Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bIRu563Rr8EqwoNeL6Qi5zw0ikc.roa
File: bIRu563Rr8EqwoNeL6Qi5zw0ikc.roa (raw, json)
Hash identifier: C3ShYdNVS/ZJKUiQ1PA9ra5LRxvPwhC6qSDAM/VKlsA=
Subject key identifier: 6C:84:6E:E7:AD:D1:AF:C1:2A:C2:83:5E:2F:A4:22:E7:3C:34:8A:47
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189CA0F74EDC7D77DDAB821A74FF461BD55
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bIRu563Rr8EqwoNeL6Qi5zw0ikc.roa
Signing time: Sun 06 Aug 2023 08:55:57 +0000
ROA not before: Sun 06 Aug 2023 08:55:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 08:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:0f:74:ed:c7:d7:7d:da:b8:21:a7:4f:f4:61:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 6 08:55:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c846ee7add1afc12ac2835e2fa422e73c348a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:11:05:5a:50:97:f5:ff:ef:08:d2:3f:42:
2c:de:15:80:d5:93:16:28:5a:e7:85:10:71:de:49:
5b:36:f3:d7:40:bf:31:c9:3c:17:28:ed:c8:24:e6:
df:6a:a9:5d:39:15:9b:4d:5f:d6:23:bf:3e:4f:d3:
ff:aa:18:9e:5b:72:57:e0:e4:9e:97:37:df:f7:1f:
30:a9:a2:b9:38:9e:fe:81:01:99:84:5f:7d:01:83:
f1:01:a8:42:c5:f6:3a:97:29:d3:96:08:73:e0:7b:
5f:3e:84:4d:6d:7d:6c:2f:db:a9:b2:08:c1:21:c3:
87:26:91:8f:de:86:d2:2e:48:03:10:99:f9:50:5f:
b8:08:36:a8:be:62:de:6b:9c:85:44:fe:82:3f:7c:
8a:75:9f:ce:3d:1f:96:69:5c:a7:c1:4d:6e:fd:89:
4c:6b:96:c8:7e:fe:e9:c4:21:98:3f:49:af:c1:be:
f2:09:15:90:e0:6d:88:08:67:71:67:0f:a4:ce:84:
eb:b6:83:3c:73:2c:dd:fe:ae:71:eb:a2:ca:d1:b7:
6b:51:5c:95:5e:ea:ae:8f:fb:d1:ea:69:e9:88:d8:
1d:e6:24:d0:2b:6f:9f:6f:f8:9a:5d:0a:a2:a7:1b:
f6:78:ab:d4:11:38:58:f3:6a:3a:37:ea:c6:b8:28:
b6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:84:6E:E7:AD:D1:AF:C1:2A:C2:83:5E:2F:A4:22:E7:3C:34:8A:47
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bIRu563Rr8EqwoNeL6Qi5zw0ikc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4a:12:f0:21:7f:fc:ad:c8:eb:60:34:29:a6:1c:9e:61:8d:
b9:c5:21:13:bd:f0:6d:73:5d:6f:0e:e9:bd:67:cf:1e:0f:88:
1b:7f:bc:45:9f:16:82:67:64:58:e7:e4:84:2d:ba:34:eb:df:
df:94:ab:f6:47:85:81:b0:40:5b:23:76:b2:2c:bf:be:e0:e2:
43:07:f4:54:63:3b:df:b3:02:45:cb:53:ce:09:b1:44:fd:ac:
3a:fc:d8:7f:1a:26:79:24:bf:e3:ce:d8:ab:ab:e5:0a:e6:76:
47:f4:d7:32:08:31:bf:4f:81:34:c6:46:3b:84:1f:35:1e:1b:
15:6c:b7:fc:b3:ee:f5:ab:32:3a:c0:cb:9a:35:0d:e4:a1:0b:
47:93:74:8b:0d:85:1e:39:4a:ef:a4:e9:e6:df:5a:74:1a:a2:
c7:c4:6f:a8:a1:a3:92:a9:3b:d8:80:e1:79:a8:ab:ed:4e:c6:
77:ec:38:4f:a1:7c:c4:0d:1c:60:80:88:f0:32:5e:43:b4:84:
27:b1:ce:41:f4:be:0c:18:f8:63:38:6f:d0:e6:92:86:e0:8c:
23:f4:5b:e3:f3:d9:e1:6e:7c:92:fe:a9:02:d3:e6:b9:01:49:
1e:08:2e:4e:aa:ce:59:e3:ba:95:e5:bc:c0:0a:6a:c9:69:6e:
5d:7a:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org