Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/V-jw6eS-dQwBcRHEAsFBHOZixf0.roa
File: V-jw6eS-dQwBcRHEAsFBHOZixf0.roa (raw, json)
Hash identifier: d55XiQtkZ623wKqCydPtZCnWCOgptQ5xy0MkefTCU6w=
Subject key identifier: 57:E8:F0:E9:E4:BE:75:0C:01:71:11:C4:02:C1:41:1C:E6:62:C5:FD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF1177C726C836FCFC7F0BDA9337A
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/V-jw6eS-dQwBcRHEAsFBHOZixf0.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 46.34.39.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 10:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f1:17:7c:72:6c:83:6f:cf:c7:f0:bd:a9:33:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57e8f0e9e4be750c017111c402c1411ce662c5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:d7:82:9b:4a:d3:28:80:ec:19:9a:a4:6c:
ee:cb:46:de:0c:ad:44:2b:01:03:6e:2a:71:3f:1c:
ff:ab:a0:7a:51:33:42:83:3d:3e:7b:35:44:cf:92:
65:28:36:7e:39:fa:17:d9:e0:24:51:ae:ce:cd:3b:
ac:cd:a4:6a:9d:d4:77:22:53:69:8d:b5:25:8a:48:
f0:8f:15:49:8f:a6:3d:3e:dd:22:e8:63:c0:59:30:
0c:67:37:b7:68:03:0b:1f:28:92:cf:4e:30:85:cc:
0a:5c:b9:a7:da:bc:f4:68:a2:31:f4:8e:d9:fc:21:
c3:1b:63:af:12:7b:7d:fa:62:c9:c4:c6:04:5a:f4:
12:67:d2:8b:7a:fa:b3:0d:81:eb:96:f5:12:06:ca:
a5:11:6f:30:c4:78:ea:1b:0d:6b:fc:3f:86:50:37:
ae:e2:68:64:82:d6:4d:49:b8:d6:d7:a3:0d:b4:3c:
78:54:d8:52:52:fb:80:3e:11:e9:60:d6:02:af:13:
20:d7:34:cf:60:b3:74:15:51:f0:f2:c2:70:0d:5a:
2b:62:ef:30:09:0b:7f:e8:d3:16:c3:cd:8e:01:c2:
c6:86:1e:63:d7:ab:88:e0:ca:41:59:ad:12:27:8e:
c3:3e:a9:27:c8:d3:61:b5:dd:76:18:74:ab:c3:ff:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E8:F0:E9:E4:BE:75:0C:01:71:11:C4:02:C1:41:1C:E6:62:C5:FD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/V-jw6eS-dQwBcRHEAsFBHOZixf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
46.34.58.0/24
Signature Algorithm: sha256WithRSAEncryption
31:81:be:f4:92:42:99:61:c7:41:31:3c:2d:44:48:1c:35:14:
c5:5f:65:37:c8:6b:0e:80:e8:93:60:00:b3:a0:ba:64:3c:47:
c0:c1:c4:79:ef:ad:68:e5:b9:7c:27:8a:be:cc:ba:84:ae:b1:
6d:a5:0a:30:d8:30:2b:38:2e:2a:15:76:5b:29:92:c0:45:8b:
e4:dd:18:34:9f:db:4f:f2:eb:e7:2b:7a:5e:cd:2e:c8:cf:72:
63:55:1a:73:ee:15:e1:06:ab:03:27:70:c7:72:22:9a:0c:4d:
5d:62:2b:83:5a:6a:1c:40:cb:d6:16:60:4e:a7:40:62:2b:0d:
7c:54:d8:65:b5:bc:8d:7a:ce:12:4b:44:6e:97:61:c6:49:19:
05:78:12:f2:86:bb:0a:02:20:97:e8:9d:8d:25:62:78:e9:64:
b9:c0:d1:9c:66:25:05:21:c6:77:e7:2b:e5:f2:c6:bf:02:16:
a3:8a:bf:e3:5c:d1:75:5b:da:25:d2:45:cd:0d:7d:2e:67:79:
82:a9:a9:23:00:ba:00:7d:73:1c:8b:4c:2d:0b:54:ec:ca:40:
78:a3:82:28:21:fe:a2:23:96:e4:1d:b2:09:02:90:48:b2:2d:
a6:60:29:65:d1:1f:2d:75:e9:1d:0b:1d:f2:7a:52:e0:d4:3c:
1d:0f:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org