Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_HVjWisg7-V4tI0f1tIMIN4occw.roa
File: _HVjWisg7-V4tI0f1tIMIN4occw.roa (raw, json)
Hash identifier: gfSlBfLeOtqrLWKvjgccmE+2H46CAfdJgn008wXrxQc=
Subject key identifier: FC:75:63:5A:2B:20:EF:E5:78:B4:8D:1F:D6:D2:0C:20:DE:28:71:CC
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A7FE4728302E862AB649B38D842EB5416
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_HVjWisg7-V4tI0f1tIMIN4occw.roa
Signing time: Sun 10 Sep 2023 16:19:52 +0000
ROA not before: Sun 10 Sep 2023 16:19:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 16:25:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:e4:72:83:02:e8:62:ab:64:9b:38:d8:42:eb:54:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 10 16:19:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc75635a2b20efe578b48d1fd6d20c20de2871cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:bd:c8:36:ec:a9:31:6d:0a:12:4a:46:a1:
18:cb:dd:16:b3:21:58:aa:6c:6e:9d:48:39:10:8a:
ea:95:2a:00:65:f0:ed:34:0d:51:b2:fb:9d:3d:b0:
5f:1d:e7:a8:fe:80:72:d7:9e:10:f5:bf:9a:1c:65:
3c:38:c1:98:e1:5c:22:f8:dd:bc:53:91:0e:38:0d:
a8:f2:b6:18:68:a0:5d:cb:e3:ad:b6:2e:c1:ea:85:
fb:f2:aa:da:0c:ec:98:0d:18:35:33:e0:a5:c9:d0:
8d:82:a3:ca:21:d4:9d:13:ab:1d:e6:f7:d8:1e:d4:
2f:5f:6b:62:43:0b:ad:bc:d8:b7:c9:80:cf:e3:fd:
83:0f:27:ac:2a:f0:04:c8:71:5e:c3:e4:f2:a0:34:
63:4b:cf:a8:25:44:ef:c4:5e:51:bc:34:ed:6b:0b:
e8:09:fd:75:65:b4:20:2c:7e:c0:a0:7f:4b:18:3e:
c0:a4:e6:55:ab:f4:22:fb:35:78:f2:f0:ce:6e:51:
22:a7:1f:ae:32:22:3e:0f:ba:e0:c5:74:c4:be:f8:
80:55:c9:5a:7e:87:8b:1b:18:6a:40:c5:a4:2a:4c:
b6:fb:92:e4:f8:a7:d6:22:f0:1b:f1:31:9e:7b:fa:
64:51:3a:80:18:c2:bd:24:77:8f:8b:9f:da:1f:d2:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:63:5A:2B:20:EF:E5:78:B4:8D:1F:D6:D2:0C:20:DE:28:71:CC
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_HVjWisg7-V4tI0f1tIMIN4occw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.60.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:03:a4:c9:49:a0:d6:5b:81:59:ab:db:3c:0a:63:25:1d:5b:
e3:87:47:6f:9b:97:d3:5f:8b:34:e3:f3:98:65:63:4c:25:c6:
8f:3d:0e:2d:91:e7:7a:66:04:0e:ab:5d:26:94:81:6d:e3:36:
0b:64:91:cd:f8:6e:50:6f:6e:aa:02:00:71:b8:8e:13:10:c5:
ef:a3:dc:70:72:cb:f8:7a:fe:99:0b:fa:08:69:44:08:33:19:
ad:49:64:ed:d8:d8:db:32:e4:f0:4a:d7:a1:f9:70:a0:2c:62:
2d:cc:2e:ec:b9:b6:34:d2:02:27:fe:79:00:cc:e9:dd:53:9a:
f0:46:0a:6d:c2:cb:10:4c:2c:94:5e:c6:c3:1d:54:49:38:4a:
c6:5e:f6:0e:b2:12:35:32:f8:2a:3f:3f:8c:1b:f7:c9:7b:ac:
70:d4:11:31:77:d4:09:5b:f4:17:3f:be:c7:4b:51:88:04:e9:
e4:80:5b:87:b1:47:6f:03:08:75:22:24:f1:d1:be:d2:df:1a:
a2:24:33:26:53:41:e4:fa:be:30:e8:81:b6:59:79:0d:25:14:
03:1d:01:92:70:80:66:fc:61:78:20:d4:8d:46:00:0d:5b:3b:
8e:20:59:5f:0c:29:1f:51:aa:83:c8:cc:0e:b6:c4:9e:cc:03:
f2:e0:25:3c
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYp/5HKDAuhiq2SbONhC61QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwOTEwMTYxOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzc1NjM1YTJiMjBlZmU1NzhiNDhkMWZkNmQyMGMyMGRlMjg3MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBS9yDbsqTFtChJKRqEYy90WsyFY
qmxunUg5EIrqlSoAZfDtNA1RsvudPbBfHeeo/oBy154Q9b+aHGU8OMGY4Vwi+N28
U5EOOA2o8rYYaKBdy+Otti7B6oX78qraDOyYDRg1M+ClydCNgqPKIdSdE6sd5vfY
HtQvX2tiQwutvNi3yYDP4/2DDyesKvAEyHFew+TyoDRjS8+oJUTvxF5RvDTtawvo
Cf11ZbQgLH7AoH9LGD7ApOZVq/Qi+zV48vDOblEipx+uMiI+D7rgxXTEvviAVcla
foeLGxhqQMWkKky2+5Lk+KfWIvAb8TGee/pkUTqAGMK9JHePi5/aH9IA/QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFPx1Y1orIO/leLSNH9bSDCDeKHHMMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvX0hWaldpc2c3LVY0dEkwZjF0SU1JTjRvY2N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIjwDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAHIDpMlJ
oNZbgVmr2zwKYyUdW+OHR2+bl9NfizTj85hlY0wlxo89Di2R53pmBA6rXSaUgW3j
Ngtkkc34blBvbqoCAHG4jhMQxe+j3HByy/h6/pkL+ghpRAgzGa1JZO3Y2Nsy5PBK
16H5cKAsYi3MLuy5tjTSAif+eQDM6d1TmvBGCm3CyxBMLJRexsMdVEk4SsZe9g6y
EjUy+Co/P4wb98l7rHDUETF31Alb9Bc/vsdLUYgE6eSAW4exR28DCHUiJPHRvtLf
GqIkMyZTQeT6vjDogbZZeQ0lFAMdAZJwgGb8YXgg1I1GAA1bO44gWV8MKR9RqoPI
zA62xJ7MA/LgJTw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org