Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gwJC6hcq3KXJSSV9DoWQvi99uXc.roa
File: gwJC6hcq3KXJSSV9DoWQvi99uXc.roa (raw, json)
Hash identifier: O0pMSWkvUBMgsZorfiDnuqvn7Xy3EYaAiTUet4g0hi8=
Subject key identifier: 83:02:42:EA:17:2A:DC:A5:C9:49:25:7D:0E:85:90:BE:2F:7D:B9:77
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B22F2226242CDD46762F247641C967396
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gwJC6hcq3KXJSSV9DoWQvi99uXc.roa
Signing time: Thu 12 Oct 2023 08:12:55 +0000
ROA not before: Thu 12 Oct 2023 08:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 10:56:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:f2:22:62:42:cd:d4:67:62:f2:47:64:1c:96:73:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 12 08:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=830242ea172adca5c949257d0e8590be2f7db977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:05:45:d8:bc:0e:f1:73:47:ef:fe:c1:0a:
26:69:43:9a:d9:1c:91:07:15:e1:ab:f7:e7:d7:fd:
45:5d:ac:1d:0b:05:15:76:37:71:74:c2:b2:d2:26:
3d:85:01:3e:4e:31:89:78:ac:4c:48:72:5b:41:01:
39:84:f8:87:32:e0:84:6a:6f:9d:0e:d5:ec:fc:79:
14:d4:f5:b9:65:01:3f:06:e5:a1:7d:34:1e:95:69:
44:e1:65:f8:0b:d9:7d:4b:34:ee:12:e3:1d:6a:fd:
97:dd:c3:53:f8:9e:18:84:5f:b8:e7:f5:40:57:58:
2e:4a:5f:21:b7:18:7a:b0:7e:64:e6:a8:8c:0b:23:
9b:35:38:50:18:c8:72:a0:3f:1f:61:53:d0:91:a0:
72:90:ca:e9:77:68:47:6d:3e:fe:3d:94:4c:82:b9:
f4:09:ab:4e:44:13:6f:29:24:ea:d5:70:10:b8:e4:
4a:03:0b:a5:b7:ee:af:b6:39:b5:06:fc:f4:77:33:
09:32:81:93:ae:ae:93:aa:f8:8e:49:e1:ef:b0:1c:
f3:c2:95:50:31:01:ef:ed:96:99:cb:fe:ff:bc:f3:
c5:f2:0e:8a:eb:bb:e2:a6:db:44:4d:bf:81:20:af:
0a:04:17:f1:b4:5e:f9:99:cb:cb:01:5b:a6:c1:b5:
3d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:02:42:EA:17:2A:DC:A5:C9:49:25:7D:0E:85:90:BE:2F:7D:B9:77
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/gwJC6hcq3KXJSSV9DoWQvi99uXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/24
46.34.54.0/24
46.34.60.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6b:b1:62:e6:66:f0:ae:24:f7:89:79:48:5d:4c:65:dd:79:
4d:a6:11:91:3d:a8:d9:87:b2:ee:b4:7e:51:52:7e:36:d2:c6:
97:a2:51:89:30:8b:2f:fb:bc:ba:5a:e3:a6:2c:51:60:2d:45:
24:6e:a3:37:c7:8c:4d:d7:e5:5f:13:3a:e5:1f:24:16:37:fa:
cd:3f:43:71:c8:21:56:ee:28:f2:10:28:97:03:76:b4:9a:ae:
66:af:f2:40:2f:c2:2f:c8:01:e1:4f:1e:1c:f9:08:bd:6c:76:
eb:05:59:91:6d:75:83:b6:b1:f9:13:7e:cb:5b:a3:0b:8d:ca:
eb:7b:3e:ff:01:61:af:f1:df:43:d6:34:99:2c:b6:08:fd:8c:
af:cc:b7:62:c2:2d:3d:81:24:78:c2:2c:a5:e4:1a:df:fb:81:
ac:2c:0d:c3:36:44:c1:3a:dd:ed:76:19:28:95:24:d4:d6:75:
da:94:9e:1f:e1:c8:42:10:8e:cf:c0:94:f9:f8:56:f3:ce:84:
39:3a:8f:67:b1:ce:d8:6a:a9:ce:92:b9:05:03:3a:c0:cd:b9:
cb:9a:82:e1:83:f5:18:19:6c:ef:3c:af:0f:94:4a:5b:ec:97:
ec:95:08:dd:1a:44:81:df:1e:08:54:be:b1:e8:b0:6a:cc:de:
c2:d2:78:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org