Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DbyvP4i372tyszrWfyYeyF9MaLw.roa
File: DbyvP4i372tyszrWfyYeyF9MaLw.roa (raw, json)
Hash identifier: JP5THRs8OXuAA54aP8JC5YsFUzvRcbU4m55sI498opw=
Subject key identifier: 0D:BC:AF:3F:88:B7:EF:6B:72:B3:3A:D6:7F:26:1E:C8:5F:4C:68:BC
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B3EDBFD8B6704B6114F5CADF8DE435BCA
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DbyvP4i372tyszrWfyYeyF9MaLw.roa
Signing time: Tue 17 Oct 2023 18:18:06 +0000
ROA not before: Tue 17 Oct 2023 18:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 01:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:db:fd:8b:67:04:b6:11:4f:5c:ad:f8:de:43:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 17 18:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dbcaf3f88b7ef6b72b33ad67f261ec85f4c68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:3e:b8:75:67:5f:29:04:de:54:cd:b8:5a:
cf:57:26:95:9c:13:20:8b:29:f5:67:a0:43:6f:b7:
f3:27:6e:c8:96:12:b8:e7:38:09:3e:2f:56:ce:58:
40:43:02:bb:65:38:9e:f7:81:c6:0b:fd:ff:32:7d:
8b:d0:00:04:db:51:01:1b:2d:fa:10:15:16:0b:18:
ff:9d:16:79:c4:7f:64:b3:c7:88:35:ba:ab:81:6c:
6f:3f:91:40:bd:66:da:7d:37:60:6a:0b:7a:c1:19:
6f:ae:e5:02:14:a4:f8:7f:c7:79:4e:eb:5b:d1:0a:
24:46:46:22:26:ea:3d:03:83:a9:25:2d:35:00:7e:
e0:e1:0a:98:6d:18:ad:fe:c5:e3:e9:9f:15:07:22:
c1:b3:1e:f4:47:d8:9f:07:01:80:c7:23:d7:1e:35:
aa:63:fc:dd:0c:5e:4e:1e:56:0d:39:ad:13:e2:12:
80:95:e8:04:b7:91:46:17:76:f5:a7:a3:17:0c:dc:
2f:7a:0a:50:38:77:29:87:3f:87:a8:6b:51:cb:ad:
57:79:2d:df:d7:d1:f3:19:2d:7c:5f:3f:6c:66:77:
df:8f:35:04:ff:b9:7b:99:70:33:ad:ec:e5:de:6f:
47:94:2d:fb:2b:a5:ea:e2:12:26:bc:23:c0:a2:d7:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BC:AF:3F:88:B7:EF:6B:72:B3:3A:D6:7F:26:1E:C8:5F:4C:68:BC
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DbyvP4i372tyszrWfyYeyF9MaLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:e0:79:a0:4a:e5:3b:19:08:63:72:c6:7c:ba:d6:f0:9c:dd:
4a:f8:37:d0:2f:b9:bf:51:4c:e2:f3:ff:cb:d2:e7:a2:a6:38:
10:b3:f3:ab:ee:b5:42:23:2a:c9:08:87:2d:fc:1b:0e:96:f2:
de:f3:97:d3:76:ea:b5:ab:31:b4:5d:1f:5b:e4:68:b9:69:85:
5e:b4:91:0f:cc:17:1d:79:f6:6c:df:41:51:c6:74:bd:19:f4:
07:d1:9e:2a:7e:01:b9:c0:83:00:90:86:cf:2e:ff:78:8c:41:
3c:bb:69:7c:33:b6:57:5e:c2:1f:8c:90:43:88:41:ba:dc:9f:
d9:8f:22:54:4c:c6:90:e4:41:ae:02:48:b7:d6:f3:bb:9e:35:
42:e5:09:64:74:94:2a:c1:a4:5f:5c:35:77:83:d2:7e:a9:9a:
72:18:df:bd:30:78:d1:b7:23:ce:45:cb:e4:ca:75:1b:25:04:
56:e3:7a:1a:80:9f:db:a8:cd:95:6d:19:ef:71:fe:79:2d:c1:
8f:88:5a:11:cf:28:10:44:6e:3d:b7:20:c5:36:0d:31:89:33:
e1:db:49:82:15:92:00:18:65:5e:b5:33:12:2e:8d:63:f7:4f:
3c:ba:53:14:8b:3d:00:0d:25:4f:a8:e2:43:7e:7c:6e:f7:7b:
54:71:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org