Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z-4mames5W51bBycYaourfGBor0.roa
File: Z-4mames5W51bBycYaourfGBor0.roa (raw, json)
Hash identifier: SKh0H8RJYFLMnJItwMGubEKFo/lb2hwEHV8w/+VCqWQ=
Subject key identifier: 67:EE:26:6A:67:AC:E5:6E:75:6C:1C:9C:61:AA:2E:AD:F1:81:A2:BD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A2E44DCEF88F91C8D320D2D6594BDD0B6
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z-4mames5W51bBycYaourfGBor0.roa
Signing time: Fri 25 Aug 2023 19:56:19 +0000
ROA not before: Fri 25 Aug 2023 19:56:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.39.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 11:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:44:dc:ef:88:f9:1c:8d:32:0d:2d:65:94:bd:d0:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 25 19:56:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67ee266a67ace56e756c1c9c61aa2eadf181a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:77:84:df:24:78:ec:07:11:21:36:be:9d:
88:b5:47:cf:f8:22:53:43:8b:97:a2:48:7e:af:71:
5b:69:54:4e:8d:3a:15:c8:ff:be:f1:85:9a:b4:7e:
6b:29:39:47:2a:4f:43:0f:45:5d:32:7d:6b:d0:30:
11:9b:b6:b3:04:6b:99:e5:2e:e3:78:83:82:db:48:
bd:24:b2:0c:4f:cc:e7:fa:a8:bf:a7:f2:3c:32:51:
e3:23:4e:e0:49:d2:f5:79:60:5b:b2:d7:2d:5c:27:
bf:ba:98:ed:6a:53:52:7c:08:65:cb:67:76:b0:8d:
e4:ea:b3:da:88:40:4c:44:c3:a6:fb:c5:56:7f:65:
96:cb:ff:89:ca:0a:5c:36:d8:95:88:be:9f:57:c5:
ac:32:af:91:ae:a3:ec:28:29:70:fa:bb:bf:6a:44:
38:69:0f:fc:16:f6:da:b3:3b:77:89:e8:56:b5:56:
03:1e:b4:08:be:c3:60:a8:37:78:7a:17:8b:f3:61:
42:18:da:49:d4:99:ca:70:af:e7:71:5a:cb:90:b8:
49:f7:4c:66:c5:97:54:2d:ea:b0:fc:42:56:08:27:
8d:52:04:60:e3:d8:77:d8:3e:09:b8:de:46:c2:ce:
1f:9b:1e:bb:11:bc:08:92:95:28:40:f0:15:20:ca:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EE:26:6A:67:AC:E5:6E:75:6C:1C:9C:61:AA:2E:AD:F1:81:A2:BD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Z-4mames5W51bBycYaourfGBor0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.39.0-46.34.40.255
46.34.42.0/23
46.34.49.0/24
46.34.54.0/24
46.34.62.0/23
Signature Algorithm: sha256WithRSAEncryption
24:67:e2:04:e3:89:e0:a5:5a:df:fa:dc:a7:17:be:5c:c3:b4:
f6:49:44:20:a9:9b:0c:36:fa:26:95:9d:48:67:12:ce:8e:2d:
38:d3:9d:e3:01:d7:f6:a3:b1:94:46:d8:2c:0f:c1:30:43:fd:
6b:48:dd:00:0c:50:64:9c:18:9e:56:01:7d:00:ea:4b:2d:e1:
b7:fb:78:52:ac:14:95:62:b0:35:2a:7f:37:f5:08:f8:a3:71:
36:a6:26:4d:b4:ac:29:27:a6:80:51:af:42:75:07:25:68:08:
ca:78:66:3a:98:60:0d:05:c8:0a:72:31:c0:45:3d:7e:8c:c9:
44:1a:ee:9d:c4:52:7c:9f:58:0a:f1:d6:9b:0e:5f:6b:9d:95:
2a:eb:d3:3f:7e:16:2e:da:41:4d:f3:fb:8e:a7:c9:89:f1:3d:
ef:e9:69:71:87:76:d4:6e:05:9a:e0:22:20:34:b1:ea:a8:38:
3d:70:32:1d:8f:50:13:e1:52:f2:3b:9c:59:32:b9:94:7e:30:
0e:3a:65:2e:85:90:27:e0:27:4f:89:bc:f2:f3:ef:46:77:96:
a6:a6:b4:c8:31:e5:58:fe:f0:9b:29:7e:10:84:cf:0f:76:25:
7f:4a:87:b2:34:25:17:fc:63:92:ee:bd:83:7e:75:7a:eb:41:
e0:a8:e2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org