Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FHG_RQWoDO-hi31e88nnZ0BDIRs.roa
File: FHG_RQWoDO-hi31e88nnZ0BDIRs.roa (raw, json)
Hash identifier: TiNAK1of219oDSZPKHlqleUuU0mQUDVzB2HAJSg2a6A=
Subject key identifier: 14:71:BF:45:05:A8:0C:EF:A1:8B:7D:5E:F3:C9:E7:67:40:43:21:1B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B62B64C27A982713AB6D70625B8F0D2F6
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FHG_RQWoDO-hi31e88nnZ0BDIRs.roa
Signing time: Tue 24 Oct 2023 17:23:16 +0000
ROA not before: Tue 24 Oct 2023 17:23:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 07:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:b6:4c:27:a9:82:71:3a:b6:d7:06:25:b8:f0:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 24 17:23:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1471bf4505a80cefa18b7d5ef3c9e7674043211b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:79:fc:30:9a:5e:92:6d:0a:48:c6:c6:0a:
8a:19:b3:e7:af:46:9d:1c:e4:0f:86:4a:a3:75:b4:
03:43:62:53:b4:79:f3:71:1c:c1:32:e8:47:5e:18:
3f:20:9c:93:76:3d:41:08:b8:63:50:3c:e8:d7:a6:
91:53:bd:e9:cd:1f:f4:14:68:0f:43:90:eb:ef:19:
0a:04:de:ce:fc:3c:19:94:d6:42:00:7a:3d:41:4f:
72:d9:b6:b0:46:08:c7:c6:1d:cb:32:4f:80:77:8d:
a3:6e:ee:07:50:38:c6:b8:2a:3f:41:b7:23:d6:dc:
a7:ba:e1:d7:7b:1a:f1:c0:42:fe:b5:12:1f:59:f3:
bd:8b:53:43:52:b0:1d:4b:6a:64:77:b5:31:2f:ee:
f2:50:dd:72:15:89:d8:59:b0:33:2e:56:4b:b9:5a:
02:ab:18:3b:c1:d1:53:43:a9:0e:a8:31:4b:82:07:
4e:5c:99:53:b5:ef:1d:da:57:bd:08:0b:c8:62:bd:
22:e9:02:8e:dd:06:2c:5e:dc:84:77:5e:54:fb:3f:
d7:f5:70:72:2b:14:f0:fc:6d:a3:d0:f7:35:d4:14:
8d:0e:be:5f:b8:66:d9:d8:05:a4:aa:84:5a:30:6b:
b0:a9:e4:6e:be:c8:22:f7:e5:4e:02:2c:e8:46:8d:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:BF:45:05:A8:0C:EF:A1:8B:7D:5E:F3:C9:E7:67:40:43:21:1B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FHG_RQWoDO-hi31e88nnZ0BDIRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
34:62:47:83:9a:bb:23:98:0a:00:5c:b5:1d:b9:4e:49:27:e9:
88:56:d4:b4:41:e6:81:62:2f:71:7c:a2:d1:97:a5:d0:15:9f:
5a:17:90:ba:0e:47:18:bb:21:ca:e8:fe:c5:f3:b3:de:dd:b0:
96:b8:ce:29:4c:b3:2c:38:41:1d:96:a4:0e:2f:3b:38:d2:1d:
e5:50:35:ec:98:39:ac:f2:90:7b:a3:af:57:9a:bf:7d:33:64:
7d:c1:df:85:c9:a8:51:d3:48:f6:9c:88:8b:84:70:70:13:0d:
f6:d8:16:bf:42:f2:6c:d4:3b:13:35:f7:7e:b8:e9:bc:03:d9:
84:15:5f:83:aa:9b:d0:82:26:6d:d6:19:17:4c:8b:d2:93:66:
dd:1f:2c:ea:25:3b:c6:93:ea:6b:7f:eb:09:20:34:e5:b6:62:
c0:68:55:4e:f9:2e:4d:c3:e8:52:ef:a5:b2:77:18:15:4e:19:
d1:ed:ea:8a:2d:b1:50:d3:4a:78:40:55:aa:99:1c:4c:22:6e:
35:4e:44:aa:8f:63:40:e8:f1:04:de:c8:c1:72:50:e9:41:f9:
a2:f6:bd:5b:b4:11:bd:87:77:ad:43:18:9c:19:96:28:a4:4a:
b2:21:bd:74:c3:46:e7:f9:59:75:1d:dd:72:25:c5:54:3d:1f:
91:e5:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org