Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WbuJbwxF2Xg7BjZOTMVEdmnQrpA.roa
File: WbuJbwxF2Xg7BjZOTMVEdmnQrpA.roa (raw, json)
Hash identifier: 3G2WQy0oNx12Ac4Roh6SiSydQktVpB2CyrhZSrQ6bO8=
Subject key identifier: 59:BB:89:6F:0C:45:D9:78:3B:06:36:4E:4C:C5:44:76:69:D0:AE:90
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018C394B71D0800D7FB3509229F4DB68FE6F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WbuJbwxF2Xg7BjZOTMVEdmnQrpA.roa
Signing time: Tue 05 Dec 2023 09:24:54 +0000
ROA not before: Tue 05 Dec 2023 09:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 10:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:4b:71:d0:80:0d:7f:b3:50:92:29:f4:db:68:fe:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Dec 5 09:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59bb896f0c45d9783b06364e4cc5447669d0ae90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f0:cb:ae:c5:81:d3:c2:84:ce:de:57:ef:32:
0b:28:85:63:d8:87:46:95:5a:9d:44:e6:5e:f1:6e:
54:53:d4:25:bc:ed:9b:7b:f7:67:20:38:4a:eb:f8:
60:e6:8e:2f:d2:70:9b:8c:be:4b:0b:f3:44:ce:86:
86:71:0c:58:fb:e4:df:7c:24:cf:f9:12:66:3e:bf:
83:98:0b:da:3d:50:12:3a:15:ea:ff:5e:25:6c:5d:
2e:82:c1:b3:d3:1e:70:83:9b:3d:09:52:62:ed:3a:
08:89:81:8e:7b:31:0e:24:c9:74:ce:48:b1:b1:5a:
49:fc:60:42:83:a9:3d:f1:5c:30:88:d2:7c:04:c1:
ea:d6:7d:6b:89:a2:79:f8:3e:65:cb:72:5d:bd:96:
13:1c:ba:39:0d:4e:90:ba:08:44:0a:59:02:84:c4:
b6:c2:fa:67:80:d3:8b:a0:7b:11:80:ab:65:33:f2:
95:73:42:45:4f:32:c8:a1:58:e3:95:2c:78:e1:4b:
dd:09:3d:3c:f7:e1:5b:5e:0c:9c:23:0d:86:4c:d2:
60:4d:ef:59:a1:69:d8:9b:39:2b:a1:4e:23:18:e7:
14:99:30:94:4e:74:e7:bc:1d:24:6f:46:62:4a:b0:
e7:01:80:07:c7:0d:46:5c:bb:39:7b:31:dd:57:12:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:89:6F:0C:45:D9:78:3B:06:36:4E:4C:C5:44:76:69:D0:AE:90
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/WbuJbwxF2Xg7BjZOTMVEdmnQrpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
65:8d:f8:01:cb:80:cd:75:4b:94:93:aa:f5:92:43:7c:27:79:
33:63:84:f3:c7:76:ab:68:be:9e:56:34:40:6a:cf:38:22:35:
4c:de:4c:f1:81:bc:87:9e:97:f0:15:b9:df:b8:80:54:bc:b3:
1f:2a:2e:a0:52:25:7d:62:28:78:d6:de:1b:43:42:8e:5a:4d:
14:46:9f:02:87:8c:44:bb:1f:0e:37:ea:2c:82:eb:19:49:87:
cb:2e:06:8c:92:75:fd:e8:47:f9:af:26:8b:b8:cf:de:4e:60:
9c:d2:8f:99:7c:cc:9c:20:67:fc:86:81:2d:ec:da:d8:f1:cb:
f2:bd:87:bc:e0:8a:7e:cd:f4:e2:99:bc:ec:c2:f7:66:54:1a:
fb:fd:c8:36:c8:e0:f2:77:a6:c8:2e:86:74:a9:90:b5:51:72:
d7:fe:fe:25:18:7d:64:b8:49:42:be:04:30:2a:b1:3d:0b:8e:
c6:bb:b5:b6:82:13:04:22:2d:9d:ac:d9:9c:fd:5b:c2:4c:fe:
5a:d6:50:62:ee:5a:1b:ea:0e:7b:40:33:e5:aa:6a:3b:8b:98:
01:e1:fd:80:46:02:9d:1f:0d:f6:15:b3:18:36:42:30:68:db:
93:17:14:e3:ce:6a:fa:d7:14:06:7c:ad:4a:7a:a7:b4:55:5c:
17:5a:56:3b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYw5S3HQgA1/s1CSKfTbaP5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMjA1MDkyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWJiODk2ZjBjNDVkOTc4M2IwNjM2NGU0Y2M1NDQ3NjY5ZDBhZTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPDLrsWB08KEzt5X7zILKIVj2IdG
lVqdROZe8W5UU9QlvO2be/dnIDhK6/hg5o4v0nCbjL5LC/NEzoaGcQxY++TffCTP
+RJmPr+DmAvaPVASOhXq/14lbF0ugsGz0x5wg5s9CVJi7ToIiYGOezEOJMl0zkix
sVpJ/GBCg6k98VwwiNJ8BMHq1n1riaJ5+D5ly3JdvZYTHLo5DU6QughEClkChMS2
wvpngNOLoHsRgKtlM/KVc0JFTzLIoVjjlSx44UvdCT089+FbXgycIw2GTNJgTe9Z
oWnYmzkroU4jGOcUmTCUTnTnvB0kb0ZiSrDnAYAHxw1GXLs5ezHdVxKifQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFFm7iW8MRdl4OwY2TkzFRHZp0K6QMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvV2J1SmJ3eEYyWGc3QmpaT1RNVkVkbW5RcnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAGWN+AHLgM11S5ST
qvWSQ3wneTNjhPPHdqtovp5WNEBqzzgiNUzeTPGBvIeel/AVud+4gFS8sx8qLqBS
JX1iKHjW3htDQo5aTRRGnwKHjES7Hw436iyC6xlJh8suBoySdf3oR/mvJou4z95O
YJzSj5l8zJwgZ/yGgS3s2tjxy/K9h7zgin7N9OKZvOzC92ZUGvv9yDbI4PJ3psgu
hnSpkLVRctf+/iUYfWS4SUK+BDAqsT0Ljsa7tbaCEwQiLZ2s2Zz9W8JM/lrWUGLu
WhvqDntAM+WqajuLmAHh/YBGAp0fDfYVsxg2QjBo25MXFOPOavrXFAZ8rUp6p7RV
XBdaVjs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org