Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Iqfj-5T4SEghzD6K1dxpjDLzdSU.roa
File: Iqfj-5T4SEghzD6K1dxpjDLzdSU.roa (raw, json)
Hash identifier: hgA30TZxL43/Q+ZuVowXza2XkDLEeBXP6EM64vs5hB8=
Subject key identifier: 22:A7:E3:FB:94:F8:48:48:21:CC:3E:8A:D5:DC:69:8C:32:F3:75:25
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B3DE20CE01282A3E4353CA75A23663B21
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Iqfj-5T4SEghzD6K1dxpjDLzdSU.roa
Signing time: Tue 17 Oct 2023 13:45:06 +0000
ROA not before: Tue 17 Oct 2023 13:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.44.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Oct 2023 15:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:e2:0c:e0:12:82:a3:e4:35:3c:a7:5a:23:66:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 17 13:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22a7e3fb94f8484821cc3e8ad5dc698c32f37525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:f7:28:89:e2:3d:b4:ef:50:fd:90:3a:7c:
aa:3e:87:c3:35:f3:9e:19:4e:cf:19:de:7e:59:6a:
a0:67:16:d2:1e:93:bc:e9:46:34:51:49:c3:bf:c8:
d4:de:74:b7:0a:af:63:15:47:76:43:e7:d5:66:b3:
12:c2:69:3d:3d:19:25:84:d0:0d:17:cd:3c:f5:0d:
db:9e:d1:50:65:3d:68:ea:29:47:95:48:01:a4:c7:
74:61:86:3a:1b:67:2b:51:e3:15:fc:ce:7d:d9:9f:
47:f8:0c:d6:0a:70:fd:07:3d:49:99:e1:6b:46:b2:
4a:8f:db:5c:ea:62:71:d4:98:e4:f4:5c:47:03:c7:
95:5a:d3:40:39:bc:c5:52:b6:71:07:10:8a:f5:07:
8c:b9:b0:e7:2c:54:0a:11:87:c2:ba:36:30:c5:3b:
21:54:c2:4c:b2:dc:6e:32:ca:c7:e4:5f:11:1f:40:
cb:f7:9e:42:70:28:df:dd:eb:d4:10:2e:74:a1:2b:
7a:d0:aa:e3:77:7b:2e:28:a2:10:03:cd:a4:59:c7:
0c:c0:2d:ee:b5:83:89:fd:e8:75:8c:66:ab:3a:a5:
63:b2:1b:38:10:24:04:2c:5e:64:f0:1a:c5:f0:fa:
6c:db:da:30:7a:8a:57:1f:82:86:e8:2d:f6:07:93:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:E3:FB:94:F8:48:48:21:CC:3E:8A:D5:DC:69:8C:32:F3:75:25
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Iqfj-5T4SEghzD6K1dxpjDLzdSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.38.0/24
46.34.44.0/23
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:e6:97:0d:52:26:0a:87:ea:e8:e1:b4:e7:fd:0c:59:17:30:
4b:ee:a3:46:d5:50:ff:a3:89:98:60:fe:36:f7:ae:98:15:53:
f8:ca:88:e1:f4:24:c7:97:a0:e1:ff:a4:a5:7b:c9:02:ec:6c:
c2:68:1d:e0:6d:c9:35:86:db:dd:90:c5:e8:97:48:d7:8d:e0:
c0:ec:f9:d5:b6:94:54:dd:e0:0b:c3:5b:d8:3a:af:ef:5f:c5:
06:f5:7d:42:3b:8d:9a:99:32:ba:15:81:f8:39:8b:e0:e1:3d:
5f:b1:9d:13:62:40:a6:6c:6e:06:b5:f4:99:01:1f:5e:bf:0b:
2a:9e:f6:ea:27:dc:26:16:1b:bc:fe:ea:e5:6d:4c:bd:92:b7:
d7:a8:8d:22:72:ee:cf:fc:a7:01:1a:61:60:ea:34:59:64:9f:
fb:f5:84:1e:64:df:b5:c6:f3:fd:b4:88:ca:8c:7c:46:d5:08:
8f:16:5a:71:c0:d0:04:8e:4e:fc:99:3f:aa:c4:0b:89:73:ba:
92:1c:51:98:e4:3a:f1:c9:2a:26:35:a9:ef:db:32:53:4a:bb:
ea:bd:bb:f6:8e:00:c2:78:f4:60:07:d1:ab:03:c5:87:9f:86:
a8:6d:4e:a8:06:eb:c3:0d:2f:8d:f0:23:3b:84:63:8e:96:26:
d1:58:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org