Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SQPgEeKOARKoBibBbOHhWxu-jwQ.roa
File: SQPgEeKOARKoBibBbOHhWxu-jwQ.roa (raw, json)
Hash identifier: qTVH4IKRCfNUHEpe4EMH+C7n9fMJfqYapdG0EC+1y9Q=
Subject key identifier: 49:03:E0:11:E2:8E:01:12:A8:06:26:C1:6C:E1:E1:5B:1B:BE:8F:04
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018F1561AAA1596693675EC6E552F613DD19
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SQPgEeKOARKoBibBbOHhWxu-jwQ.roa
Signing time: Thu 25 Apr 2024 13:11:13 +0000
ROA not before: Thu 25 Apr 2024 13:11:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.47.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 06:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:61:aa:a1:59:66:93:67:5e:c6:e5:52:f6:13:dd:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 25 13:11:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4903e011e28e0112a80626c16ce1e15b1bbe8f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:41:3a:1b:c3:e9:e9:86:57:e3:4e:89:ac:
c8:66:7f:3b:f7:79:a5:07:2e:02:19:f9:be:c4:ba:
e5:46:25:9b:ad:48:2a:95:20:ad:97:c0:4e:33:c5:
6a:e4:ab:c7:d9:bf:1a:ac:d8:5c:c2:98:60:f0:a8:
a4:96:37:c1:38:47:d5:e8:ce:78:d3:32:33:6f:64:
3d:30:2e:e1:96:a7:ff:ff:55:0e:64:cd:37:bc:11:
c2:61:b5:e1:ad:b6:15:6f:e3:eb:42:b3:61:93:cd:
d5:ab:6b:6f:92:4b:91:29:8b:50:1e:25:4c:61:a6:
ad:cd:ea:14:77:ff:cc:75:07:e6:73:4a:fe:21:0c:
7e:ba:e8:78:b9:ab:e9:d7:58:57:67:7e:cd:51:56:
c6:2c:e5:22:5d:1a:15:c5:b9:61:16:f0:38:dc:5e:
0b:be:24:59:e3:90:4e:df:d3:30:77:d5:08:f5:14:
2c:bf:c5:bc:0e:8b:df:e9:2a:f9:3f:61:e9:ec:2c:
9d:3f:3f:72:07:87:3f:02:bb:ae:18:53:ab:92:52:
cd:6c:1c:a4:01:81:75:6b:c8:f1:84:ba:08:6a:e3:
73:ea:a7:fb:92:74:4a:a9:19:f6:3f:c9:35:53:98:
dc:e4:05:46:13:2c:53:7f:8b:25:20:cd:76:59:ad:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:03:E0:11:E2:8E:01:12:A8:06:26:C1:6C:E1:E1:5B:1B:BE:8F:04
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SQPgEeKOARKoBibBbOHhWxu-jwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.47.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
13:81:5b:d3:fa:e2:56:d8:9f:fa:34:94:b5:79:5e:2d:25:eb:
33:79:de:2b:3f:f6:2c:10:39:28:fe:b3:2d:d7:49:74:74:9f:
cd:96:51:c1:05:08:86:30:60:6b:91:4c:2c:ca:6a:a3:61:1c:
5e:bb:a1:fc:ca:e3:53:62:e6:83:e5:a1:bd:b1:b7:dd:62:51:
7b:f2:26:c4:84:01:2f:ad:24:e1:ab:e7:ed:4f:ab:fa:08:e1:
7c:df:ab:a8:b5:ac:56:07:85:4b:d6:5c:ba:dd:64:53:98:6e:
96:53:b1:89:c9:a1:98:fc:88:ed:a6:97:6c:c9:b2:97:47:f4:
f1:36:48:78:fb:4b:e3:51:1c:5d:50:7d:1d:be:a6:20:17:9b:
73:a7:e8:a0:a3:73:8d:6d:e9:db:90:8f:89:45:d2:00:be:be:
0f:ab:a6:5f:20:c3:7b:33:b4:61:e3:38:9e:fa:f0:84:9d:54:
6a:e1:67:fb:e5:0f:bd:2f:4d:10:1e:0c:25:d8:b6:65:34:1a:
a3:38:b1:b8:c5:36:94:d8:e7:de:42:73:72:94:91:26:f1:71:
ee:25:a8:1e:09:9f:a3:13:c6:b3:38:30:a9:72:17:91:8f:e9:
85:f4:63:3c:dc:14:98:31:d7:77:10:39:5c:4a:92:e2:c5:61:
24:67:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org