Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Dx_DEQyStYh5hE-ROO40teSuoXw.roa
File: Dx_DEQyStYh5hE-ROO40teSuoXw.roa (raw, json)
Hash identifier: YQ6bw8S8eKB4EJeQAkbt+LDVmOwdkIjiVoCFmlsGhoU=
Subject key identifier: 0F:1F:C3:11:0C:92:B5:88:79:84:4F:91:38:EE:34:B5:E4:AE:A1:7C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018D11973D2DB06F52363B965DDDD44F9F5D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Dx_DEQyStYh5hE-ROO40teSuoXw.roa
Signing time: Tue 16 Jan 2024 09:25:40 +0000
ROA not before: Tue 16 Jan 2024 09:25:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 12:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:97:3d:2d:b0:6f:52:36:3b:96:5d:dd:d4:4f:9f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 16 09:25:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f1fc3110c92b58879844f9138ee34b5e4aea17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:90:66:fc:70:93:8e:cf:7b:88:67:12:5b:
15:58:9d:d3:25:e2:0b:0b:d0:c1:60:42:54:32:2f:
b5:c6:37:40:75:dc:d5:54:f4:b8:1f:b0:b1:93:a2:
55:48:9b:f3:e8:d8:d5:a4:c1:43:ec:40:24:01:33:
a6:72:ba:a2:77:cb:ab:9c:c7:ab:9a:7e:9d:e9:99:
9a:fc:04:0e:24:f9:09:05:d1:f3:b3:91:8a:89:c4:
fb:53:f7:e6:2d:49:c2:c1:90:38:63:97:c6:81:80:
d6:95:bc:fb:5b:c1:51:d4:ae:23:59:6b:fd:6b:50:
a6:0a:29:17:c6:0b:6c:39:08:b1:0b:f4:a4:2b:2b:
7e:53:08:56:a0:df:50:f7:1f:06:f6:cf:74:cb:e4:
4b:85:98:52:7c:f5:85:bc:2e:67:9a:06:1c:ca:bc:
c8:88:e5:cb:a5:50:11:a1:d6:aa:eb:2b:90:56:c5:
4a:64:6f:97:ed:2d:98:9d:5c:63:db:ee:5e:7f:c6:
d3:1b:dd:c1:bf:6e:3c:1b:d6:59:2c:30:e2:22:97:
0a:b2:ff:2b:75:04:41:7d:1b:35:ae:ab:30:86:a4:
4a:63:16:5f:5c:4e:e1:6e:c7:bd:09:40:32:01:02:
63:1d:42:fe:87:26:7b:48:e6:5e:ab:45:2a:66:7b:
e2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:C3:11:0C:92:B5:88:79:84:4F:91:38:EE:34:B5:E4:AE:A1:7C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Dx_DEQyStYh5hE-ROO40teSuoXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e8:56:0d:46:1c:3f:64:5e:54:87:a5:cf:da:67:d7:c2:f9:
e5:d2:f7:5e:52:6d:1c:e1:29:33:8f:ba:74:a3:d6:d7:a8:5d:
4e:50:45:77:c8:6f:54:69:6e:9f:d4:9c:aa:2b:bc:30:2b:6f:
d6:14:ce:e9:ce:a5:65:75:4b:e4:e8:8b:15:c1:fb:bb:40:d7:
5a:62:17:60:a7:c5:b5:73:d7:8b:f5:38:12:03:bf:19:d4:6d:
cf:2f:ad:5e:be:d9:0a:55:06:ba:09:12:93:0d:36:f4:e1:2e:
47:77:de:c8:21:36:39:40:b9:09:07:93:d4:91:14:36:59:fe:
d9:ff:e9:48:fa:46:b3:7e:95:60:45:85:90:40:a1:24:02:b8:
44:36:38:8f:1a:60:9f:fc:0e:27:58:3f:79:f0:75:3b:80:60:
ba:48:9b:8b:c6:b5:61:70:1b:db:fe:34:d8:b9:19:1e:ea:33:
ea:6c:a6:c7:a7:90:f4:02:79:c6:60:74:99:c6:e0:94:a1:5c:
8c:bb:6b:47:50:95:fe:d5:4f:ba:f9:2b:65:c2:a7:73:aa:df:
07:9f:68:86:f7:8a:26:60:1b:79:7a:94:73:03:e3:4b:b3:a5:
69:dc:a2:dd:d1:cb:a9:b2:4e:45:66:50:ab:d4:12:bf:15:31:
ab:38:00:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org