Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EZcXqd5mVjL4UqWHSwcNRn99aw0.roa
File: EZcXqd5mVjL4UqWHSwcNRn99aw0.roa (raw, json)
Hash identifier: Ud/TmXSRTvJa526yCqJ6hYfegWuAr7/yuzh3kOyN6ig=
Subject key identifier: 11:97:17:A9:DE:66:56:32:F8:52:A5:87:4B:07:0D:46:7F:7D:6B:0D
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0185F2D9F4443419E3926AB9E91DA56ACFF1
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EZcXqd5mVjL4UqWHSwcNRn99aw0.roa
Signing time: Fri 27 Jan 2023 10:50:48 +0000
ROA not before: Fri 27 Jan 2023 10:50:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/21 maxlen: 21
46.34.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 06 Feb 2023 23:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f2:d9:f4:44:34:19:e3:92:6a:b9:e9:1d:a5:6a:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 27 10:50:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=119717a9de665632f852a5874b070d467f7d6b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6d:ad:75:c0:d8:ca:4b:c8:51:41:58:aa:07:
6a:7a:17:e9:79:ca:17:79:92:ff:58:85:e1:2a:bb:
d6:3f:37:a8:91:3c:63:87:1b:eb:6c:9c:17:eb:1a:
dd:cf:e6:39:6a:66:9a:46:a0:c7:19:b6:15:40:fb:
7b:55:d4:e6:85:b4:c8:09:d6:41:4b:7a:86:c5:cd:
21:9d:28:55:de:aa:c9:3a:5d:f1:4a:83:60:f0:ab:
ba:dc:e0:f3:a6:44:4e:b5:35:da:be:47:c4:57:e8:
10:b4:8e:56:48:a7:7f:90:0b:8b:08:35:e2:ff:03:
f8:52:aa:f8:dd:24:e9:ce:07:4c:f1:93:b8:7f:1e:
60:c1:5f:07:86:15:49:e0:32:92:9f:cf:73:98:0f:
aa:c8:5c:0e:29:c4:4e:15:56:eb:0a:95:29:04:96:
71:0f:42:f3:28:b7:a3:56:4b:41:bd:4d:2f:6c:ca:
bd:45:cb:d4:ce:3a:47:ed:a8:21:30:5b:ee:0f:72:
96:ee:85:49:1d:37:18:8e:de:9b:e7:e1:35:6c:62:
00:4f:06:63:16:41:b2:a0:3b:02:bc:35:9c:3a:b8:
90:b6:74:35:02:ac:29:ad:5c:70:cf:71:cf:6f:3b:
03:6d:fe:92:62:c4:45:c1:aa:35:47:08:1b:cf:20:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:17:A9:DE:66:56:32:F8:52:A5:87:4B:07:0D:46:7F:7D:6B:0D
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/EZcXqd5mVjL4UqWHSwcNRn99aw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/21
46.34.48.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:ce:d9:8f:83:ed:a5:53:df:30:1f:4d:68:c4:da:dc:75:56:
ac:30:13:26:5e:2d:db:59:38:ed:f0:4b:a2:be:8b:80:53:a0:
76:e6:29:4d:29:22:6f:d4:ef:db:45:9b:fd:80:41:1c:c2:89:
c1:25:ac:31:5a:11:a2:1c:09:d7:f9:30:06:80:92:90:d7:da:
fe:83:d3:63:60:b4:7d:29:51:05:36:22:28:e0:bf:2e:94:36:
66:23:a3:52:e1:1d:43:5d:d1:03:59:21:71:37:9c:9d:9e:12:
cc:6e:93:41:34:bc:3b:bd:c7:08:8a:88:3c:6d:06:41:c4:63:
70:55:75:e0:23:ba:ec:59:d9:26:b4:78:8f:3f:42:47:c3:07:
41:1f:46:26:ec:b1:ac:1b:7a:2c:bc:6e:72:ad:51:2d:f7:81:
15:a4:5a:e2:40:c6:05:ea:98:41:5c:d3:03:48:af:e9:8d:47:
a4:aa:02:b0:10:42:5e:fb:ff:99:5d:77:30:38:e4:59:3b:20:
06:04:be:32:68:09:7e:01:08:d6:29:f3:23:1e:40:4b:67:a9:
2f:07:70:4e:ac:4c:82:97:3d:0d:12:60:89:6d:5b:d7:ab:95:
e1:65:8c:d1:d3:36:85:6e:1a:ef:80:6d:8e:5a:57:c3:a6:07:
e0:4a:98:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXy2fRENBnjkmq56R2las/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMTI3MTA1MDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTk3MTdhOWRlNjY1NjMyZjg1MmE1ODc0YjA3MGQ0NjdmN2Q2YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW2tdcDYykvIUUFYqgdqehfpecoX
eZL/WIXhKrvWPzeokTxjhxvrbJwX6xrdz+Y5amaaRqDHGbYVQPt7VdTmhbTICdZB
S3qGxc0hnShV3qrJOl3xSoNg8Ku63ODzpkROtTXavkfEV+gQtI5WSKd/kAuLCDXi
/wP4Uqr43STpzgdM8ZO4fx5gwV8HhhVJ4DKSn89zmA+qyFwOKcROFVbrCpUpBJZx
D0LzKLejVktBvU0vbMq9RcvUzjpH7aghMFvuD3KW7oVJHTcYjt6b5+E1bGIATwZj
FkGyoDsCvDWcOriQtnQ1AqwprVxwz3HPbzsDbf6SYsRFwao1RwgbzyCyhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBGXF6neZlYy+FKlh0sHDUZ/fWsNMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvRVpjWHFkNW1Wakw0VXFXSFN3Y05Sbjk5YXcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLiIgAwQE
LiIwMA0GCSqGSIb3DQEBCwUAA4IBAQAMztmPg+2lU98wH01oxNrcdVasMBMmXi3b
WTjt8EuivouAU6B25ilNKSJv1O/bRZv9gEEcwonBJawxWhGiHAnX+TAGgJKQ19r+
g9NjYLR9KVEFNiIo4L8ulDZmI6NS4R1DXdEDWSFxN5ydnhLMbpNBNLw7vccIiog8
bQZBxGNwVXXgI7rsWdkmtHiPP0JHwwdBH0Ym7LGsG3osvG5yrVEt94EVpFriQMYF
6phBXNMDSK/pjUekqgKwEEJe+/+ZXXcwOORZOyAGBL4yaAl+AQjWKfMjHkBLZ6kv
B3BOrEyClz0NEmCJbVvXq5XhZYzR0zaFbhrvgG2OWlfDpgfgSph2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org