Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_A-j5AwDzbVdPTrqyuExXVV2f3g.roa
File: _A-j5AwDzbVdPTrqyuExXVV2f3g.roa (raw, json)
Hash identifier: RnUfTqTd30gfU3lfNIw0DZ0S4/KcingySTkq4rYIbHI=
Subject key identifier: FC:0F:A3:E4:0C:03:CD:B5:5D:3D:3A:EA:CA:E1:31:5D:55:76:7F:78
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018768543652F7C2113D293AD5958441FCF8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_A-j5AwDzbVdPTrqyuExXVV2f3g.roa
Signing time: Sun 09 Apr 2023 23:22:42 +0000
ROA not before: Sun 09 Apr 2023 23:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 46.34.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:68:54:36:52:f7:c2:11:3d:29:3a:d5:95:84:41:fc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Apr 9 23:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0fa3e40c03cdb55d3d3aeacae1315d55767f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:10:cc:e6:30:db:f5:6a:ec:72:ff:f8:87:
71:ff:c1:83:f1:0b:9e:c4:7d:2c:6f:92:fd:af:ee:
e9:8f:26:90:26:ce:71:01:56:18:8b:8e:56:d6:df:
59:5e:1b:25:d6:b9:9f:87:f3:26:1d:ac:3c:36:66:
8e:cf:f9:63:a2:8c:9b:0a:6b:c9:f3:85:aa:ec:19:
74:a3:a7:6b:ff:e6:d6:7c:6f:6e:b9:d3:67:13:c8:
23:19:28:94:76:37:d1:4b:37:a5:a5:6b:e5:12:ba:
c5:8f:11:34:6d:18:ab:87:b7:7e:66:34:3a:7b:8e:
e5:01:d5:8a:1f:c3:05:71:cc:61:d5:b3:bf:eb:9d:
1b:b1:11:40:74:3e:8d:36:71:73:70:84:08:e7:90:
00:39:c0:7b:79:67:ee:1e:14:57:a5:22:c0:43:d4:
0d:c6:a5:f2:6b:f2:da:2c:4c:3e:cf:d6:9a:78:86:
8e:e5:74:07:53:6c:23:6a:ca:25:2d:03:85:58:13:
44:f9:80:ee:e1:e9:0a:ed:dc:e9:53:44:e3:87:66:
89:50:1a:03:11:e2:17:56:ca:1f:ee:df:21:19:e8:
c2:d3:59:5c:01:de:db:95:33:46:ee:33:a1:56:f8:
89:90:21:4d:6a:9e:e3:37:43:bd:5d:e1:63:2a:38:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:A3:E4:0C:03:CD:B5:5D:3D:3A:EA:CA:E1:31:5D:55:76:7F:78
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_A-j5AwDzbVdPTrqyuExXVV2f3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.52.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f4:87:0c:f7:ac:9f:dc:b8:7f:d2:35:f8:8d:dd:a3:6d:98:
bd:e2:29:34:2b:9d:e8:f3:be:30:6c:16:75:d4:cb:d1:7e:76:
35:49:6c:e2:64:d3:4c:95:2e:43:a5:14:69:c6:c0:a2:60:43:
0c:2b:f4:0a:f3:f9:7a:d3:9f:3d:38:b6:b4:20:51:69:f3:29:
be:bd:58:76:1f:c4:46:6b:5c:52:55:a6:4f:4a:98:9f:f4:97:
ca:b4:c6:aa:a0:06:7a:7e:0c:7d:6a:5a:18:68:f3:ee:7f:9a:
ba:b0:b2:6c:1e:24:b7:e9:d1:cd:18:66:b1:8b:21:b5:b2:5a:
58:06:7c:21:69:45:32:4e:68:85:19:06:c2:bb:f6:3d:d2:dd:
85:3b:5f:d2:05:0f:83:44:3e:14:bd:55:aa:f2:62:1b:2c:d7:
95:22:67:b7:ee:7c:de:21:5c:42:df:c2:66:63:7c:57:3f:09:
f3:57:7e:8a:fc:73:c1:22:9f:5e:d1:5e:83:33:9e:92:fc:1d:
9b:9f:80:d4:10:2d:c7:c1:32:76:1d:e9:be:ac:3d:f3:90:bb:
1d:19:b0:58:ae:24:10:33:a6:75:c8:d4:7f:08:38:b3:7c:cd:
47:d2:25:64:e7:46:dc:b8:b7:5c:db:d3:bd:05:f3:d8:0a:20:
52:b7:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org