Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/eYH1qTusFl7aBy_jgf-AZB84b5s.roa
File: eYH1qTusFl7aBy_jgf-AZB84b5s.roa (raw, json)
Hash identifier: yo4CL4CxKnWRTUFdAa/IoijQ6K3RaqQwYW/ZYqiQ+Zs=
Subject key identifier: 79:81:F5:A9:3B:AC:16:5E:DA:07:2F:E3:81:FF:80:64:1F:38:6F:9B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018898751DEB5CF32CF07B16F26A3D734F26
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/eYH1qTusFl7aBy_jgf-AZB84b5s.roa
Signing time: Thu 08 Jun 2023 00:43:12 +0000
ROA not before: Thu 08 Jun 2023 00:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.38.0/23 maxlen: 23
46.34.40.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 10:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:75:1d:eb:5c:f3:2c:f0:7b:16:f2:6a:3d:73:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 8 00:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7981f5a93bac165eda072fe381ff80641f386f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:0e:c2:40:e5:b1:6e:b3:6f:27:93:23:00:
50:c5:61:27:54:bb:70:f3:86:ce:f5:8d:95:15:6b:
50:9b:de:3f:e6:55:77:10:59:78:ef:7f:92:48:4f:
f1:1b:c5:4d:90:35:55:ec:bf:df:9f:01:ed:c6:48:
30:d9:04:a8:2c:10:74:63:53:da:93:51:c4:50:91:
13:59:6c:24:89:96:6f:19:1f:5d:c4:a0:ed:f7:5d:
69:ef:26:03:3e:12:f1:ac:d5:db:b7:cd:fc:ae:77:
d2:de:f9:38:9e:36:54:3f:4e:18:e8:bc:1a:17:31:
bd:7c:01:e4:d3:28:ba:a6:8d:c1:43:8a:8b:ad:3a:
6d:4c:e8:28:6d:7f:db:64:09:13:d2:ff:85:d0:26:
09:15:94:f4:3b:e9:61:7e:d2:29:4b:59:bb:3a:dd:
20:3d:25:79:96:db:b5:9f:79:d1:3f:19:6f:04:7e:
fb:2f:20:70:06:0f:ef:ac:3e:8e:cc:48:01:76:c6:
49:0e:e9:4b:11:c7:49:1d:c9:7e:60:3a:26:25:d5:
6d:3c:a1:4e:50:4a:fc:54:e1:9e:f0:36:90:2b:ac:
83:65:18:30:96:48:e3:66:a9:07:18:ec:55:21:ea:
66:b4:4e:e4:80:01:7d:84:ac:83:3c:6b:53:0a:6c:
33:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:81:F5:A9:3B:AC:16:5E:DA:07:2F:E3:81:FF:80:64:1F:38:6F:9B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/eYH1qTusFl7aBy_jgf-AZB84b5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.38.0-46.34.40.255
46.34.45.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:93:0b:2e:9f:66:7b:45:83:b9:5b:3b:23:9e:52:85:9f:6f:
68:3a:ea:7e:77:c5:3a:19:92:71:8f:5d:fe:b4:7a:fd:9b:01:
49:a0:94:61:2c:50:27:50:79:13:a6:98:e8:90:68:01:3a:8a:
78:89:82:c2:54:14:36:77:9c:5b:2f:16:55:c8:18:60:60:88:
e3:2e:61:05:34:80:4e:ff:e1:88:bf:6e:36:85:ec:94:dc:7a:
8f:4f:ed:f1:4d:ab:9e:a1:ef:51:68:8a:b9:04:48:3b:86:35:
83:40:88:2b:56:b7:43:ea:28:17:37:3c:72:33:8b:a0:27:ed:
6f:ff:cf:ba:3f:98:39:b3:4a:8e:04:d8:63:a0:09:02:08:65:
81:ad:aa:ea:ad:8c:d4:9f:e4:1f:0f:20:09:88:8c:f5:6b:69:
12:b1:b2:b5:e7:4a:9c:43:36:0c:3f:cf:fa:e9:ec:94:59:be:
a2:2c:28:b2:6f:75:42:07:de:1d:13:a3:da:7b:74:6a:d0:8e:
92:74:5e:42:93:f9:8b:7d:60:e0:ca:e0:37:a3:c2:65:01:29:
04:f9:03:23:76:5e:56:77:89:88:5d:55:84:b5:45:b6:80:ba:
0b:cc:49:b3:c0:d5:fe:98:b9:c4:7e:55:06:29:a1:03:ae:b4:
ab:17:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org