Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JQNFeWzXIlU085kLI-Qdfdp_Ep8.roa
File: JQNFeWzXIlU085kLI-Qdfdp_Ep8.roa (raw, json)
Hash identifier: sNs1a1Uo/EYh7ZloqsBUGCDoUx6NT15TKQGzmPUxZUc=
Subject key identifier: 25:03:45:79:6C:D7:22:55:34:F3:99:0B:23:E4:1D:7D:DA:7F:12:9F
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188DD3D56AF5C9ADCF1F0B6D57443D39E78
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JQNFeWzXIlU085kLI-Qdfdp_Ep8.roa
Signing time: Wed 21 Jun 2023 09:16:04 +0000
ROA not before: Wed 21 Jun 2023 09:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.48.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 09:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:3d:56:af:5c:9a:dc:f1:f0:b6:d5:74:43:d3:9e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 21 09:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=250345796cd7225534f3990b23e41d7dda7f129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:ba:c2:0d:de:62:3b:bc:61:7e:70:bb:ef:
4a:8a:02:a4:1a:55:99:00:d2:87:e3:5a:74:07:1b:
47:a1:53:74:99:41:75:01:07:2c:7d:78:02:6c:f9:
4f:82:b7:63:16:ed:a2:de:d3:97:c7:f7:3e:08:ba:
e7:a1:bd:90:34:19:2b:85:ef:13:45:f4:51:ac:05:
a6:01:b3:b6:26:b6:3c:c4:b5:36:d1:f7:f9:43:d8:
c7:7d:85:e4:05:67:48:51:53:b0:15:59:cc:a9:65:
a6:db:cb:d0:64:e3:7e:ba:8b:99:7e:85:1c:6d:94:
8c:93:1b:a3:98:6d:cc:42:c5:78:79:c2:5a:4e:4d:
de:1e:ef:09:11:5d:cd:1f:c2:4b:fc:49:c1:8c:d1:
04:d1:23:ea:33:96:1d:d2:0d:a8:1e:6e:be:b8:10:
5d:54:4d:26:92:27:6c:6d:73:d1:58:b3:66:94:c1:
1d:b1:03:38:9d:ae:36:5e:83:6c:dc:2e:8c:1a:73:
50:8a:a4:30:63:74:aa:55:03:a9:1d:3d:7d:ba:e6:
3d:40:d8:ca:a0:b0:74:db:0e:55:83:f0:c2:27:85:
39:a0:c6:d8:9b:7c:e3:c1:dc:b8:9e:3d:5d:20:88:
e4:ab:bd:02:c1:3c:a6:13:ac:17:cb:de:be:e6:de:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:03:45:79:6C:D7:22:55:34:F3:99:0B:23:E4:1D:7D:DA:7F:12:9F
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JQNFeWzXIlU085kLI-Qdfdp_Ep8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.48.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:68:2e:0a:e7:d1:dd:27:a6:9b:41:eb:67:2d:66:0e:98:50:
03:77:6e:b7:85:86:21:d9:ec:62:d5:11:61:93:72:66:52:36:
b2:81:20:68:b0:d9:93:73:17:7c:4b:91:2d:c0:0f:45:4e:00:
45:d2:7f:7d:3e:cb:b6:61:1f:60:87:09:f0:fc:a5:4c:8d:4c:
ed:3b:7d:43:25:e1:7b:ef:05:cb:fe:87:9d:af:4b:80:ed:d2:
00:93:fa:16:87:03:f6:19:0e:e8:bb:91:90:c3:65:4c:44:fb:
6d:6c:b9:5a:4e:8a:9a:42:7c:bd:5b:a5:38:09:0f:05:72:1b:
33:b6:ff:e4:d1:29:ed:30:5d:c2:50:0a:54:0f:aa:d2:a7:08:
d7:bb:96:67:5a:af:4b:f2:3f:76:a2:43:3f:3e:3f:62:d6:db:
3a:47:1d:11:09:06:e2:3d:47:65:d8:98:62:5f:df:b6:78:15:
e5:fd:72:93:09:ff:a6:12:4f:28:57:d0:97:5f:58:39:4e:e6:
e7:9e:d1:15:57:bf:5f:96:9f:48:3c:18:1e:7d:a0:21:d1:5d:
6c:3c:9a:6f:a3:38:a0:75:80:7b:0c:2f:8e:43:c4:ad:a4:f6:
93:24:01:eb:36:f0:f0:65:e9:1a:17:8d:82:c6:a4:08:d8:51:
82:a8:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org