Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SP262984woTzOVLGvWmJv5DXDGI.roa
File: SP262984woTzOVLGvWmJv5DXDGI.roa (raw, json)
Hash identifier: HkxDgLE3QOHUpxpDHMxUjF71ilwylDrdV+AvIe4hUjE=
Subject key identifier: 48:FD:BA:DB:DF:38:C2:84:F3:39:52:C6:BD:69:89:BF:90:D7:0C:62
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018F09D4722FB6D0397649902726EDAB3A24
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SP262984woTzOVLGvWmJv5DXDGI.roa
Signing time: Tue 23 Apr 2024 07:21:08 +0000
ROA not before: Tue 23 Apr 2024 07:21:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215620
IP address blocks: 46.34.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 16:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:d4:72:2f:b6:d0:39:76:49:90:27:26:ed:ab:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 23 07:21:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48fdbadbdf38c284f33952c6bd6989bf90d70c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:30:50:2e:d9:6a:05:56:fc:3e:56:fe:89:
77:f5:56:ed:a6:a6:b9:e6:4c:6a:0a:f5:cb:ae:ee:
f0:7b:ed:c7:ff:36:91:9f:33:c1:37:e7:1d:7f:3e:
62:11:1b:fe:09:2e:8f:45:98:fc:24:17:cb:f3:12:
2b:f3:b6:15:ad:68:d7:bf:af:c0:36:68:48:18:57:
0b:2c:f3:6a:22:fa:62:ae:70:21:18:6c:00:d4:44:
25:4b:bb:03:0a:1d:3f:3f:9d:d0:ed:d7:9f:64:31:
a2:4e:be:10:3e:32:68:03:ff:c9:5c:8c:04:eb:ed:
3e:0c:1b:3d:b0:cd:ea:45:78:c7:71:5d:85:2a:ed:
e7:57:f8:ed:2d:5f:b8:02:92:ec:61:2f:5e:62:d9:
2f:aa:bf:4b:c2:46:8d:8b:7a:df:7f:84:25:45:55:
99:32:0b:0d:32:6f:df:e0:09:17:35:d4:74:5c:c7:
65:73:18:43:34:f4:1b:e6:b6:7a:72:59:0b:1a:55:
73:7d:52:d7:f7:45:a2:0b:be:68:24:bf:c2:6d:e0:
46:f3:9c:c7:d7:82:24:0b:b2:8c:e7:9c:06:61:91:
68:2a:09:09:f4:a5:99:cb:f6:f7:c6:59:ed:b4:be:
03:b9:d8:3f:ee:11:a0:d2:0b:04:dc:1b:83:87:6d:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:BA:DB:DF:38:C2:84:F3:39:52:C6:BD:69:89:BF:90:D7:0C:62
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SP262984woTzOVLGvWmJv5DXDGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
63:62:50:60:20:78:0f:7a:b4:10:54:a9:0a:0e:3f:da:78:b1:
65:c9:7f:25:f7:09:6e:6d:5e:06:fd:dd:c4:35:d8:0b:89:55:
d8:30:ee:75:04:f7:8d:fb:92:50:b3:a0:f8:1d:a6:13:ed:02:
95:cc:89:77:43:58:1e:f5:62:1a:16:d5:af:e2:a6:36:eb:55:
52:94:1f:a5:2f:a8:0d:2d:98:77:8b:f3:46:3b:89:83:75:62:
b6:00:20:d4:d2:dc:c5:b0:27:8b:1a:53:4f:dc:c5:db:0f:6f:
8d:0f:eb:70:45:1a:11:e5:e1:04:2e:fb:5f:3f:3a:a5:21:e9:
9a:a4:d7:9f:05:8a:55:dd:d5:9a:8f:37:34:45:5f:1a:9d:44:
4b:c9:6a:00:df:2e:d1:0d:a6:9f:ec:ad:4a:01:9c:61:1c:5f:
7d:03:66:af:57:7e:2b:f8:0c:96:cf:fe:8f:86:73:37:a3:e9:
da:70:39:2f:b1:cc:fe:c9:af:b0:2c:f1:fd:d1:4a:f2:b0:d4:
01:69:2d:29:a4:d0:a2:cd:10:a5:8f:46:30:1f:85:32:3e:33:
77:4c:2f:7e:71:63:d0:fd:dc:79:48:7f:66:76:59:9f:5b:ef:
93:b6:69:a7:2d:5c:a7:0f:d1:1a:1b:27:42:6d:f3:1e:a7:e4:
c6:c8:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 20:13:53 2024 by rpki-client on console-fra.rpki-client.org