Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ebZ1nyakevPN8m38BnjYsEDEWgk.roa
File: ebZ1nyakevPN8m38BnjYsEDEWgk.roa (raw, json)
Hash identifier: xWctKzGwXmhzH9NTh6bpNYvrxXTciRDuGFeMRv8A78k=
Subject key identifier: 79:B6:75:9F:26:A4:7A:F3:CD:F2:6D:FC:06:78:D8:B0:40:C4:5A:09
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189E91A3E570DBFDAB5890DB7BC46527F4F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ebZ1nyakevPN8m38BnjYsEDEWgk.roa
Signing time: Sat 12 Aug 2023 09:35:58 +0000
ROA not before: Sat 12 Aug 2023 09:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 11:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:1a:3e:57:0d:bf:da:b5:89:0d:b7:bc:46:52:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 12 09:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79b6759f26a47af3cdf26dfc0678d8b040c45a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:7e:a7:47:1c:f3:9f:dd:c1:ab:03:8e:d1:
8a:04:bb:20:c8:84:1b:0d:76:22:99:01:e7:d1:86:
38:7d:20:ab:fb:c5:ec:80:71:0b:b6:a1:d2:12:04:
59:fc:f3:f2:09:26:b1:15:11:2a:02:cf:b6:0e:3b:
13:5b:10:02:45:5e:57:df:35:69:68:a7:04:f1:40:
da:1a:b5:12:49:78:d2:6d:cc:c1:90:c6:ec:c4:d0:
3c:8c:f4:26:51:ac:7a:87:0b:a6:bd:fe:43:50:94:
90:51:08:2a:ff:cd:e2:07:14:99:c4:08:fe:6a:2f:
d0:35:df:46:3b:23:ae:eb:00:fb:1c:eb:ab:27:28:
95:60:aa:ab:a9:9e:a1:7a:4c:41:1f:37:08:28:26:
0b:ab:58:85:25:69:3d:23:03:4c:d4:51:7e:da:29:
fa:1d:a3:a8:e0:ce:ab:41:6d:12:c2:e9:fd:ed:0e:
4d:84:1b:86:6a:c4:8c:dd:65:09:9b:22:f7:37:fc:
9c:8f:93:a4:5e:6b:3f:30:9d:86:d1:7d:a1:b5:e9:
10:f2:ff:f1:01:86:b0:a9:ad:42:38:8d:55:cb:fc:
91:ec:9c:01:08:55:3d:4c:5d:b0:5a:36:2c:ac:4f:
90:a1:71:75:84:42:ab:65:f6:27:bd:8c:97:77:fb:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B6:75:9F:26:A4:7A:F3:CD:F2:6D:FC:06:78:D8:B0:40:C4:5A:09
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ebZ1nyakevPN8m38BnjYsEDEWgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:04:29:1b:57:a6:0a:ec:d7:b0:86:bd:89:af:04:18:b0:31:
dd:2d:66:31:ca:ea:b3:53:89:69:97:0c:80:d9:dc:83:89:28:
63:09:e1:3f:b9:00:4d:3b:cf:59:65:67:41:6b:24:e6:ba:fd:
5b:4b:5f:28:e5:18:bd:e3:f6:76:09:65:98:84:fa:be:0b:c3:
f8:e5:f0:bc:72:bb:b4:5b:c9:bc:24:d6:6f:45:2b:d3:88:ed:
03:ec:af:0d:cc:4f:2d:a5:d6:32:5e:b6:b4:f4:4f:be:62:e5:
41:b9:b6:37:2a:db:34:8c:7b:8e:0b:ad:c4:a4:b0:a5:5b:11:
c3:ee:fc:83:da:80:a8:b3:d3:e4:77:d3:c8:71:b0:8e:a9:ed:
01:d7:19:6d:4c:99:10:6c:87:df:57:ff:a5:b9:e8:93:d6:c9:
0f:14:c1:54:3f:fa:b6:73:16:9c:40:6a:5f:64:51:f8:19:8d:
df:1c:a9:66:a1:34:9f:e5:81:07:3e:4f:31:1c:12:1e:3f:74:
6c:0d:a2:18:d5:16:6e:8e:30:02:5c:b9:67:90:39:ac:c7:c9:
5e:d1:a9:5a:c3:40:88:92:29:ef:21:64:0e:39:3e:67:39:c6:
db:c8:4b:e4:ad:e0:8e:13:22:74:46:d1:c5:6d:47:00:95:38:
4c:03:cb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org