Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fEIgfNQBLBVGHRgrtD0DaVNBwTI.roa
File: fEIgfNQBLBVGHRgrtD0DaVNBwTI.roa (raw, json)
Hash identifier: HMI9RfxPgTo3UQH2trlLeiD8a36pbYP1nPbgwG39fpE=
Subject key identifier: 7C:42:20:7C:D4:01:2C:15:46:1D:18:2B:B4:3D:03:69:53:41:C1:32
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01899BAAC37B2C3C65785E85465B3A48BCA7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fEIgfNQBLBVGHRgrtD0DaVNBwTI.roa
Signing time: Fri 28 Jul 2023 08:43:26 +0000
ROA not before: Fri 28 Jul 2023 08:43:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.38.0/24 maxlen: 24
46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.44.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 17:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:aa:c3:7b:2c:3c:65:78:5e:85:46:5b:3a:48:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 28 08:43:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c42207cd4012c15461d182bb43d03695341c132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:c0:24:5c:df:2c:74:e8:38:1e:15:89:c6:
12:5c:9e:20:f7:f9:1d:d8:5b:42:81:d9:97:6d:da:
16:22:87:e0:28:48:ea:91:7d:ec:1c:cd:64:3f:1c:
d1:1b:8d:02:59:0c:87:b5:d7:0b:8e:69:47:44:cf:
78:da:35:85:20:c9:fb:7d:6b:b1:28:60:c1:75:d5:
42:55:d6:09:e9:8a:db:6b:85:d5:22:af:41:a7:28:
df:e1:6d:6f:a6:61:4b:e5:f4:29:85:47:48:a2:ed:
18:57:e6:25:d8:5e:83:29:a6:5c:6c:a7:5b:58:8e:
87:94:d0:ca:66:0b:2c:e1:d2:29:ef:29:df:df:7c:
bc:d8:6d:d6:72:b0:a7:e3:91:16:c1:34:8b:3a:e2:
72:7e:ea:48:7a:75:a6:0f:4d:6d:84:7b:40:e8:27:
8b:a4:95:22:60:41:1e:49:45:38:5b:8e:b9:b6:f2:
9d:31:68:5c:69:22:8e:4f:52:49:42:ab:f3:04:2b:
68:f8:21:83:e8:e1:48:32:22:1f:87:a0:de:8b:79:
b7:22:2f:1b:f4:1e:10:ed:c2:7f:4c:07:a9:a2:f2:
40:88:88:9e:eb:df:7c:0a:1e:13:0e:c0:dd:89:1a:
6c:71:47:33:c2:18:a3:55:ad:40:fb:2d:56:19:d8:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:42:20:7C:D4:01:2C:15:46:1D:18:2B:B4:3D:03:69:53:41:C1:32
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fEIgfNQBLBVGHRgrtD0DaVNBwTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.38.255
46.34.40.0/24
46.34.44.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
72:15:a7:cd:a3:42:86:71:ec:0c:0e:97:1e:8f:b0:e8:09:c7:
69:b1:5a:a5:fa:10:f0:e6:a1:6b:27:b6:75:24:a7:ec:ad:50:
41:d1:6b:3a:c3:c2:2c:61:cd:cf:6a:a8:62:08:f6:fc:c2:c6:
91:3e:e7:2f:fd:90:6d:f4:cb:6b:b7:4a:d6:32:d4:f1:44:98:
fa:53:6a:44:ac:1d:e9:18:0d:37:74:9a:ff:0a:ed:fe:61:c7:
42:b1:47:cd:97:fc:47:c6:5a:46:4c:14:f4:40:67:18:3f:3c:
60:b2:8c:6f:b3:4f:d5:a1:c8:0f:b7:82:17:ca:79:59:b3:5f:
f3:15:bd:93:ac:cc:b1:26:20:5f:b9:3e:24:d1:06:5e:b5:aa:
16:69:04:50:0c:83:3d:69:6c:a2:ab:4a:95:ba:57:88:69:36:
aa:c0:3b:78:cd:7b:90:9f:41:5b:55:e8:40:30:b9:10:b1:b4:
6f:bc:d5:d4:ef:8d:b5:38:cb:27:48:b5:65:82:84:ea:bd:a7:
81:77:e6:3e:97:28:33:99:53:c9:ba:e0:bb:38:2f:35:d2:8e:
7a:cd:f0:ed:e6:94:25:e3:e2:ae:62:2d:c9:74:9c:9c:e3:e2:
3e:cf:b3:db:4b:f8:2f:30:2c:6a:3f:32:65:f1:16:e3:dc:95:
03:9b:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org