Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Ls2nuyfabUyPwUjJoPrgxjwBWHU.roa
File: Ls2nuyfabUyPwUjJoPrgxjwBWHU.roa (raw, json)
Hash identifier: lM9bPejPjjLM12JB22AVWVnTvpJastWxha7uiKlrCCU=
Subject key identifier: 2E:CD:A7:BB:27:DA:6D:4C:8F:C1:48:C9:A0:FA:E0:C6:3C:01:58:75
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188E3D2B35DFF2A5329F3D706EA185AA594
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Ls2nuyfabUyPwUjJoPrgxjwBWHU.roa
Signing time: Thu 22 Jun 2023 15:56:56 +0000
ROA not before: Thu 22 Jun 2023 15:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.44.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 23:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:d2:b3:5d:ff:2a:53:29:f3:d7:06:ea:18:5a:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 22 15:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ecda7bb27da6d4c8fc148c9a0fae0c63c015875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:32:9c:77:7a:0b:93:f6:17:7d:97:5a:2d:ef:
50:84:9d:67:7d:b5:0c:bb:f7:48:25:49:d6:3b:4c:
86:4e:fe:11:2a:8b:66:d1:0e:7c:0b:b9:a3:3b:31:
13:13:bc:8e:d3:af:75:6b:d9:7f:28:99:bd:d4:69:
cf:8a:a2:d2:b8:62:b4:e0:03:8b:ad:78:48:2b:d4:
ff:4a:f4:15:5c:3e:d9:0f:cb:89:05:d0:80:3d:f9:
6a:ff:74:83:ab:f1:46:58:56:09:32:04:51:63:21:
63:de:15:39:c8:8e:a8:17:c5:d4:94:ff:84:27:ba:
34:e4:45:0f:88:85:45:d4:f6:ea:59:8a:d5:8d:e5:
ba:3d:7d:37:d7:3b:87:93:ad:d7:b6:99:33:3d:58:
55:8f:41:50:0a:66:66:fc:ce:1e:da:5d:54:70:df:
64:f1:78:fe:f9:32:6d:b5:fc:36:23:79:4f:d8:4d:
db:0b:b7:6a:2a:da:0d:d1:e1:b7:5f:44:73:16:59:
69:04:9a:c7:d2:6a:1d:10:7a:82:d5:71:03:82:d3:
bb:0b:97:db:21:a5:0d:a7:e3:3c:3f:93:b7:d5:80:
bd:e3:ec:20:87:fb:90:6c:13:2f:32:0a:fa:57:50:
50:12:c6:27:e8:05:2f:11:70:07:81:e7:25:0e:fb:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:A7:BB:27:DA:6D:4C:8F:C1:48:C9:A0:FA:E0:C6:3C:01:58:75
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Ls2nuyfabUyPwUjJoPrgxjwBWHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.44.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:69:ec:d3:d9:b3:cd:51:68:1e:94:92:88:3c:89:3d:d2:0d:
9c:6d:09:5b:e4:40:3a:95:a0:a0:e0:02:a6:9d:b7:7d:67:53:
d5:90:80:aa:40:9a:ed:89:04:0b:ad:57:c2:8c:7d:d2:aa:f6:
4f:4f:04:ba:11:54:3f:ee:77:3b:c2:23:4b:42:fa:1d:34:6a:
8e:85:00:34:5f:5a:56:bf:63:39:b7:c1:9d:81:64:15:7f:71:
1c:ef:0c:23:dc:89:12:08:83:f4:c9:bc:bd:b5:51:56:a4:c6:
8f:d5:7d:1c:d8:a2:a2:b8:ab:65:da:42:a8:83:51:e7:98:ad:
79:61:ed:ae:20:28:df:f0:ce:6b:5f:f5:80:8e:46:fd:a5:34:
4d:3a:11:56:a1:d1:7a:58:ec:18:62:d7:6b:d1:4b:f8:44:d8:
55:5c:87:d6:df:05:60:76:b6:d2:72:64:3a:32:c5:43:8f:d4:
93:a1:e3:a4:c4:f7:fb:8f:3f:04:54:40:02:d8:54:b2:40:cb:
a0:95:7a:02:f7:88:c2:29:05:30:4d:4b:8e:b6:66:c8:be:0d:
3e:f0:b6:0c:dc:93:b7:63:91:5e:f7:1a:bc:62:dc:53:a6:76:
81:75:50:1e:e5:25:6c:a9:f8:98:bd:5c:08:22:e7:d3:3e:33:
b5:5e:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org