Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cZfcYft2h7g-Qdfde6zquIEkGRw.roa
File: cZfcYft2h7g-Qdfde6zquIEkGRw.roa (raw, json)
Hash identifier: x8r3QmAXsw9wSkugk9Wo/WNI7/6FFubd4DO+lcviHh8=
Subject key identifier: 71:97:DC:61:FB:76:87:B8:3E:41:D7:DD:7B:AC:EA:B8:81:24:19:1C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018E74C7A6806384793F8F370D74A7C75C83
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cZfcYft2h7g-Qdfde6zquIEkGRw.roa
Signing time: Mon 25 Mar 2024 08:43:45 +0000
ROA not before: Mon 25 Mar 2024 08:43:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203360
IP address blocks: 46.34.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 10:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:c7:a6:80:63:84:79:3f:8f:37:0d:74:a7:c7:5c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 25 08:43:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7197dc61fb7687b83e41d7dd7baceab88124191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:6f:01:be:12:d4:8d:23:db:79:b8:4b:78:
f3:1f:a1:09:29:9e:fc:28:dd:84:f4:7b:34:31:bb:
60:6c:5f:9d:6b:db:39:0d:27:b5:ac:7e:6f:a8:bc:
d9:5a:39:09:2c:c2:ee:f0:3b:90:03:68:c9:d4:f2:
79:e1:55:0d:1f:f5:60:ec:05:5d:b2:c7:c8:1b:69:
e8:d7:c0:8e:1b:6b:59:10:b8:0a:0f:fa:c9:01:c6:
c8:9c:a7:eb:22:c4:36:4d:40:69:51:73:70:cb:2a:
2f:d7:1f:90:b2:fa:2c:4c:4a:10:5f:a5:f5:c3:c1:
cd:d5:ef:f2:e0:26:d4:c2:a3:fc:bc:5e:27:b1:fd:
93:fc:5d:a4:d1:3f:da:dd:57:3d:e1:55:ce:2a:13:
5c:10:4f:b2:b5:f5:11:d2:bd:86:7d:3d:1f:6b:1c:
0a:e0:db:84:a2:28:2f:9e:a7:77:a7:9d:ad:3b:2d:
4f:b0:fe:7c:71:4d:58:a6:11:c0:ae:00:53:9c:46:
10:7a:c6:ed:d1:c4:5e:a4:12:97:fc:20:dd:6f:3c:
d6:87:68:22:9d:cf:3c:68:71:b4:49:ec:e9:6a:ba:
5f:c5:98:9f:b5:a2:8b:d3:c1:6a:91:9c:ad:f9:a5:
a0:2c:4a:38:ca:af:0a:cc:8a:3b:40:e1:b5:dd:9f:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:97:DC:61:FB:76:87:B8:3E:41:D7:DD:7B:AC:EA:B8:81:24:19:1C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/cZfcYft2h7g-Qdfde6zquIEkGRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
Signature Algorithm: sha256WithRSAEncryption
57:84:de:84:9b:38:0b:d2:9d:e5:94:4f:84:71:98:53:dd:7a:
bb:bd:34:04:47:01:3d:86:7a:9c:64:2a:f8:81:63:15:bf:e2:
d7:bc:e1:a6:d8:62:10:27:ec:13:04:c0:73:44:c4:a4:b3:83:
d2:44:9a:1d:6e:fb:07:b3:25:d8:d6:92:74:f4:e7:1d:a7:61:
32:a1:73:d0:af:41:50:eb:11:bf:23:75:50:e9:1a:ee:3f:8d:
34:fb:7d:c1:6d:21:41:bd:bc:c1:41:de:26:e4:f9:84:89:a5:
23:cc:22:30:fc:95:a9:06:fe:89:8f:fe:aa:2d:52:c1:8b:84:
9b:2b:6c:1c:c4:1e:63:e6:a0:4a:ac:b6:e7:dd:35:e9:e1:68:
a4:9d:7f:0a:a6:cb:bc:7a:bf:f3:42:cf:c4:b1:80:ea:39:dd:
09:ae:1f:71:e0:b1:5b:cc:95:90:72:bb:2a:4a:62:9f:19:1b:
3e:10:db:77:50:ca:aa:e7:82:9b:52:ad:0a:00:1f:f6:33:30:
84:2b:70:87:40:ea:ff:6e:d0:df:fa:a0:a9:3c:78:d2:76:a0:
dc:6d:35:25:87:e0:63:d3:94:57:6f:2d:b2:37:a5:9c:54:c2:
f3:96:b8:c7:df:39:fd:5c:68:2f:07:a3:cd:15:a8:ef:77:b0:
93:cb:4d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org