Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UiAde8MUebVpi7Dmhp_1EdTYuO0.roa
File: UiAde8MUebVpi7Dmhp_1EdTYuO0.roa (raw, json)
Hash identifier: JOBjYRmxioXpQjTiIb4yPaAaKOMGcRod6AYlXUkAuKk=
Subject key identifier: 52:20:1D:7B:C3:14:79:B5:69:8B:B0:E6:86:9F:F5:11:D4:D8:B8:ED
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01865AA2186746B263687FC684226F9DB8DB
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UiAde8MUebVpi7Dmhp_1EdTYuO0.roa
Signing time: Thu 16 Feb 2023 14:30:17 +0000
ROA not before: Thu 16 Feb 2023 14:30:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 09:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:a2:18:67:46:b2:63:68:7f:c6:84:22:6f:9d:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 16 14:30:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52201d7bc31479b5698bb0e6869ff511d4d8b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:98:5f:6d:27:b9:e3:10:16:55:88:f5:df:83:
55:55:c1:c8:4e:3d:dc:90:48:a3:74:01:15:7b:6b:
c7:53:fc:ea:be:74:a2:40:4d:cf:ef:32:8c:af:ac:
b1:3f:15:1c:ba:5c:fd:c0:88:fc:3a:64:6a:35:ed:
94:ff:67:b9:1e:1c:69:bc:a4:53:69:11:48:bc:56:
be:5a:16:67:96:83:4b:c5:2d:c5:e7:c3:da:60:50:
9c:05:75:8e:80:95:50:28:f2:98:45:ef:77:68:6c:
b3:11:43:d8:b1:90:86:02:34:14:2a:8e:36:f4:21:
aa:32:a7:64:5f:3b:17:c1:60:c4:b9:56:64:c2:b1:
cb:cd:fc:e0:b8:09:94:be:36:8e:70:4e:2d:d5:6f:
6d:f0:dc:15:67:87:fa:99:93:95:4f:9c:ef:ee:c5:
65:6e:0b:c1:cc:bd:76:02:70:38:bb:f9:7e:09:87:
91:b9:8e:8e:44:89:e9:33:13:d5:7d:62:88:8b:a0:
94:36:e7:1e:65:68:89:e6:62:96:f1:9e:43:05:94:
b2:97:8e:ca:f5:87:d1:a7:32:b7:c3:d1:59:06:94:
f6:65:76:5f:33:c7:bb:ca:e6:ad:f8:b8:04:34:b4:
d4:59:f0:5f:a4:7e:7d:69:60:d8:f6:de:63:58:16:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:20:1D:7B:C3:14:79:B5:69:8B:B0:E6:86:9F:F5:11:D4:D8:B8:ED
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UiAde8MUebVpi7Dmhp_1EdTYuO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0e:c6:15:62:a8:ed:18:7c:f5:e9:ca:44:c8:25:68:2e:17:
56:37:35:57:6a:28:66:61:1c:b4:80:f1:43:9c:28:90:ff:24:
25:e8:f6:a1:cc:27:5b:d6:2a:4c:3e:0d:cc:50:02:63:66:27:
3c:26:52:33:86:90:33:bb:7a:35:6e:58:63:39:2f:4b:98:fb:
95:4b:dc:99:e7:65:20:16:be:52:c2:46:88:48:14:d5:53:13:
42:37:c3:1f:e4:9c:d2:db:77:ac:30:d4:62:40:36:ed:b5:5d:
06:70:4a:e2:c1:6a:12:ac:32:85:a6:0d:b5:e5:49:5f:54:01:
dd:8c:bf:15:85:42:4d:ac:85:82:58:f1:64:cb:2e:bf:ad:27:
4f:9e:3e:db:b4:03:8a:b7:cf:d3:a9:3e:39:61:28:30:7c:a6:
10:dd:68:2f:46:63:37:e0:a9:e4:32:30:bb:c4:1c:8d:60:db:
4f:8c:e9:e5:a5:65:73:76:57:8d:6d:11:19:1b:84:9b:11:c1:
6b:5d:ed:a8:89:e5:db:7c:80:39:20:c8:4b:ad:64:47:39:04:
0e:65:cd:e8:86:92:2c:de:2a:d3:3e:04:44:7d:ba:0f:37:9b:
e0:31:ce:e2:95:a5:3a:b0:c0:d6:dc:e8:27:7b:b0:04:4a:94:
ad:97:06:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org