Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CxtTetUFZNc2TsDrd6bo-S0yuZY.roa
File: CxtTetUFZNc2TsDrd6bo-S0yuZY.roa (raw, json)
Hash identifier: b4X1Xcj3xnTs+cg98XkMNOWTq0+pEwDDWtZKjwLVGQo=
Subject key identifier: 0B:1B:53:7A:D5:05:64:D7:36:4E:C0:EB:77:A6:E8:F9:2D:32:B9:96
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01888B057A18CA3203B182078790098364E4
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CxtTetUFZNc2TsDrd6bo-S0yuZY.roa
Signing time: Mon 05 Jun 2023 10:06:11 +0000
ROA not before: Mon 05 Jun 2023 10:06:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.38.0/23 maxlen: 23
46.34.48.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 00:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:05:7a:18:ca:32:03:b1:82:07:87:90:09:83:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 5 10:06:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b1b537ad50564d7364ec0eb77a6e8f92d32b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:b0:96:98:0f:21:56:18:8d:f0:bb:5e:fe:
20:49:84:b8:7e:44:20:4e:36:48:8e:e3:a6:35:23:
e9:73:d4:11:1d:af:df:ab:1e:d0:83:90:fc:ad:23:
d0:99:ff:53:35:d8:ef:99:60:03:f7:72:6f:ab:3f:
23:7c:d9:47:29:0f:77:d8:1e:81:22:42:27:53:1e:
c6:cf:d4:cd:e7:d8:c6:1e:b3:82:1d:4e:11:36:70:
d8:f4:37:28:e5:b6:3b:30:39:fd:f1:1b:49:3b:fa:
a0:f3:13:36:99:fb:e3:47:04:aa:04:55:d7:77:39:
fc:6b:5a:49:ad:b9:08:e0:98:5f:a0:ab:fe:da:34:
1c:9d:bd:96:d0:7b:ca:44:a8:42:b0:1d:e7:2e:1d:
10:94:28:2d:55:e4:cf:4c:e7:8d:9f:7a:22:3e:2e:
cf:4a:77:4e:15:1e:2c:4f:e6:a4:a7:7c:4e:c3:85:
db:87:46:fb:4a:58:f1:77:fe:25:6c:c2:fb:a3:29:
bd:73:c9:c6:dd:5a:f1:88:90:aa:e7:67:bb:55:da:
4f:e3:3d:a2:c3:fa:df:d5:1e:7e:ec:17:e0:b7:d8:
c3:d6:14:af:10:4c:37:f7:ee:52:40:1a:8b:dd:54:
96:4a:db:47:4b:a3:59:8c:55:f6:49:35:90:93:12:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:53:7A:D5:05:64:D7:36:4E:C0:EB:77:A6:E8:F9:2D:32:B9:96
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/CxtTetUFZNc2TsDrd6bo-S0yuZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/23
46.34.42.0/23
46.34.48.0/23
46.34.54.0/23
46.34.58.0/23
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:31:6a:41:5b:bb:e6:79:cf:73:a8:11:cb:67:96:47:78:d2:
a0:e9:e4:92:ca:e5:c3:dc:de:79:bb:c5:ed:9f:97:79:10:e0:
b3:9e:5f:eb:d2:45:88:8a:2a:f8:e2:5a:84:86:01:a2:a4:1a:
7f:32:9c:8b:ae:12:82:ab:67:bb:b9:70:2b:d8:cb:52:a5:ca:
9b:8f:b2:a3:bb:b5:f8:6b:0d:1b:1d:dd:31:32:e2:fb:88:9b:
cc:c1:ac:d4:a2:52:e2:07:57:6a:24:84:4c:17:93:97:db:6c:
4f:a5:33:bc:59:44:dd:ec:66:06:60:e0:e6:a3:77:58:78:9f:
a7:7b:83:9f:50:bf:82:2f:72:1e:6c:3d:30:17:07:f2:4c:1a:
a1:2c:e6:b0:2f:ff:d6:c7:0f:99:4b:09:c2:94:29:ed:1d:ad:
36:71:17:75:36:a9:c7:9f:57:8d:e2:e3:d8:58:f5:ba:ce:c2:
b9:47:20:26:3f:01:8b:06:2f:12:b6:5f:df:b8:22:fc:79:36:
1f:7e:c3:50:bc:80:23:1f:4e:c4:5d:e7:10:b5:f3:16:f8:af:
81:09:69:2c:5b:d9:32:7e:d8:bb:7b:09:00:65:c0:a6:2e:73:
8e:44:2b:14:67:e3:f4:1d:00:a9:d3:69:30:bc:34:b0:93:95:
75:70:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org