Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SvUIjqcB2Z1vpy5_YnLV8hvPXg0.roa
File: SvUIjqcB2Z1vpy5_YnLV8hvPXg0.roa (raw, json)
Hash identifier: kwsxgIF7ZTaOZCqWDDEwMjMwZaQGU+C7VoqrBL0i/TQ=
Subject key identifier: 4A:F5:08:8E:A7:01:D9:9D:6F:A7:2E:7F:62:72:D5:F2:1B:CF:5E:0D
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01888F6AAA789A3C2C38386389DA49D56CE1
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SvUIjqcB2Z1vpy5_YnLV8hvPXg0.roa
Signing time: Tue 06 Jun 2023 06:35:12 +0000
ROA not before: Tue 06 Jun 2023 06:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 16:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:6a:aa:78:9a:3c:2c:38:38:63:89:da:49:d5:6c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 6 06:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4af5088ea701d99d6fa72e7f6272d5f21bcf5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:91:42:83:42:e7:ea:31:89:af:d9:5e:5f:
51:4f:85:62:bc:7f:75:82:f8:61:13:88:e8:6f:ac:
a0:5d:93:ec:05:f9:03:41:c8:be:1a:66:3d:25:64:
57:75:4f:79:de:20:1e:99:7b:5d:da:ad:b3:a2:8e:
5f:12:3a:46:07:92:2c:16:8c:2c:86:aa:f9:40:dd:
63:97:ed:e1:55:b9:38:30:51:22:35:bf:de:e0:21:
2a:cf:b1:9b:33:67:0a:4f:5e:2c:05:b1:e7:3a:6c:
07:2b:3e:08:4d:47:2f:61:0d:e2:58:b3:ad:dd:b2:
52:a3:f7:f5:a2:46:fb:a4:ed:e1:09:de:7b:98:5e:
a6:87:3c:54:39:07:8f:49:81:99:c0:d2:5d:b9:75:
c5:23:65:4a:7c:de:03:79:44:29:4d:ec:e8:1d:93:
60:ad:43:59:c9:52:19:4c:01:6f:20:11:ae:89:be:
83:1c:cb:51:47:90:32:27:9e:92:9c:f9:b2:56:0b:
43:10:7e:a7:fe:27:0f:67:61:84:19:43:6c:b5:12:
d7:6c:43:af:f2:1c:a2:c4:bf:53:de:ea:42:8c:2d:
50:04:8b:d0:08:64:93:ba:ce:c0:49:cc:a9:73:78:
40:d5:4f:50:ba:2a:f5:d6:30:bc:e3:b0:22:7f:c4:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F5:08:8E:A7:01:D9:9D:6F:A7:2E:7F:62:72:D5:F2:1B:CF:5E:0D
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/SvUIjqcB2Z1vpy5_YnLV8hvPXg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e8:54:de:ab:50:22:f5:09:38:42:9d:c6:88:0f:f4:4d:bd:
d5:3e:59:0d:8c:fd:9b:98:d6:74:6c:69:be:03:42:7e:8a:8d:
65:1e:e9:bf:70:1c:d5:db:af:09:31:24:14:c6:19:a5:34:e5:
82:bb:24:e8:86:4e:70:69:0f:00:8b:29:2b:d1:53:22:e5:a5:
cd:46:04:09:9a:2c:7a:50:da:05:0f:80:30:f4:5a:de:5d:35:
21:4c:ff:ed:50:e5:69:d6:a9:de:4a:8d:89:c9:0a:41:ca:1b:
13:6e:00:30:c5:f3:53:62:d0:fe:98:8f:a8:6c:69:ad:dc:57:
42:b4:54:6b:59:20:ae:90:8b:0a:70:fc:32:54:c8:2f:23:3c:
fb:86:c5:5e:72:47:50:be:7f:45:4e:49:5a:27:ee:0e:f5:51:
76:9a:12:04:00:32:fd:e1:3e:2a:31:d6:5d:7e:38:5d:55:72:
17:08:f9:5a:f4:9a:b9:f9:93:f9:d8:7f:7b:44:15:58:84:2f:
9d:4a:2e:a9:96:64:45:0a:23:38:82:d6:a1:28:e8:33:49:1c:
cd:77:1d:24:4e:4d:7c:fa:1f:d0:75:3a:8a:61:ce:24:a9:2f:
b0:f9:65:47:db:2a:0c:a2:50:ee:77:a4:2b:cf:dd:d8:53:6a:
be:8e:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org