Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/igj78oPVD3UtWsdfM8okwb9x5wQ.roa
File: igj78oPVD3UtWsdfM8okwb9x5wQ.roa (raw, json)
Hash identifier: mLV69qGlkN2j839e3KfU1baB2Dy0LudwMPnD17rwtdI=
Subject key identifier: 8A:08:FB:F2:83:D5:0F:75:2D:5A:C7:5F:33:CA:24:C1:BF:71:E7:04
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B1A07B95846E80325C062EFE33A0EDEA6
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/igj78oPVD3UtWsdfM8okwb9x5wQ.roa
Signing time: Tue 10 Oct 2023 14:39:55 +0000
ROA not before: Tue 10 Oct 2023 14:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Oct 2023 08:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:07:b9:58:46:e8:03:25:c0:62:ef:e3:3a:0e:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 10 14:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a08fbf283d50f752d5ac75f33ca24c1bf71e704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:40:43:cf:76:f2:b8:fa:20:c3:b3:0b:fc:
41:a9:97:c0:20:f5:07:dc:18:81:5f:e3:9c:95:95:
6e:99:4c:f0:2b:14:cc:6e:e7:db:e9:53:5e:6b:16:
b3:da:6c:c5:52:12:9e:aa:da:32:39:01:82:ec:9c:
1d:54:3b:17:9a:e5:af:d0:59:8a:6b:a1:ce:55:27:
c9:ed:3b:6f:de:53:ee:ec:59:45:14:2b:ee:8f:4a:
0d:b8:51:df:6d:40:d2:76:1c:f9:d3:01:a5:99:46:
64:57:a0:57:02:2f:34:5b:90:e7:01:c8:aa:15:d4:
4f:f2:b2:3f:67:ef:fb:70:b4:75:b8:8f:61:56:16:
57:fd:81:b1:96:c6:52:9b:d1:cd:2c:a1:94:ff:5d:
14:d6:1d:19:dd:cf:83:d6:8b:70:82:3b:68:f2:0d:
d6:ca:60:50:4b:5a:6b:b6:c4:60:38:44:4e:78:f3:
ee:b7:56:2c:51:e9:b5:03:b5:4a:d0:c4:7f:f4:c3:
88:cb:fa:04:87:37:fe:bd:b0:94:cd:21:6a:a9:18:
0d:e3:45:c5:e1:cf:f9:f1:f8:25:f1:75:a5:5d:8b:
d4:cd:82:e8:7f:ba:71:88:26:db:7e:73:01:fb:5a:
51:7a:32:d7:c5:bc:ef:fe:c3:aa:34:7c:3c:aa:68:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:FB:F2:83:D5:0F:75:2D:5A:C7:5F:33:CA:24:C1:BF:71:E7:04
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/igj78oPVD3UtWsdfM8okwb9x5wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/24
46.34.54.0/24
46.34.61.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
62:72:67:79:4f:42:e0:0a:a7:34:08:d0:6f:39:24:d2:e3:3a:
e1:2e:c0:47:b4:44:a3:96:93:92:88:a6:38:f1:53:3d:04:58:
5c:0e:97:e0:63:de:8f:4b:5c:20:de:44:2d:fc:2c:ed:ce:e7:
cf:f2:58:ae:0f:3c:d0:45:fd:e7:b6:03:14:25:73:97:c7:30:
32:03:84:a7:33:c0:73:56:a3:57:1c:9d:19:33:40:e9:c2:e6:
33:65:75:9b:02:77:ec:8a:24:6d:42:d2:fb:9c:1b:ba:9e:2f:
81:b8:b2:69:98:93:7c:c0:6b:9f:68:42:b2:0a:8e:39:b9:af:
b2:67:f3:fb:54:2b:6f:96:51:23:b9:d6:93:03:56:10:8d:88:
d3:a6:8c:25:d5:d6:3a:6d:c0:60:05:db:8e:e7:51:7b:2e:48:
e6:90:68:03:1a:7c:b4:97:e3:5d:f3:3b:5a:2a:20:40:14:04:
ca:61:11:8c:76:3d:bb:46:93:0a:cb:11:64:85:fa:9e:b7:78:
b5:82:39:f6:e1:1a:4b:ef:1e:e0:62:55:d1:69:8a:a9:9f:cf:
a8:0a:90:c5:0a:47:e9:92:db:b3:92:44:36:cf:18:70:90:23:
7c:fe:bb:5d:d4:10:63:f5:13:f7:ba:7a:78:7b:fd:41:b6:5a:
4c:a3:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org