Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VhraexY2NxtUNBo0pP0ydGhNOnY.roa
File: VhraexY2NxtUNBo0pP0ydGhNOnY.roa (raw, json)
Hash identifier: XNVvdkbx1+d1RMr4qBsIQ9wku5j6lu6SpaM9J+WJdnU=
Subject key identifier: 56:1A:DA:7B:16:36:37:1B:54:34:1A:34:A4:FD:32:74:68:4D:3A:76
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188D98E5749AC37EB23259A800C743AC02D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VhraexY2NxtUNBo0pP0ydGhNOnY.roa
Signing time: Tue 20 Jun 2023 16:06:04 +0000
ROA not before: Tue 20 Jun 2023 16:06:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Jun 2023 09:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:8e:57:49:ac:37:eb:23:25:9a:80:0c:74:3a:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 20 16:06:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=561ada7b1636371b54341a34a4fd3274684d3a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:c2:18:b0:1a:35:a4:a2:0f:28:eb:88:4a:
d1:ea:27:37:0e:b5:4b:32:4e:d0:44:69:af:31:e9:
1c:4b:57:4b:49:b5:2b:25:55:3c:fd:c4:97:2a:7a:
b9:e2:9f:6a:7f:ea:c8:e5:98:5c:01:10:e2:d9:57:
21:bc:c3:10:84:b5:a9:09:5f:04:bb:b3:1e:42:b5:
0e:4c:2c:b9:39:ce:fe:82:f9:28:29:dd:39:3c:52:
9f:af:b6:ea:0a:ca:70:5f:b4:0e:fb:91:88:4e:bf:
fc:3c:d8:c4:da:19:6c:6f:63:64:1e:77:86:4a:01:
02:e0:dd:44:ae:3f:60:12:d3:d2:1b:bf:25:83:42:
6f:ce:2a:3e:92:d8:32:95:83:24:c3:da:d7:66:a6:
2c:e7:20:c5:29:21:eb:6c:cb:c8:ba:99:93:2e:8e:
34:6c:04:cc:11:fc:17:a2:85:55:5c:0c:9a:8e:f2:
da:42:8e:fe:6d:08:3a:75:2b:df:e0:b4:b1:3a:3f:
cd:4f:de:23:e6:33:82:0c:ef:5d:d3:1a:77:b4:63:
af:78:49:a8:bf:61:15:93:b7:82:20:29:43:0d:72:
17:35:d8:7c:cf:4a:f8:67:11:12:ca:8c:04:71:70:
8d:ed:b8:8a:49:ad:0c:51:ab:4e:f5:dc:7d:ea:a9:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:DA:7B:16:36:37:1B:54:34:1A:34:A4:FD:32:74:68:4D:3A:76
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VhraexY2NxtUNBo0pP0ydGhNOnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.49.0/24
46.34.54.0/23
46.34.58.0/23
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:00:b9:5a:ca:1d:32:99:7b:89:07:be:a3:19:87:88:ce:c7:
61:8d:8a:d2:e8:59:26:09:c0:2c:44:58:aa:53:e7:3f:e1:b0:
0a:db:dc:6b:fa:08:75:8a:97:81:3e:ea:51:fd:c1:0a:88:16:
59:fe:c2:b5:c8:b8:9b:59:61:52:67:62:19:0d:16:78:b9:44:
57:2c:68:84:b5:29:62:58:e1:5b:95:ce:d4:65:4f:7f:4a:29:
be:b0:90:cb:8e:21:20:c6:ed:cb:fa:05:7a:50:2d:38:23:d8:
56:ce:59:d6:cc:a0:a8:de:12:2f:6c:1a:3d:5c:c8:eb:fe:ac:
e0:f4:cc:f6:32:49:7e:8b:72:b5:5b:a5:54:6b:88:4a:c4:aa:
be:38:df:0b:7a:f3:7d:b8:f3:b0:2a:a7:41:6f:a4:0f:4a:bc:
72:27:d3:da:30:fe:48:51:e8:40:c7:23:8e:0c:da:9d:28:ec:
c7:c7:5f:73:38:ab:d9:6b:62:a6:1b:3e:99:3e:d6:51:c1:45:
eb:0d:fb:b0:eb:6a:62:4e:01:2e:b4:18:85:f8:01:84:42:4c:
07:89:d0:17:2f:ba:28:6a:14:01:3f:86:90:3f:5f:58:d4:de:
cb:c0:02:85:d4:47:6e:cb:4a:fa:2c:0f:63:dd:32:39:f0:39:
2c:2a:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org