Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QKfmCbWNfvKXI_pVpgTcROI_Stc.roa
File: QKfmCbWNfvKXI_pVpgTcROI_Stc.roa (raw, json)
Hash identifier: +Ych3/1BkLaRb7FjWHHDMRKe1zHlReqESTN4Y7h7rOk=
Subject key identifier: 40:A7:E6:09:B5:8D:7E:F2:97:23:FA:55:A6:04:DC:44:E2:3F:4A:D7
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01921BB1C90E599805B568F72609D3F0DD12
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QKfmCbWNfvKXI_pVpgTcROI_Stc.roa
Signing time: Sun 22 Sep 2024 21:44:49 +0000
ROA not before: Sun 22 Sep 2024 21:44:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.39.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 07:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1b:b1:c9:0e:59:98:05:b5:68:f7:26:09:d3:f0:dd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 22 21:44:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40a7e609b58d7ef29723fa55a604dc44e23f4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:37:cf:bc:c8:cc:c7:29:ca:d3:cb:b0:ce:
40:96:7c:e8:8c:6e:f5:69:62:57:32:19:b0:da:f4:
ba:ff:18:22:8e:2d:80:79:0d:00:a0:86:1a:05:2d:
26:a7:30:78:f6:e5:06:fd:45:97:44:da:72:2a:c4:
36:69:5f:68:1f:16:c4:28:41:a6:1e:7b:44:6a:83:
5a:da:04:73:ed:a1:04:c2:71:04:a4:51:ea:f1:d5:
73:eb:c4:8c:15:10:f3:71:d6:1e:60:ac:ca:58:5b:
36:6c:70:a7:24:75:66:21:a4:07:b6:55:47:61:2d:
c1:62:f3:96:29:ab:6d:72:e5:94:35:f2:71:32:2a:
81:37:c3:e0:08:d9:24:10:36:8c:b4:22:ac:64:b8:
28:90:47:d8:23:47:a2:8c:9f:54:07:8d:f7:86:7d:
11:7a:40:e5:b0:4f:a3:5d:76:10:0a:77:9b:b1:8c:
7d:ae:cf:27:87:53:89:75:36:fd:b6:12:d2:d7:92:
b7:18:71:c4:ff:46:de:0d:21:ec:24:19:92:f3:d5:
fd:1b:c3:46:a9:b6:be:32:18:da:e7:4c:05:c0:0c:
12:64:f3:0c:72:82:2d:c7:cf:65:c6:01:7c:9a:ac:
60:c7:70:d9:a3:83:ee:2a:3b:a2:94:27:68:18:4b:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A7:E6:09:B5:8D:7E:F2:97:23:FA:55:A6:04:DC:44:E2:3F:4A:D7
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QKfmCbWNfvKXI_pVpgTcROI_Stc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.39.0-46.34.40.255
46.34.58.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
19:46:c3:32:cf:7e:17:ed:39:93:65:22:38:e9:4c:5f:0e:82:
81:46:06:01:bf:ea:a5:cc:43:52:ec:33:97:19:aa:63:8d:7e:
44:34:99:f3:5f:e9:23:34:34:81:fc:2b:04:44:54:57:58:bf:
c1:24:d4:0a:d0:29:08:f3:31:42:e5:2e:62:63:08:d9:d5:1a:
42:16:14:e6:71:df:41:12:dd:9e:c0:9c:73:7e:a1:a5:aa:8f:
08:50:9b:42:7d:6f:ff:b8:95:6b:50:8d:90:39:47:8f:61:15:
f3:a3:f3:ae:4d:91:de:05:e6:3b:b8:62:0f:03:74:a4:f1:22:
36:d4:2d:d1:78:93:ca:8a:b9:dd:59:ab:ae:d9:8b:e1:97:dd:
98:0a:ec:3b:2b:4a:64:d6:81:56:38:87:b3:09:fd:d8:b6:f9:
55:a2:70:3b:c5:ce:24:90:09:64:ea:03:0a:35:75:79:ad:74:
3d:00:6b:47:40:57:29:96:77:ca:16:3d:0a:f1:dd:c6:95:ee:
8b:29:4d:a8:a3:c3:5a:4f:77:f2:34:f7:ab:bb:98:88:35:89:
bb:18:0b:03:fb:f2:8a:6c:a4:4a:91:e9:5c:ae:1b:8e:eb:da:
bd:99:c0:90:76:39:a2:e2:ee:eb:06:4d:53:2e:cf:ad:ab:dc:
7b:a6:e0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 09:20:30 2024 by rpki-client on console-fra.rpki-client.org