Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fuaxkSaA8lfDezVexAYq6LsWuH4.roa
File: fuaxkSaA8lfDezVexAYq6LsWuH4.roa (raw, json)
Hash identifier: J+XTRclwF9y0g9Adke7gMJWMWqZ+D71mHwVb1apK1TQ=
Subject key identifier: 7E:E6:B1:91:26:80:F2:57:C3:7B:35:5E:C4:06:2A:E8:BB:16:B8:7E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018BF236D4FAE43ECEC7BE327F0D2F26F62D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fuaxkSaA8lfDezVexAYq6LsWuH4.roa
Signing time: Tue 21 Nov 2023 14:09:21 +0000
ROA not before: Tue 21 Nov 2023 14:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 46.34.44.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 10:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:36:d4:fa:e4:3e:ce:c7:be:32:7f:0d:2f:26:f6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 21 14:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee6b1912680f257c37b355ec4062ae8bb16b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:ed:de:2d:c8:a3:29:49:7c:e2:81:fb:19:
b1:a3:b8:90:e3:46:1f:64:30:1e:0f:bc:7c:37:a9:
31:81:cf:7b:09:59:23:25:7e:b4:b7:db:f2:f6:aa:
da:84:93:7a:13:c9:9e:7d:8f:3f:18:59:4f:06:0d:
b3:1f:13:2b:6c:11:08:1e:d3:03:22:8e:bc:c2:16:
06:cb:fe:d6:b0:dd:91:89:94:35:7e:b7:08:a3:1f:
e6:bf:5f:22:7f:3f:5f:33:8d:d3:91:68:77:28:30:
6d:9b:ee:47:8b:62:e6:cd:29:72:7e:01:70:df:7b:
bc:c7:a2:13:67:dc:22:bf:49:b2:3a:cc:d3:4c:2d:
a2:56:46:8b:77:35:f8:17:10:3f:bb:72:93:ce:e9:
b7:2d:d4:51:89:c3:56:de:6b:a1:fb:5f:d6:b9:0e:
72:6a:c3:07:b4:45:54:6d:bb:3b:63:b6:d7:55:b5:
1e:74:76:e8:e6:42:b5:53:fe:41:39:9e:22:83:4f:
a4:b7:4c:db:fe:10:cf:bf:e6:01:9c:5a:e3:94:84:
11:70:dd:2a:d0:a9:ef:21:85:64:f4:02:75:24:47:
1c:27:34:13:27:37:8f:24:b0:8e:fc:09:17:0a:78:
e6:3a:d0:e2:b8:32:e3:29:6d:9b:38:da:05:71:41:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:B1:91:26:80:F2:57:C3:7B:35:5E:C4:06:2A:E8:BB:16:B8:7E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/fuaxkSaA8lfDezVexAYq6LsWuH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.44.0/23
46.34.61.0/24
Signature Algorithm: sha256WithRSAEncryption
59:16:10:c8:fc:51:48:46:9f:38:bf:f0:ca:ec:dd:ae:33:d5:
55:be:51:34:df:36:04:64:ec:14:8f:a3:4d:47:84:4b:0c:9b:
7b:41:eb:b9:10:92:a2:b8:16:92:8f:d0:73:03:1e:22:eb:9e:
2d:61:42:30:85:94:37:a9:e6:f7:2e:8a:77:cf:4c:6a:49:ad:
1f:99:74:c8:40:a6:e4:39:60:b6:fd:74:dd:59:ef:8c:5d:87:
d6:9b:e2:52:12:dc:4a:7d:79:35:b6:1c:00:02:90:1c:20:c3:
e8:30:9e:f9:59:28:33:1a:ab:9d:d6:67:05:c8:5f:5d:89:a5:
6c:b8:dc:b4:8d:46:e9:6c:9a:7a:12:ee:15:35:f1:fd:58:51:
22:22:ed:0f:21:46:2c:d2:d6:51:af:29:b5:21:f5:ea:4e:8e:
71:07:9a:a0:ef:b3:fb:f3:ba:ed:3c:35:fb:e7:5e:44:88:ee:
d9:c3:81:2f:f2:5c:9e:5b:4a:0a:3e:28:66:fa:4d:12:97:53:
eb:92:b2:ba:eb:02:1f:24:d1:c2:ab:52:39:93:a0:02:94:26:
46:5d:14:a4:d8:ec:a4:7b:6f:93:73:3a:32:78:0d:d2:3a:f2:
96:d0:93:78:a7:98:a3:56:27:2e:14:c5:fa:2c:5b:c7:f2:6f:
36:c5:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org