Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ibNJSiwckIdCgLf-6t3Pm7BREnE.roa
File: ibNJSiwckIdCgLf-6t3Pm7BREnE.roa (raw, json)
Hash identifier: 8i1ONGRBQvLsMX7MipAFD+M0Dq1VCHEigg5C2eKkZps=
Subject key identifier: 89:B3:49:4A:2C:1C:90:87:42:80:B7:FE:EA:DD:CF:9B:B0:51:12:71
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B8655DD5CDCC28BAE555E4F5F546E9E3B
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ibNJSiwckIdCgLf-6t3Pm7BREnE.roa
Signing time: Tue 31 Oct 2023 15:24:15 +0000
ROA not before: Tue 31 Oct 2023 15:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 46.34.44.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Nov 2023 14:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:55:dd:5c:dc:c2:8b:ae:55:5e:4f:5f:54:6e:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 31 15:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b3494a2c1c90874280b7feeaddcf9bb0511271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:8b:13:f6:a2:38:77:d0:21:3b:90:83:8b:
d7:a5:06:22:19:60:1b:2c:65:2c:7d:fc:7a:25:8b:
74:b7:17:b6:44:45:d4:f7:65:a0:1f:0d:d5:14:7a:
bb:fc:aa:bc:16:38:95:83:76:bd:eb:1a:f5:81:4e:
15:87:e1:f5:76:8f:c9:1d:56:9a:50:24:9c:30:6d:
03:bb:6a:e7:68:44:0e:d2:16:98:0b:3e:2c:84:c2:
8c:76:8b:27:44:28:a1:89:0e:c6:d4:75:2a:14:04:
0f:8e:6e:89:74:a3:9c:79:09:95:b8:a1:22:cd:e1:
7c:07:2b:0a:04:57:62:38:52:7c:6f:80:51:a5:02:
ac:06:a5:3d:6e:da:f7:d2:78:e2:6e:7a:84:10:c1:
53:58:14:16:7e:2d:f0:a4:cd:35:42:c9:bf:33:8c:
90:b6:94:71:f6:fa:7d:b2:2c:a5:40:c1:b0:3d:c4:
cc:2a:f0:1a:d3:91:7c:0f:1c:97:f4:fd:85:8c:17:
2f:78:b9:5c:18:6e:28:11:06:06:89:d2:c0:60:5b:
a8:69:42:7c:a1:e9:81:b9:92:d9:a3:d2:2e:22:63:
ab:b4:49:bf:fc:6c:65:19:94:7f:f8:c7:27:5b:0c:
0f:66:c5:93:bd:b1:1b:f7:67:f2:21:17:97:3c:3d:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B3:49:4A:2C:1C:90:87:42:80:B7:FE:EA:DD:CF:9B:B0:51:12:71
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/ibNJSiwckIdCgLf-6t3Pm7BREnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.44.0/23
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
08:80:30:bc:58:b0:d5:20:66:95:83:6e:65:2c:9e:39:7a:dd:
49:6d:12:6e:ca:c2:a7:e2:cc:af:a8:53:65:26:0a:d6:2b:10:
e8:be:3f:25:e0:a8:31:3a:dc:59:37:9e:78:83:f6:71:66:87:
3a:b8:ae:85:44:cd:49:65:2c:2b:68:02:4e:48:5d:51:c1:b0:
3b:ad:ff:c1:70:95:95:49:21:ef:49:1e:0b:a0:e8:80:08:15:
58:ed:01:82:31:40:cb:56:df:36:41:ed:41:a3:ca:cc:42:82:
19:ac:2e:d3:b8:20:3e:55:70:19:dc:bf:ed:bc:49:14:3e:a8:
0e:24:a4:ec:23:df:0c:ea:4a:2d:ac:17:27:1e:c1:98:8c:22:
43:5d:86:37:4c:68:e2:19:18:11:9a:94:f8:d1:00:56:ef:c4:
cc:63:c0:aa:1c:6f:98:12:0a:20:b8:bf:e1:51:24:4b:44:97:
85:9e:d8:70:bd:35:68:1b:b8:e1:8d:25:ad:b8:e5:82:c8:97:
d8:eb:a6:53:97:dc:8e:45:02:ea:58:a8:48:4e:73:14:b1:8e:
28:1b:4c:19:3d:16:aa:10:66:3b:c8:30:b8:8a:60:7b:6c:ee:
61:5c:5f:ee:1e:bf:73:9c:2b:cd:3b:82:02:8a:64:60:ec:55:
1f:ac:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org