Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WB464UvPi0FNme7Z6F0JL00xhv0.roa
File: WB464UvPi0FNme7Z6F0JL00xhv0.roa (raw, json)
Hash identifier: 9vPFs6QxNTXWiOTvIkh6z/7ijtFub6uSuZbCYZ53XmM=
Subject key identifier: 58:1E:3A:E1:4B:CF:8B:41:4D:99:EE:D9:E8:5D:09:2F:4D:31:86:FD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018ABA3DCD5D9A137084D31BB23BF8E5A218
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WB464UvPi0FNme7Z6F0JL00xhv0.roa
Signing time: Fri 22 Sep 2023 00:15:27 +0000
ROA not before: Fri 22 Sep 2023 00:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.63.0/24 maxlen: 24
46.34.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 12:59:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ba:3d:cd:5d:9a:13:70:84:d3:1b:b2:3b:f8:e5:a2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 22 00:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=581e3ae14bcf8b414d99eed9e85d092f4d3186fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:9d:f9:cf:6f:9b:34:6b:98:3d:fd:83:e4:
c7:70:4e:91:7f:d1:74:d8:21:37:ee:08:85:56:35:
58:b1:ab:d7:7e:a8:b0:0c:37:48:45:89:6a:71:88:
69:30:55:f9:e0:4b:3a:fc:21:6d:28:da:80:1c:ca:
be:3c:52:42:4b:f6:d1:bd:8d:4e:8b:b6:df:11:5a:
6f:db:d5:e8:96:a0:da:44:49:70:47:1a:4c:05:9c:
f8:f3:7f:ae:69:cc:13:69:12:81:99:ed:97:be:36:
5d:1b:07:8e:75:90:cf:3b:cf:e3:40:ca:6b:74:c3:
4f:ac:5c:9f:0d:91:15:9d:f6:98:43:23:2a:34:16:
15:44:51:d2:de:d2:41:5d:4b:37:8a:2c:b5:7d:bc:
59:f4:57:38:4b:6e:d0:95:0f:9a:29:13:53:26:f4:
fd:92:f9:cc:98:db:ae:ca:17:b1:36:ae:19:50:7d:
20:07:c6:f2:66:8c:26:d9:59:c2:5d:f4:cc:30:a1:
9a:74:2f:da:2d:ea:78:d5:43:39:9c:12:90:8c:54:
72:4c:48:4c:5a:e3:63:2a:83:61:de:39:fa:83:85:
5f:8a:46:c1:1d:99:29:9b:9c:be:a7:34:ef:3f:aa:
09:71:bb:2d:8e:f6:0a:4f:2e:9e:de:6f:1e:18:86:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:3A:E1:4B:CF:8B:41:4D:99:EE:D9:E8:5D:09:2F:4D:31:86:FD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WB464UvPi0FNme7Z6F0JL00xhv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.58.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:02:ba:b8:75:62:46:56:94:4b:15:06:5e:30:fa:4d:99:cf:
33:0d:3b:00:8a:86:20:ba:a0:93:ee:c3:a0:63:24:ac:3b:1a:
86:59:f9:2a:68:5f:c9:95:ea:e7:1e:6d:b3:59:02:d4:c1:e0:
2a:f7:fc:8c:e7:5a:a1:cc:86:c9:89:2c:65:bc:3f:49:4d:01:
37:28:57:86:cf:e9:06:c5:26:ac:9a:d0:8f:11:55:a7:e2:f3:
13:4f:a7:8c:ce:1b:c5:ef:08:80:dc:f6:29:c3:c8:0c:d5:6d:
5a:4f:56:e4:54:b7:2d:d7:af:4f:b9:07:83:d4:ae:4b:e1:6b:
9e:49:d2:b9:c5:45:9e:a6:4a:dd:33:95:4c:37:36:ae:c6:81:
fe:99:2e:ee:02:ab:42:c0:79:56:66:1e:53:75:be:70:ba:f5:
f5:19:21:95:5d:fb:ce:6a:e1:be:4d:0c:74:e0:39:9c:1f:37:
b5:17:be:59:f1:3e:d2:9d:a4:9a:bf:16:18:ea:71:81:34:48:
08:58:f2:5d:d0:bf:a7:cc:e5:f2:55:48:3f:55:74:22:d2:85:
d1:04:87:40:9e:cf:6e:1a:aa:72:c9:15:d4:c2:cf:55:db:08:
3a:f9:c6:36:9c:86:7b:fe:56:c2:69:1d:51:b7:77:02:bb:44:
82:ac:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org