Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Pwkrp3hAoodrXoe0_A7BI5PINgQ.roa
File: Pwkrp3hAoodrXoe0_A7BI5PINgQ.roa (raw, json)
Hash identifier: wWiBXA9E5Eo7kXGb32zbm7uGTUAWEvhK1BvWn/4OncY=
Subject key identifier: 3F:09:2B:A7:78:40:A2:87:6B:5E:87:B4:FC:0E:C1:23:93:C8:36:04
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018C8C048F5FCA5E40A719040AF6225C4364
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Pwkrp3hAoodrXoe0_A7BI5PINgQ.roa
Signing time: Thu 21 Dec 2023 10:55:58 +0000
ROA not before: Thu 21 Dec 2023 10:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.48.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 15:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:04:8f:5f:ca:5e:40:a7:19:04:0a:f6:22:5c:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Dec 21 10:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f092ba77840a2876b5e87b4fc0ec12393c83604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f3:c2:a5:49:a2:36:5c:91:27:ed:c4:ae:02:
b6:0c:2e:dc:c0:c8:fa:b8:63:5b:ac:ff:53:18:60:
60:e4:91:7e:5b:4a:13:d3:2d:0d:d7:af:71:26:d8:
89:92:0c:6f:10:3d:5d:3e:c2:2f:50:68:86:9b:e4:
76:38:5c:93:8b:b1:46:b3:9a:03:15:28:0f:11:da:
3e:20:23:e0:c0:3f:1a:de:be:d6:ed:0a:d2:ea:4d:
a6:c9:bb:37:fa:a5:7a:f7:68:1e:cb:aa:b6:0c:4d:
3a:1e:c4:7c:21:4b:24:33:48:1b:23:d7:a5:2b:59:
20:a1:9e:99:a4:79:10:5a:44:bf:26:90:95:c2:cc:
23:99:81:35:36:fc:81:b1:2f:67:81:12:34:20:fb:
9c:cd:f4:c4:f3:b4:39:37:2b:28:70:82:5e:1d:7a:
c1:4f:c4:93:45:89:52:56:2a:1a:c0:8b:62:b3:49:
47:1b:bb:2a:a7:15:08:d7:37:15:37:c7:4d:18:ae:
56:bb:b8:e0:54:6d:d8:03:60:73:48:07:33:10:9c:
95:95:7a:9b:4c:10:24:8a:10:db:05:5a:a4:27:ef:
c8:d7:7b:db:16:2e:f4:80:9c:1c:64:c9:bc:0f:93:
19:d7:76:c1:47:54:21:ae:22:53:4f:66:49:86:d4:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:2B:A7:78:40:A2:87:6B:5E:87:B4:FC:0E:C1:23:93:C8:36:04
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Pwkrp3hAoodrXoe0_A7BI5PINgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.48.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:da:a3:32:25:a5:f1:39:b1:dc:e7:67:a8:4a:b2:c2:cf:c2:
21:f8:f1:3a:f2:1f:f1:ca:40:9e:a6:c6:6a:a7:cd:02:b2:e5:
a9:e9:8e:da:55:0c:fa:96:12:40:6c:ac:fd:88:c2:99:f1:35:
bd:5f:de:3f:3f:56:29:5f:74:cd:00:2f:de:36:78:8c:22:be:
8b:93:30:46:59:ce:8b:33:b0:65:b1:85:90:72:b1:87:3a:2c:
54:d9:21:19:89:52:8e:69:7f:b0:72:1e:13:6b:f0:0c:b1:38:
f0:34:7f:67:4e:c9:35:79:a0:49:c3:0d:ed:3a:07:d1:7a:36:
32:a3:3a:a7:3e:c8:06:28:03:69:da:8b:41:ee:0a:29:c9:af:
4a:d4:0b:9d:5f:ad:ab:3e:66:02:c0:5f:0a:71:55:8c:d2:bc:
be:e1:f2:31:c8:e4:5d:15:63:cd:34:6c:97:e3:d5:4e:3a:5a:
66:68:0b:93:b4:7b:98:a9:0b:ce:58:e1:24:d8:05:dc:9b:53:
73:e9:2a:b3:90:44:d7:62:7a:f9:7f:ec:21:9a:66:d2:1e:6c:
f9:06:2d:d5:d0:2c:41:b9:28:64:38:58:53:85:9e:22:bf:8c:
4f:5c:c6:66:11:70:96:e8:a4:a3:5b:fa:3a:fc:05:35:12:fa:
4a:f6:af:91
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYyMBI9fyl5ApxkECvYiXENkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMjIxMTA1NTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjA5MmJhNzc4NDBhMjg3NmI1ZTg3YjRmYzBlYzEyMzkzYzgzNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfPCpUmiNlyRJ+3ErgK2DC7cwMj6
uGNbrP9TGGBg5JF+W0oT0y0N169xJtiJkgxvED1dPsIvUGiGm+R2OFyTi7FGs5oD
FSgPEdo+ICPgwD8a3r7W7QrS6k2mybs3+qV692gey6q2DE06HsR8IUskM0gbI9el
K1kgoZ6ZpHkQWkS/JpCVwswjmYE1NvyBsS9ngRI0IPuczfTE87Q5NysocIJeHXrB
T8STRYlSVioawItis0lHG7sqpxUI1zcVN8dNGK5Wu7jgVG3YA2BzSAczEJyVlXqb
TBAkihDbBVqkJ+/I13vbFi70gJwcZMm8D5MZ13bBR1QhriJTT2ZJhtSkOwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFD8JK6d4QKKHa16HtPwOwSOTyDYEMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvUHdrcnAzaEFvb2RyWG9lMF9BN0JJNVBJTmdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIjADBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAHvaozIl
pfE5sdznZ6hKssLPwiH48TryH/HKQJ6mxmqnzQKy5anpjtpVDPqWEkBsrP2Iwpnx
Nb1f3j8/VilfdM0AL942eIwivouTMEZZzoszsGWxhZBysYc6LFTZIRmJUo5pf7By
HhNr8AyxOPA0f2dOyTV5oEnDDe06B9F6NjKjOqc+yAYoA2nai0HuCinJr0rUC51f
ras+ZgLAXwpxVYzSvL7h8jHI5F0VY800bJfj1U46WmZoC5O0e5ipC85Y4STYBdyb
U3PpKrOQRNdievl/7CGaZtIebPkGLdXQLEG5KGQ4WFOFniK/jE9cxmYRcJbopKNb
+jr8BTUS+kr2r5E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org