Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/H2BsZ4rSRUlt1MFGo4D5r4CSzrU.roa
File: H2BsZ4rSRUlt1MFGo4D5r4CSzrU.roa (raw, json)
Hash identifier: 2ybshrcWztjhziY9JEVBqXvJm6LA4ujR2Cuj4wmJCQ0=
Subject key identifier: 1F:60:6C:67:8A:D2:45:49:6D:D4:C1:46:A3:80:F9:AF:80:92:CE:B5
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186C58CF4016CEFC227FB0C0FACF46C40BC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/H2BsZ4rSRUlt1MFGo4D5r4CSzrU.roa
Signing time: Thu 09 Mar 2023 08:46:34 +0000
ROA not before: Thu 09 Mar 2023 08:46:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 46.34.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 07:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:8c:f4:01:6c:ef:c2:27:fb:0c:0f:ac:f4:6c:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 9 08:46:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f606c678ad245496dd4c146a380f9af8092ceb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:33:06:1d:05:d3:6b:8b:4b:f0:e2:a7:0b:
15:80:4c:86:8a:04:1f:6d:e0:a9:e8:6c:1e:bc:75:
53:b7:c8:50:b5:cd:95:3e:4f:07:5c:b4:1a:69:ec:
24:5b:e6:26:e2:d5:6a:64:d7:91:d8:e8:20:a9:6c:
e2:cb:26:bd:e7:6d:7c:6d:d9:1f:22:3e:52:04:48:
83:60:81:49:60:09:b5:49:88:76:b9:e1:4d:ca:65:
f3:5b:9a:94:d8:60:33:61:10:3b:e7:d5:01:2e:21:
b2:53:db:40:84:d3:1f:34:83:1e:82:e3:12:16:0f:
cb:03:a8:26:0a:d4:36:ee:45:55:2e:dc:03:ee:39:
40:32:47:97:76:bb:3d:e5:41:91:d8:44:5d:84:ef:
fd:7c:1a:13:ab:01:54:b3:43:a5:70:13:08:ae:46:
b2:61:44:26:c7:3f:f6:2c:54:19:4e:27:ef:13:a4:
62:a5:62:33:45:ec:bb:52:96:81:b5:3c:bb:fe:42:
33:2e:cb:3f:10:42:39:03:27:f5:8d:65:80:7c:45:
51:e4:1e:23:bc:81:0f:a0:42:9b:26:c1:34:d6:44:
ce:cc:fd:c7:d1:28:ce:4a:30:cf:4c:c3:75:15:34:
cd:77:01:9e:07:69:da:8f:30:c0:b0:ac:c8:41:11:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:6C:67:8A:D2:45:49:6D:D4:C1:46:A3:80:F9:AF:80:92:CE:B5
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/H2BsZ4rSRUlt1MFGo4D5r4CSzrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.44.0/24
Signature Algorithm: sha256WithRSAEncryption
00:4c:0e:6c:da:ba:8a:a2:7a:db:1d:35:c5:cc:58:63:76:38:
ce:78:82:22:dc:c9:a2:15:62:53:83:cd:13:27:dc:99:da:2a:
85:fc:32:2a:6c:6d:91:b7:41:c2:32:88:a0:52:d2:1c:ae:e0:
21:21:f7:a4:da:68:6e:91:b0:c3:c9:cf:55:c1:76:bc:dd:46:
74:a9:c7:5a:b2:0b:f9:5b:e1:a5:84:61:38:2b:8a:63:02:3c:
ba:64:90:08:4f:ec:8b:de:cf:26:73:b3:69:a7:f4:76:76:9e:
1c:c2:48:fc:db:f8:74:9a:75:a4:17:fe:d0:28:3c:57:6d:b3:
5d:ee:d6:e4:3a:a3:93:27:39:bb:ae:07:46:fd:d9:e7:95:a1:
eb:9b:37:4b:67:2b:3c:e6:58:60:d0:e2:09:ac:4b:5d:06:95:
e1:31:55:94:d8:b0:a5:db:ad:4b:7d:48:be:2c:38:38:37:93:
00:3d:35:2a:fa:9a:0d:5e:df:b5:e4:cb:8c:3b:5b:45:9c:46:
af:19:9b:56:a1:79:c5:89:69:94:17:3f:e5:64:7a:b5:e7:23:
ae:22:a9:e0:5e:db:cc:36:3d:6e:be:79:6c:55:2b:e0:8c:a8:
05:53:62:cd:f3:25:12:e3:0d:51:f4:a0:b5:dd:54:1d:bf:3c:
01:ea:61:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbFjPQBbO/CJ/sMD6z0bEC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMzA5MDg0NjM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjYwNmM2NzhhZDI0NTQ5NmRkNGMxNDZhMzgwZjlhZjgwOTJjZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovwzBh0F02uLS/DipwsVgEyGigQf
beCp6GwevHVTt8hQtc2VPk8HXLQaaewkW+Ym4tVqZNeR2OggqWziyya95218bdkf
Ij5SBEiDYIFJYAm1SYh2ueFNymXzW5qU2GAzYRA759UBLiGyU9tAhNMfNIMeguMS
Fg/LA6gmCtQ27kVVLtwD7jlAMkeXdrs95UGR2ERdhO/9fBoTqwFUs0OlcBMIrkay
YUQmxz/2LFQZTifvE6RipWIzRey7UpaBtTy7/kIzLss/EEI5Ayf1jWWAfEVR5B4j
vIEPoEKbJsE01kTOzP3H0SjOSjDPTMN1FTTNdwGeB2najzDAsKzIQRGXZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9gbGeK0kVJbdTBRqOA+a+Aks61MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvSDJCc1o0clNSVWx0MU1GR280RDVyNENTenJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIsMA0G
CSqGSIb3DQEBCwUAA4IBAQAATA5s2rqKonrbHTXFzFhjdjjOeIIi3MmiFWJTg80T
J9yZ2iqF/DIqbG2Rt0HCMoigUtIcruAhIfek2mhukbDDyc9VwXa83UZ0qcdasgv5
W+GlhGE4K4pjAjy6ZJAIT+yL3s8mc7Npp/R2dp4cwkj82/h0mnWkF/7QKDxXbbNd
7tbkOqOTJzm7rgdG/dnnlaHrmzdLZys85lhg0OIJrEtdBpXhMVWU2LCl261LfUi+
LDg4N5MAPTUq+poNXt+15MuMO1tFnEavGZtWoXnFiWmUFz/lZHq15yOuIqngXtvM
Nj1uvnlsVSvgjKgFU2LN8yUS4w1R9KC13VQdvzwB6mHj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org