Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/iPvSJ7YTExGaUWGECYPFfJVQwpw.roa
File: iPvSJ7YTExGaUWGECYPFfJVQwpw.roa (raw, json)
Hash identifier: VhgQZ2wJ0A8j3ih8Yx47JS/okiOhzpXf0Bd+er/9a64=
Subject key identifier: 88:FB:D2:27:B6:13:13:11:9A:51:61:84:09:83:C5:7C:95:50:C2:9C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018AB6B1C0F255FC871AEB90F6F8731028D4
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/iPvSJ7YTExGaUWGECYPFfJVQwpw.roa
Signing time: Thu 21 Sep 2023 07:43:37 +0000
ROA not before: Thu 21 Sep 2023 07:43:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.49.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Sep 2023 23:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:b1:c0:f2:55:fc:87:1a:eb:90:f6:f8:73:10:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 21 07:43:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88fbd227b61313119a5161840983c57c9550c29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:14:5e:11:e8:95:ce:ba:aa:de:49:27:c1:
39:14:b1:2c:e6:5b:97:79:98:a1:90:47:e0:96:7a:
22:91:2d:e1:8d:11:ad:1c:5f:05:75:b0:ad:c2:80:
f8:5d:85:06:04:9a:96:d0:32:5f:a5:1b:fe:1e:30:
64:81:21:f3:7b:ec:a9:ff:df:49:98:50:6b:56:7b:
4b:83:4c:68:17:85:41:dc:9c:9f:04:d1:da:43:9d:
2a:08:b8:e2:82:6f:37:c2:90:8a:78:08:40:a7:25:
eb:83:9d:6e:2d:04:64:aa:db:d8:f5:ce:9c:b8:d5:
00:dc:de:05:7b:33:71:1a:33:9c:ab:1b:ae:7e:b3:
86:bd:5e:fc:80:d3:9c:e3:ca:e4:32:58:94:4a:85:
e5:d4:d0:7c:ec:b6:aa:ec:6c:9f:32:c7:52:3b:71:
d5:fa:30:d3:fe:9a:96:ca:b2:de:47:7b:a3:7d:89:
f6:76:4c:a3:51:09:bb:da:ce:a7:79:05:d7:4d:2b:
de:02:0f:a0:48:29:58:46:f4:38:82:35:23:e8:23:
fa:a7:cd:a7:43:af:f7:f5:24:d7:64:e9:75:83:de:
49:08:04:a3:cb:d5:fd:f8:4f:6d:af:f2:ea:44:1f:
07:ad:6d:3d:3f:40:37:81:ec:7b:68:ad:8c:a1:a5:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FB:D2:27:B6:13:13:11:9A:51:61:84:09:83:C5:7C:95:50:C2:9C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/iPvSJ7YTExGaUWGECYPFfJVQwpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.49.0/24
46.34.55.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bb:5c:88:b3:47:19:8d:51:8b:0c:8a:16:12:5c:56:28:36:
f9:9f:c7:2c:a7:af:09:64:3a:45:99:9d:59:88:91:3f:c1:8a:
bd:c9:1c:38:50:9e:7e:df:50:8e:e4:7b:f8:0b:e8:00:cb:4a:
a6:4d:89:97:15:0e:02:3b:ee:49:25:e0:2a:54:40:64:b0:8a:
a2:17:ff:10:b9:c9:0b:c4:17:4b:01:af:c5:16:fb:99:39:cd:
42:68:0c:e6:da:b8:47:3c:b4:bf:99:8d:44:51:c5:b7:c1:63:
e0:19:37:5e:40:4f:67:4e:32:4c:8a:df:cc:f8:bc:63:70:e9:
5e:bc:b1:a8:81:61:c4:aa:e9:8b:d7:6e:cb:90:e3:57:4e:bd:
1d:84:b2:51:9d:66:74:a4:e2:bd:39:88:fa:49:e0:50:a0:fa:
56:bc:01:48:db:55:7d:3e:15:2c:73:53:96:e2:57:74:65:93:
9f:3a:d9:94:42:3c:3c:dd:e9:94:11:51:01:f7:94:ee:bb:38:
aa:b6:c1:fc:bf:95:bd:da:a0:39:57:66:c0:55:a6:69:50:29:
95:68:67:9b:51:70:2d:22:59:83:b4:80:bb:74:38:61:ad:0d:
8b:10:bb:d5:28:87:24:85:43:fc:e3:9f:cf:f5:fd:2f:88:e7:
1d:41:2f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org