Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DhqEJ3pEWz49oY49atKGLRVrphU.roa
File: DhqEJ3pEWz49oY49atKGLRVrphU.roa (raw, json)
Hash identifier: 7anp9W1UMMyu8rlRrWBwYhu/vzECDCYlmP48aC7DtFw=
Subject key identifier: 0E:1A:84:27:7A:44:5B:3E:3D:A1:8E:3D:6A:D2:86:2D:15:6B:A6:15
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B70006558B5B7FB2482D98A484E3197A3
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DhqEJ3pEWz49oY49atKGLRVrphU.roa
Signing time: Fri 27 Oct 2023 07:19:15 +0000
ROA not before: Fri 27 Oct 2023 07:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Oct 2023 07:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:00:65:58:b5:b7:fb:24:82:d9:8a:48:4e:31:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 27 07:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e1a84277a445b3e3da18e3d6ad2862d156ba615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ba:80:12:28:9a:6c:c7:5a:d2:59:5b:c7:4a:
da:8b:fa:a0:38:58:ff:53:98:f4:44:84:5e:2d:00:
ea:8e:f9:1a:e6:30:69:e1:05:a6:86:b8:c6:79:e5:
5c:94:3b:cc:be:2d:64:46:7f:07:71:11:35:d5:88:
cf:b0:65:23:1f:e5:57:9c:e4:50:77:52:d7:42:5e:
16:56:d1:be:49:d9:ac:5e:6a:d4:07:33:e6:7d:49:
72:90:67:b1:32:c6:93:60:e7:bc:8c:1e:14:1a:e1:
05:10:15:fc:49:4e:2d:d8:69:93:7b:58:03:31:07:
bb:cb:87:60:5d:fb:f3:a3:58:19:e2:bd:a2:2d:28:
5d:59:11:10:44:f2:5b:08:95:37:ba:23:e5:32:92:
c6:0c:80:bb:62:fa:1a:ed:e8:32:d0:fb:af:f4:4e:
7c:89:fd:9a:38:84:8e:7a:3d:55:73:a2:ed:4f:b4:
44:53:60:6d:ad:90:a6:8c:ed:01:df:d3:c8:c6:ca:
75:68:f1:a0:3d:d7:6f:a5:ec:fb:74:60:e2:ee:29:
5c:e8:fd:82:b9:86:ac:93:42:7f:d6:c7:4f:b8:f2:
e4:f5:93:88:b4:bf:da:1a:31:f5:d8:64:fd:de:f0:
be:0a:38:fd:50:7a:41:38:94:ab:39:e1:ea:6b:26:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1A:84:27:7A:44:5B:3E:3D:A1:8E:3D:6A:D2:86:2D:15:6B:A6:15
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/DhqEJ3pEWz49oY49atKGLRVrphU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a2:d1:2d:63:c8:f4:47:18:c3:85:7f:9c:6a:f1:f3:f5:00:
97:b0:b2:f7:10:d6:d5:c3:aa:34:5a:df:ee:7b:dd:08:f5:22:
ce:ea:c7:7b:b9:43:c0:9f:6d:a6:72:59:b6:55:99:a1:69:5e:
e3:13:d4:75:57:d6:55:80:1e:6b:c3:76:80:b7:60:b7:0e:90:
72:f8:df:3b:31:5b:16:0a:88:85:84:c5:20:b4:41:eb:a7:14:
26:a7:24:23:2a:6e:22:36:8b:47:28:b3:6c:94:29:dc:cf:31:
29:21:ad:df:79:fd:0b:2a:2a:4c:b6:88:d6:54:d2:58:a7:37:
ea:a2:82:69:39:94:88:0b:3e:d1:00:ce:22:fb:e1:b4:20:ac:
c9:88:53:65:e5:c6:aa:86:26:fc:02:af:12:7c:1e:1a:39:b5:
aa:95:fd:9a:75:b9:f1:9f:f4:03:64:81:dc:77:33:d0:3b:fd:
b1:16:b8:9b:6e:3c:fa:7a:79:ef:13:1a:c3:8d:ba:3c:37:77:
d8:b3:42:ae:d1:fd:92:da:c3:5d:b8:2e:f1:ea:7f:54:fa:e3:
3a:73:d9:c2:1b:01:17:34:ef:b7:0b:06:bb:01:04:4a:96:fa:
48:fc:ed:5a:26:3c:81:6f:e8:cb:2c:c7:55:e8:bc:d3:42:79:
dc:c2:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org