Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ENmw1f8OPom_v12tK7U5G28LlzM.roa
File: ENmw1f8OPom_v12tK7U5G28LlzM.roa (raw, json)
Hash identifier: my+NdmyRjbuWpxUQi0jhwz3mreNEYq0+WgMyVjtf+vc=
Subject key identifier: 10:D9:B0:D5:FF:0E:3E:89:BF:BF:5D:AD:2B:B5:39:1B:6F:0B:97:33
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A0EC3259EA4010D22A52A63C8AA35674F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ENmw1f8OPom_v12tK7U5G28LlzM.roa
Signing time: Sat 19 Aug 2023 17:06:24 +0000
ROA not before: Sat 19 Aug 2023 17:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.39.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 12:55:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:c3:25:9e:a4:01:0d:22:a5:2a:63:c8:aa:35:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 19 17:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10d9b0d5ff0e3e89bfbf5dad2bb5391b6f0b9733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:d5:52:95:cf:88:b6:87:bf:cc:01:f9:34:
5e:04:ba:0a:96:0a:98:c2:1e:d9:89:40:b0:f6:db:
c9:e9:cb:83:27:be:5c:d0:3b:34:d7:66:8c:85:d9:
db:ae:b1:72:ec:73:9b:a3:c7:c6:e7:3e:28:ab:60:
d6:ba:63:b0:2b:eb:67:b3:3c:0a:1a:5d:97:61:24:
e7:70:c2:69:f6:50:eb:b1:0b:64:0e:47:14:1a:c0:
15:9f:c5:22:de:73:98:ec:14:46:18:73:6c:df:69:
91:fe:15:c3:ee:5b:e5:20:1c:f1:11:c1:10:03:b2:
ae:b7:80:50:2f:19:a3:c8:99:3e:63:c5:9e:2f:ed:
08:0f:5b:7d:85:2a:c9:00:ec:d0:11:29:dd:00:2e:
e8:1c:92:8a:8a:e8:cd:97:f1:d9:d1:9f:73:39:79:
b9:71:e4:ab:0f:16:ae:5d:cd:d3:d4:ab:43:ed:de:
98:ae:eb:d1:da:43:4b:5d:36:5c:09:c0:6e:c6:8d:
a0:4b:0e:89:b5:54:e4:95:52:b5:29:50:5d:ce:40:
3b:4d:2e:db:7d:75:61:4d:3d:d4:32:a4:f9:0d:43:
64:f5:ae:6b:44:1a:f1:bb:4d:48:fa:15:0a:7f:1d:
cf:d2:42:b9:1f:b0:dd:b1:51:c5:9a:af:90:90:3e:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:B0:D5:FF:0E:3E:89:BF:BF:5D:AD:2B:B5:39:1B:6F:0B:97:33
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ENmw1f8OPom_v12tK7U5G28LlzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.39.0-46.34.40.255
46.34.42.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c6:d1:5f:4a:61:41:e5:20:d2:a2:3f:f2:59:53:6c:b9:2f:
6b:72:b9:83:95:9e:76:bc:87:dd:2c:50:b3:2e:94:da:d3:45:
ff:bb:a1:df:24:bb:71:67:7c:89:73:9b:07:0a:0f:0c:af:28:
80:bd:88:e6:22:49:53:05:b9:1c:3d:f8:df:5d:af:19:8c:af:
df:90:c8:8c:e5:5d:5f:c8:a2:10:27:87:74:21:82:60:47:d5:
58:f7:40:9c:1c:42:53:13:e8:09:04:de:64:52:b3:34:7b:f6:
01:f3:f0:65:47:17:0c:6f:e6:bc:a6:df:e4:17:79:34:eb:71:
2f:bd:7a:1e:c9:23:84:7f:77:c2:ed:4c:68:b0:df:75:55:6d:
dc:31:c0:fc:46:76:a3:0d:4e:1f:52:32:b2:6a:0e:54:e9:cd:
9e:29:e2:14:c8:22:8e:ae:c2:1a:e4:c5:48:45:48:96:aa:d3:
2c:7f:6a:32:05:af:28:f7:8d:e9:18:81:77:e2:2e:34:89:6c:
b8:96:3d:da:5b:7a:80:66:78:71:ad:ec:b7:b1:14:3f:dc:c0:
9d:89:a4:c1:ed:dc:fd:73:c2:62:8a:93:f3:72:e4:62:e0:00:
4d:c9:ee:8f:82:f9:5f:c9:a9:e1:6b:bd:ba:c9:ba:6e:7e:72:
b1:c9:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org