45:81:20:94:5b:da:64:b4:02:5f:0a:
35:2c:48:03:21:0e:3c:b2:ba:a5:e7:ef:c4:4c:7b:
ad:2b:0d:2d:56:1e:72:de:00:41:4b:25:65:2a:0d:
19:7d:20:2c:d8:a2:1f:7c:24:86:e7:23:65:56:fb:
86:a6:42:39:1d:61:1b:b5:1b:e5:61:c2:6b:f2:26:
a6:ab:4c:29:2e:67:ac:ac:b7:5c:b5:d1:63:b4:d4:
08:01:a0:57:d4:b7:c3:57:b0:b9:6c:12:4b:b4:19:
d5:b8:81:e7:1b:33:e9:3d:73:d5:11:c0:8c:31:b4:
39:f2:43:5c:f3:82:85:f6:49:dc:5a:a0:7a:df:27:
90:2e:d1:75:f8:25:74:99:9d:58:0c:68:71:33:1e:
47:dc:f2:6a:66:87:31:6a:e2:6e:40:6c:c3:a6:68:
43:26:39:87:ae:45:db:5d:4a:97:8d:65:b8:01:05:
9b:01:d9:e9:62:ce:6e:4c:70:8d:46:4a:46:27:53:
2b:38:60:5f:0e:48:db:77:9e:cc:e6:48:6e:7a:10:
b8:1b:08:3b:77:ba:99:e0:93:9c:47:b0:a2:cd:6f:
6e:60:73:a9:f4:1c:a9:8f:18:76:38:f9:8f:8a:a2:
93:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C9:D2:D2:B6:B6:BD:BB:A8:9A:26:83:E9:50:3A:03:C2:48:F7:52
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BcnS0ra2vbuomiaD6VA6A8JI91I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
Signature Algorithm: sha256WithRSAEncryption
15:d0:18:e9:d1:bb:4c:6f:a5:ec:0e:91:6e:a3:ce:d7:54:7b:
1c:65:ed:a4:de:7f:8d:ec:8a:65:a4:b8:29:57:0d:d9:d0:8a:
b4:41:8d:06:11:a0:5d:17:a3:d0:2a:3b:59:98:be:97:a4:44:
df:16:5d:3b:a8:3a:cd:36:62:6f:94:91:b2:45:65:80:8a:d3:
af:72:e5:12:85:2b:da:5b:c0:17:8a:bf:43:d6:2c:38:c8:15:
d1:c3:ed:6a:f5:40:27:26:a6:13:f3:ab:42:fa:ff:78:c4:05:
26:c0:12:b2:08:8e:c7:52:39:09:5b:5a:9a:f9:49:0f:08:65:
41:48:5a:9e:b4:fd:47:8a:0d:ab:61:09:f8:c6:0a:61:9a:14:
c5:c4:7b:7a:dc:0b:ac:3f:28:f5:60:8e:4b:64:9f:58:db:9e:
d7:4d:9c:da:f4:94:58:6b:b0:2e:30:fb:ba:81:91:82:fc:c8:
39:b6:17:fe:d0:ad:9f:2d:47:2a:99:fa:02:bb:a7:5d:25:66:
2a:74:fd:d4:cf:ee:3f:66:8c:03:6b:6c:c1:ac:1c:de:cb:e5:
bb:d3:7f:7f:7b:2b:e8:20:a7:24:42:8a:01:90:8a:c3:1c:4b:
d3:af:45:0d:3a:39:93:4c:68:fb:3e:89:3a:0f:42:ac:e8:a3:
c3:d3:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org