Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CY3jM9PyyDO3bW_NKt4zvSa_FCU.roa
File: CY3jM9PyyDO3bW_NKt4zvSa_FCU.roa (raw, json)
Hash identifier: xMtMmOZSGgQ8f5nqpRE/3PhUe72Wg68dUTTOl0cWAyE=
Subject key identifier: 09:8D:E3:33:D3:F2:C8:33:B7:6D:6F:CD:2A:DE:33:BD:26:BF:14:25
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188DE8F0ACAD7A14B6EC85B3FCCAF0FC0B9
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CY3jM9PyyDO3bW_NKt4zvSa_FCU.roa
Signing time: Wed 21 Jun 2023 15:24:56 +0000
ROA not before: Wed 21 Jun 2023 15:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Jun 2023 15:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:8f:0a:ca:d7:a1:4b:6e:c8:5b:3f:cc:af:0f:c0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 21 15:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=098de333d3f2c833b76d6fcd2ade33bd26bf1425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:70:f9:56:41:a8:2f:3e:2d:7a:02:93:25:
f8:a2:71:ec:02:6b:8e:a8:39:48:03:03:bf:ef:22:
03:3e:9a:34:c0:8f:7b:f2:1c:20:1a:67:d0:b6:dd:
5a:03:5c:c3:e4:eb:ba:66:bc:85:61:5b:78:39:88:
6f:bc:f5:da:63:1c:a4:4d:60:2b:57:65:37:d3:6b:
a1:b9:d1:95:ba:9b:85:e4:e6:c6:15:f2:0b:0d:7c:
7b:f9:5b:f4:ce:a6:ac:8c:d1:83:41:3f:dd:a2:40:
ef:67:d9:c2:1f:44:94:74:9f:8e:52:85:a5:78:8e:
5c:ef:98:aa:ec:f1:78:4f:3e:66:6a:c0:c1:15:92:
32:18:84:7b:a2:79:ab:ef:33:ec:74:5d:65:6e:c8:
52:be:ea:5b:fc:ac:62:7f:3a:62:df:88:43:06:cf:
aa:df:ab:f2:58:ca:1b:96:04:45:be:cd:a1:1f:2a:
8a:e9:5a:fd:0e:bb:32:23:33:04:0c:51:c1:68:dc:
1a:44:86:2a:ff:f9:e7:3c:3e:ec:a9:7f:b9:30:70:
5e:03:d4:ba:05:ef:bc:6d:9a:e3:7f:3e:9e:29:d3:
a0:51:bf:d8:ae:48:a2:bf:23:d5:28:dd:96:ed:32:
12:dd:ba:f7:4c:3e:26:42:00:0c:f9:c9:4b:ed:36:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:E3:33:D3:F2:C8:33:B7:6D:6F:CD:2A:DE:33:BD:26:BF:14:25
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CY3jM9PyyDO3bW_NKt4zvSa_FCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f1:b3:2d:67:73:2b:d9:32:2e:44:d6:d9:0e:b0:26:0e:a4:
8b:0d:f9:fe:96:7c:2b:81:8d:8e:36:45:fe:a1:52:a9:e8:66:
c0:56:c8:65:c5:72:53:df:ec:a8:ee:e8:b0:50:e2:ad:2f:2f:
fc:c0:66:88:22:b6:46:57:d8:82:54:5b:14:8f:25:ef:c7:a0:
45:9a:d0:9e:c9:9a:a3:41:29:1f:47:be:d8:01:db:3e:1f:45:
a7:98:b2:87:14:ab:e4:c7:76:02:c3:48:75:11:29:4a:bd:43:
5d:5f:e5:4d:2f:5d:95:5c:02:b8:4e:c7:55:72:7e:0c:45:b7:
f5:69:23:2e:44:0e:53:e9:dd:ad:b9:ae:ea:1e:c4:f0:6e:ba:
7a:80:17:b5:18:ed:02:4c:6a:c5:84:89:b7:49:ef:06:8f:52:
ae:a8:63:a2:85:a9:9a:bc:e5:06:ff:b7:81:30:68:ae:a7:56:
2d:25:be:f7:59:01:1c:5e:f8:65:14:55:d1:e3:38:88:5f:06:
97:55:dc:b2:16:89:39:60:ea:1a:56:b0:cf:75:9e:8f:9f:39:
f1:50:22:2d:c6:41:e9:b2:f4:be:08:52:45:f9:f3:48:9a:a2:
bc:84:db:fc:91:8a:69:1a:47:96:1d:d5:e5:c8:e0:47:e4:3c:
23:44:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org