Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gcT2ux6Zrywm_U6EELVHjcETxKM.roa
File: gcT2ux6Zrywm_U6EELVHjcETxKM.roa (raw, json)
Hash identifier: UBX2vO2JoqFxmpZzzK2SdGumN5jCEJBwIAbL3M/i7y8=
Subject key identifier: 81:C4:F6:BB:1E:99:AF:2C:26:FD:4E:84:10:B5:47:8D:C1:13:C4:A3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018BFBFC0E2940A3B296598AF80F38B58E16
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gcT2ux6Zrywm_U6EELVHjcETxKM.roa
Signing time: Thu 23 Nov 2023 11:41:21 +0000
ROA not before: Thu 23 Nov 2023 11:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 25 Nov 2023 09:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:fc:0e:29:40:a3:b2:96:59:8a:f8:0f:38:b5:8e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 23 11:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c4f6bb1e99af2c26fd4e8410b5478dc113c4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:5f:77:d8:d5:fa:bb:77:b4:cb:96:c2:5d:
90:f2:94:da:99:22:26:20:e5:69:ce:c3:41:97:ee:
8b:20:c7:8c:3e:83:c8:98:99:7d:54:ef:fd:e7:13:
50:f6:11:91:ee:e5:54:f7:aa:56:91:e6:83:7b:08:
09:7a:6e:86:aa:5b:14:79:6a:ba:58:eb:00:94:78:
83:da:1f:3a:27:d4:eb:0d:09:35:37:7c:e8:92:19:
d5:72:54:d8:cd:dc:d4:44:e7:c0:7c:8a:77:a8:02:
d9:8b:a5:9a:80:c2:3b:ee:7a:0f:4b:38:b8:ba:1b:
b7:9c:39:d7:cc:a0:bb:7f:81:d5:b3:0d:eb:83:09:
b8:94:70:85:c8:fb:31:b5:e7:e9:1e:ea:af:d1:b5:
4e:72:f0:89:2e:19:6d:d5:cc:79:23:1b:b8:e9:91:
b9:91:6e:68:52:ab:b8:66:a5:05:3f:79:bb:c3:13:
41:f0:d8:df:5c:28:a2:de:9c:78:3a:4b:e2:74:a9:
cb:8e:f9:b2:01:89:b8:62:28:89:6d:1e:85:e3:7b:
d2:a5:8f:35:bc:cf:28:62:1f:b7:5c:0e:7e:51:a0:
4a:0d:ba:5c:e4:e5:99:9a:0e:59:82:1a:be:f2:f1:
2e:20:e3:e3:5c:cf:05:64:a9:38:21:6a:b8:d8:e5:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C4:F6:BB:1E:99:AF:2C:26:FD:4E:84:10:B5:47:8D:C1:13:C4:A3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gcT2ux6Zrywm_U6EELVHjcETxKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.55.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ab:7f:85:e7:50:6d:05:fc:7c:a0:11:0c:49:9e:03:ad:b8:
29:9b:9b:61:47:0a:f8:76:44:60:12:31:6f:ba:d6:ff:11:d7:
f2:12:b7:6a:72:e8:81:e6:90:50:3f:ca:ea:a7:95:4a:05:9d:
ec:04:53:31:20:f6:65:71:3d:df:74:8c:21:58:e7:bc:c6:76:
13:c5:b6:cc:8e:ca:a7:d3:68:42:58:c8:85:04:1f:03:12:a0:
3f:7c:e4:61:c7:bf:4e:1e:2d:d3:08:69:d5:c1:f7:3b:82:0c:
23:b4:36:ed:84:2f:ee:ca:3c:f8:bf:82:da:a2:cd:9f:b3:c9:
cd:de:ed:9e:6a:21:ed:f5:87:48:c6:14:3e:e2:9f:03:c7:f9:
f5:38:c3:36:96:9d:1d:f7:65:7a:03:0b:08:52:a1:bf:93:10:
8d:5d:52:cc:10:90:8c:1f:53:59:04:6f:bc:5e:2b:08:cb:5e:
6b:a3:a7:cb:37:46:d0:8f:b9:f2:a8:d2:12:f4:99:a7:af:d2:
e5:ea:bc:da:8c:65:f4:61:a0:64:b0:0c:42:af:cc:6b:52:bc:
d0:d4:50:89:73:58:8a:fa:d0:cc:16:ab:ba:d6:86:44:1b:c4:
e2:5f:a1:8b:ae:cb:46:7a:94:1e:13:b8:77:da:cd:41:1f:dc:
68:c4:e3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org