Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ZqrvRMLJ9a5CqEmvCGJ5OyrljcA.roa
File: ZqrvRMLJ9a5CqEmvCGJ5OyrljcA.roa (raw, json)
Hash identifier: G6v9dlmk+adl5BnHiOZyiNelcR/XkQnuYr3mmJEWxV8=
Subject key identifier: 66:AA:EF:44:C2:C9:F5:AE:42:A8:49:AF:08:62:79:3B:2A:E5:8D:C0
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018AE06351AB75B07AD272B166AD1D281E7B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ZqrvRMLJ9a5CqEmvCGJ5OyrljcA.roa
Signing time: Fri 29 Sep 2023 10:01:59 +0000
ROA not before: Fri 29 Sep 2023 10:01:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 46.34.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:39:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:63:51:ab:75:b0:7a:d2:72:b1:66:ad:1d:28:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 29 10:01:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66aaef44c2c9f5ae42a849af0862793b2ae58dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:b7:9a:25:22:e9:d6:e6:a5:6e:30:55:78:
42:37:70:92:61:35:b4:44:fa:bc:79:3d:4e:4c:2b:
69:06:92:13:f4:49:93:03:4e:ea:04:b0:75:e1:73:
95:7a:a2:8b:75:f0:bf:3e:92:b1:55:fb:2b:19:37:
0c:03:b6:19:3e:58:b7:dc:b9:63:c9:51:b0:30:d8:
f8:04:b6:84:17:dd:ec:27:f3:62:9d:f4:2a:ef:cf:
3f:ec:dd:14:dd:86:8d:86:c7:a4:82:40:af:ac:25:
15:5a:d2:be:c0:3e:15:d8:21:46:48:e9:6b:67:5d:
be:85:67:fe:fc:53:05:c7:35:26:2e:1d:c1:e4:4d:
f7:da:ce:4c:13:e1:67:dc:b1:60:3d:de:b6:67:05:
e7:48:fe:90:92:62:08:fe:d5:eb:a8:bd:cf:a5:ef:
4f:da:0a:3d:9c:41:08:cf:4b:b5:df:75:18:b5:04:
a6:88:72:bf:98:2f:e6:c4:e2:49:ed:bb:b4:ec:c8:
b5:f0:9a:a5:92:af:e3:df:88:12:2f:cc:05:98:3c:
4d:f2:d4:c9:db:35:1e:ed:ab:d4:73:73:fa:fa:90:
83:65:6b:7d:6f:de:7e:de:0b:d1:a9:ff:4e:19:46:
7c:cc:f9:be:3f:92:6f:61:f3:05:a5:a5:78:13:73:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:EF:44:C2:C9:F5:AE:42:A8:49:AF:08:62:79:3B:2A:E5:8D:C0
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ZqrvRMLJ9a5CqEmvCGJ5OyrljcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.61.0/24
Signature Algorithm: sha256WithRSAEncryption
08:da:f8:92:0f:a5:68:07:d4:72:32:de:75:52:d1:7f:e6:de:
9b:e4:8f:6c:3c:ba:b5:0e:da:04:95:e6:9b:9a:9c:34:5f:61:
1e:e9:fc:2c:81:66:db:09:ee:ab:0b:5c:3a:04:62:1c:1a:1d:
d9:b2:f5:e5:87:7b:b6:6b:cf:7e:4d:44:dc:21:f5:a4:b6:4f:
eb:b6:67:10:70:57:06:6f:d3:07:fc:8f:67:23:1b:46:c0:7a:
b9:47:35:99:d7:4a:81:23:24:10:80:d7:8a:33:fd:b4:cd:bd:
de:77:29:98:31:95:5b:12:d1:03:1e:c4:51:8a:24:0b:d0:be:
ca:8d:29:71:e9:bf:74:4a:62:e8:7c:5c:11:36:45:63:c1:f4:
10:74:3a:90:e2:b4:eb:aa:69:9c:94:8c:aa:61:7e:0b:e1:6b:
b2:25:89:c6:8d:08:29:b6:77:a7:23:0b:53:81:fa:6f:62:d6:
7a:f9:3e:07:d6:31:2d:9a:38:ea:5e:72:36:df:fd:be:73:ad:
d1:0e:87:2b:f6:b2:ab:60:73:03:56:27:97:54:a8:d3:d2:ec:
55:66:77:96:ea:bb:5d:46:d4:4b:37:69:a9:0a:a6:98:24:72:
97:14:df:0f:64:f9:9d:e2:3d:6f:98:95:52:1b:18:8d:8f:79:
4e:2d:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org