Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/krAYo7k7EDR0m5vWsejOQVM1JaE.roa
File: krAYo7k7EDR0m5vWsejOQVM1JaE.roa (raw, json)
Hash identifier: WkzWg/9YZXs6eCODPp0qjPpyepzl2PEI6WlVGbUIaeA=
Subject key identifier: 92:B0:18:A3:B9:3B:10:34:74:9B:9B:D6:B1:E8:CE:41:53:35:25:A1
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A6E8FD419F93A984A32ED2DE9919F8AA1
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/krAYo7k7EDR0m5vWsejOQVM1JaE.roa
Signing time: Thu 07 Sep 2023 07:33:54 +0000
ROA not before: Thu 07 Sep 2023 07:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.34.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 17:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:8f:d4:19:f9:3a:98:4a:32:ed:2d:e9:91:9f:8a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 7 07:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92b018a3b93b1034749b9bd6b1e8ce41533525a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:d4:11:34:d0:a4:bf:db:29:8f:e6:4c:f9:
c2:3b:f8:41:4e:75:c3:60:81:24:ee:76:f8:c1:35:
65:0f:4a:e4:60:48:25:9f:10:90:31:89:f0:e7:42:
b1:33:b8:0f:60:44:76:18:90:6f:c0:14:b2:9c:e7:
d7:f3:66:41:e6:40:95:e8:02:9d:50:69:18:cb:f4:
07:76:89:eb:20:d7:e4:c6:21:11:c7:d8:3b:cc:d7:
ca:49:cf:ee:93:56:d9:2d:be:12:22:7b:34:bc:00:
ec:2e:bb:8e:f1:fe:7d:66:52:73:0d:b4:bc:01:44:
03:b3:55:34:c4:97:5b:68:a0:c2:4f:38:76:79:3b:
23:65:1e:6b:2d:e8:e0:ab:8a:9f:78:bb:55:b5:2a:
32:d9:4e:89:a4:c7:cf:8d:73:db:7f:58:a1:bc:23:
92:4c:74:09:04:f2:e7:9f:8d:7f:4c:b0:fa:1c:eb:
6e:de:09:e5:bc:38:59:7e:25:35:0c:30:30:ce:d4:
9a:eb:9b:3b:39:f1:93:17:99:70:4a:cb:28:92:d0:
1c:72:16:bc:60:13:ef:db:c9:a7:63:96:8d:78:41:
42:ab:67:a2:bb:53:90:76:78:d6:05:8a:db:33:68:
c9:8f:16:ba:3d:76:ba:71:68:b3:87:c7:a9:df:e7:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B0:18:A3:B9:3B:10:34:74:9B:9B:D6:B1:E8:CE:41:53:35:25:A1
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/krAYo7k7EDR0m5vWsejOQVM1JaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5f:ba:22:fc:d1:d4:e2:ad:24:24:98:7c:d0:40:84:24:e1:
e2:28:0c:0e:a8:2d:84:44:78:bf:73:dd:6e:d0:8b:7a:54:84:
5a:c7:96:ef:e6:62:8f:a6:93:3a:02:b5:65:f4:37:be:7f:00:
8e:c0:7a:52:f8:1e:05:56:8a:5b:1a:65:7b:d7:8c:ee:4c:22:
28:e5:12:f1:4a:46:cc:a1:5e:88:b9:22:41:08:42:cf:d6:0e:
71:41:9c:58:23:6b:45:6e:15:a5:d2:bd:23:f8:48:43:c3:01:
5f:d1:2b:af:53:6d:90:f8:8f:48:a4:12:c2:e2:0d:9f:9f:36:
7d:8d:50:d0:6e:6e:02:06:c3:b8:b8:51:e8:b3:a7:57:4b:ee:
fd:54:b9:6d:0d:01:a5:49:e1:b8:49:dc:0f:8d:0f:e4:88:d2:
89:33:f7:d4:02:fd:82:6c:4f:5e:9b:96:fb:b9:01:ea:02:e3:
5e:44:94:bc:7b:3e:f8:79:24:eb:f6:9e:0d:13:13:35:1c:9f:
62:5d:97:1f:ce:fb:65:20:5c:2c:a0:43:b8:ec:e8:d2:de:2e:
24:ec:42:c3:54:54:66:81:82:4e:e6:c9:f0:08:5a:c3:67:e2:
f3:d4:25:ba:7e:69:27:9e:7c:a8:8a:ca:f2:87:85:05:65:91:
d3:e1:6e:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpuj9QZ+TqYSjLtLemRn4qhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwOTA3MDczMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmIwMThhM2I5M2IxMDM0NzQ5YjliZDZiMWU4Y2U0MTUzMzUyNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7bUETTQpL/bKY/mTPnCO/hBTnXD
YIEk7nb4wTVlD0rkYEglnxCQMYnw50KxM7gPYER2GJBvwBSynOfX82ZB5kCV6AKd
UGkYy/QHdonrINfkxiERx9g7zNfKSc/uk1bZLb4SIns0vADsLruO8f59ZlJzDbS8
AUQDs1U0xJdbaKDCTzh2eTsjZR5rLejgq4qfeLtVtSoy2U6JpMfPjXPbf1ihvCOS
THQJBPLnn41/TLD6HOtu3gnlvDhZfiU1DDAwztSa65s7OfGTF5lwSssoktAccha8
YBPv28mnY5aNeEFCq2eiu1OQdnjWBYrbM2jJjxa6PXa6cWizh8ep3+fgLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJKwGKO5OxA0dJub1rHozkFTNSWhMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEva3JBWW83azdFRFIwbTV2V3Nlak9RVk0xSmFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiInMA0G
CSqGSIb3DQEBCwUAA4IBAQByX7oi/NHU4q0kJJh80ECEJOHiKAwOqC2ERHi/c91u
0It6VIRax5bv5mKPppM6ArVl9De+fwCOwHpS+B4FVopbGmV714zuTCIo5RLxSkbM
oV6IuSJBCELP1g5xQZxYI2tFbhWl0r0j+EhDwwFf0SuvU22Q+I9IpBLC4g2fnzZ9
jVDQbm4CBsO4uFHos6dXS+79VLltDQGlSeG4SdwPjQ/kiNKJM/fUAv2CbE9em5b7
uQHqAuNeRJS8ez74eSTr9p4NExM1HJ9iXZcfzvtlIFwsoEO47OjS3i4k7ELDVFRm
gYJO5snwCFrDZ+Lz1CW6fmknnnyoisryh4UFZZHT4W7E
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org