Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kb_3UhSZBfEOA9e6fSfn9hf8XfE.roa
File: kb_3UhSZBfEOA9e6fSfn9hf8XfE.roa (raw, json)
Hash identifier: hiyCMPPc910smgCN2m9/Gz7naxBe+AiOiNl8iyl0IWw=
Subject key identifier: 91:BF:F7:52:14:99:05:F1:0E:03:D7:BA:7D:27:E7:F6:17:FC:5D:F1
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189E413EC42A293F7358208CD5A8F146258
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kb_3UhSZBfEOA9e6fSfn9hf8XfE.roa
Signing time: Fri 11 Aug 2023 10:10:58 +0000
ROA not before: Fri 11 Aug 2023 10:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.34.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 10:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:13:ec:42:a2:93:f7:35:82:08:cd:5a:8f:14:62:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 11 10:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91bff752149905f10e03d7ba7d27e7f617fc5df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:85:85:7d:e2:7e:0e:d5:a9:5a:1d:11:22:fc:
f6:fe:30:9f:7c:b6:62:ba:fa:e6:50:80:40:5c:4f:
97:bb:ed:d5:9e:b6:ad:f2:aa:1b:e4:18:80:b4:47:
fa:49:b5:2d:df:51:55:ec:cb:90:9c:9b:32:5c:94:
e6:31:55:64:bf:dc:9d:d4:1d:9d:d0:16:1e:5a:77:
fb:37:52:46:5c:a9:71:c6:bd:1f:8d:bb:81:44:96:
91:d2:da:72:6e:c4:83:1f:78:8d:be:24:2a:4d:48:
d4:91:0b:fc:ec:a4:2b:91:2a:99:00:06:ee:eb:68:
76:4f:f3:25:1f:60:3c:f2:2f:2e:e9:63:2d:5b:aa:
8d:f8:1f:ad:1c:4f:20:fe:db:df:4e:33:40:ef:90:
d9:71:f3:fe:c7:2b:0b:29:f3:dc:3b:c7:5c:7b:df:
3f:82:4c:d5:cd:f5:ee:02:a6:06:26:c2:ac:7f:11:
93:78:1c:13:70:93:b8:40:59:4d:b8:8a:cf:dc:a9:
13:c1:d1:3a:41:6c:7a:67:03:7b:1b:23:e1:29:ab:
d4:3b:c8:17:38:21:a1:b8:ad:b5:38:95:fc:d8:0d:
1d:07:eb:b6:79:6b:d2:7c:ed:b3:d6:45:12:1a:7f:
f3:25:58:b8:c0:fe:be:b6:ea:e4:b3:3c:57:62:51:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:F7:52:14:99:05:F1:0E:03:D7:BA:7D:27:E7:F6:17:FC:5D:F1
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/kb_3UhSZBfEOA9e6fSfn9hf8XfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.43.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:93:12:8b:dc:c1:51:f7:a3:d0:45:09:c9:5d:f4:03:08:8d:
94:b2:06:30:16:92:03:3f:58:72:05:6f:27:4f:a8:c4:53:57:
aa:2c:10:37:c8:0d:28:a8:a2:6f:cd:6b:3b:f6:4f:4d:f7:7b:
f5:00:db:ad:fe:d7:00:d1:5a:f8:c4:2e:a4:5d:8b:95:03:1c:
39:bc:40:34:81:79:81:9f:43:d2:d8:6b:4c:c7:14:5a:34:ca:
a8:58:7d:2a:b1:de:fd:68:99:73:8f:aa:45:05:65:43:43:b2:
20:d7:56:36:b4:22:74:fd:dd:e5:86:1a:47:b7:be:e5:6a:d5:
ec:73:87:53:d5:d7:c7:87:c4:e3:e2:25:42:a0:ec:6e:ab:b4:
06:c8:6f:95:3f:10:39:8e:82:23:32:3f:6c:e5:c2:21:b7:44:
9d:2a:7b:5f:96:d4:79:87:db:75:90:ae:44:24:5e:2e:68:1a:
b6:b9:56:2a:b2:30:34:d9:e3:99:a3:85:d6:39:40:0d:b2:30:
83:d7:11:4f:9c:71:a9:6b:b7:f8:be:aa:0b:d4:f4:2d:eb:c7:
ba:d5:84:51:97:18:8b:22:f0:68:14:2d:7e:e4:8c:7c:13:a4:
b0:6a:e2:b2:be:c1:94:f0:7c:e4:9a:7c:e3:d7:f9:2f:87:32:
ca:46:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org