Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Wq33FO7Ibx38ltSorV4lAN4JHD4.roa
File: Wq33FO7Ibx38ltSorV4lAN4JHD4.roa (raw, json)
Hash identifier: 4H7qB8zBJw9cnOlmnU60TbKVOVgJ1qtqcEYCB0yeo50=
Subject key identifier: 5A:AD:F7:14:EE:C8:6F:1D:FC:96:D4:A8:AD:5E:25:00:DE:09:1C:3E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018E65AAA1C1F7D8D94D8CB1A2D65ED0940F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Wq33FO7Ibx38ltSorV4lAN4JHD4.roa
Signing time: Fri 22 Mar 2024 10:17:45 +0000
ROA not before: Fri 22 Mar 2024 10:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.39.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:aa:a1:c1:f7:d8:d9:4d:8c:b1:a2:d6:5e:d0:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 22 10:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aadf714eec86f1dfc96d4a8ad5e2500de091c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:46:1b:c9:a0:94:3e:3e:92:0c:a3:02:9a:
34:35:e2:be:61:30:a0:6e:a8:ac:0a:94:46:f3:b0:
ce:92:81:0d:d9:95:f2:5e:c8:dc:d3:b6:ce:71:66:
00:3b:f2:e4:bc:52:48:c8:d7:7e:9a:71:79:e4:22:
51:71:4c:35:9e:10:e9:47:e7:ed:4a:17:c1:3f:fc:
f0:33:cf:5e:c2:b4:5d:c8:4d:38:e7:9c:f3:69:52:
41:7c:dc:61:3b:e8:d2:a9:83:6d:88:12:49:42:f5:
f1:3d:0c:9c:82:44:6a:ae:70:18:f7:c5:af:02:49:
6e:14:57:30:af:09:cd:43:3a:a2:9b:35:34:25:fb:
e8:12:24:e0:b4:57:e8:17:16:29:6d:b9:23:81:16:
49:af:43:8f:88:a4:a0:ca:8d:6a:19:56:65:88:5c:
92:ef:0d:87:88:ca:d5:a2:31:fe:ee:da:a6:9b:35:
17:ac:7b:d3:53:93:3b:0a:06:b0:50:87:98:94:3c:
76:e7:af:b7:ff:be:11:3a:43:eb:39:dd:f1:e8:d6:
3f:4c:27:72:21:3a:04:ac:fa:89:cd:ec:32:5e:c2:
e8:50:f4:2b:7d:d5:dd:3b:8e:50:f9:56:d4:33:ec:
ea:64:2a:26:0e:de:1e:18:66:9e:67:68:65:3f:df:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:F7:14:EE:C8:6F:1D:FC:96:D4:A8:AD:5E:25:00:DE:09:1C:3E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Wq33FO7Ibx38ltSorV4lAN4JHD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.39.0-46.34.40.255
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c0:5a:4b:dc:1e:f2:1d:3b:31:98:9e:4a:f9:c7:7e:5f:dd:
ab:8d:ca:f6:a4:91:c2:a1:2b:79:45:03:79:c6:88:77:aa:a5:
37:e9:dc:d3:05:e4:f7:e8:41:a5:75:e5:46:26:f6:6b:b9:ff:
40:aa:ac:6a:46:14:77:2b:fe:d8:20:33:b9:50:f2:db:07:f4:
ec:d0:32:e1:02:7e:74:04:76:3f:7b:76:22:fd:80:95:1a:b3:
ce:3a:e5:3e:aa:c1:33:2b:cb:3e:a9:68:3f:37:a2:6a:9f:aa:
fd:e7:42:d9:b7:46:29:f2:99:be:1d:c8:d8:b9:f0:d4:62:a2:
c4:d3:ad:10:0b:e9:8c:51:a4:e5:14:45:36:ad:17:ba:b8:8e:
b9:68:79:f5:ab:82:75:88:fd:00:ab:3d:7a:84:03:20:05:26:
20:e9:4d:68:c4:3d:44:ab:1b:71:d0:52:20:e6:ff:ff:35:7e:
e9:37:d6:6b:5d:4c:9a:68:ec:2d:06:b8:d5:c2:5d:35:d1:cb:
42:80:e2:9d:db:e0:b1:ac:2c:be:46:52:ca:2e:ef:0d:84:5c:
14:1d:93:4c:cc:2c:67:d7:69:c1:f2:3d:d8:b4:2d:76:0a:ee:
05:da:81:a5:08:2c:c7:72:91:60:5e:07:51:9d:fc:5c:33:50:
9f:cf:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org