Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/mJg6BQmyCWSBuvxyBQS3lXvzf1E.roa
File: mJg6BQmyCWSBuvxyBQS3lXvzf1E.roa (raw, json)
Hash identifier: CRdZ0iT1Zd6kVbKJQkWi/jd77vFF0pbNoxM5RkLcSKg=
Subject key identifier: 98:98:3A:05:09:B2:09:64:81:BA:FC:72:05:04:B7:95:7B:F3:7F:51
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF76C289779D1135ACF08FA3467F6
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/mJg6BQmyCWSBuvxyBQS3lXvzf1E.roa
Signing time: Tue 02 Jan 2024 10:33:08 +0000
ROA not before: Tue 02 Jan 2024 10:33:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399045
IP address blocks: 46.34.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f7:6c:28:97:79:d1:13:5a:cf:08:fa:34:67:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98983a0509b2096481bafc720504b7957bf37f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:5c:68:89:8e:a0:46:6a:c9:05:08:be:be:
b8:cf:80:99:ed:b0:e8:c7:7b:5f:a3:dc:a5:dd:2e:
e6:35:72:9d:76:d4:22:e9:c7:40:e3:39:44:4c:68:
4a:dc:59:c6:3f:d2:ca:0c:e6:11:04:48:d2:47:22:
c8:23:98:09:0a:67:99:32:67:c5:bd:14:41:0f:0c:
37:ef:ed:41:f0:df:c2:7e:5c:62:e2:a1:24:9d:a2:
b8:1f:a4:c3:52:6c:80:61:11:fa:9b:ab:74:93:93:
6a:a8:5f:e1:48:d0:5d:95:bf:a0:1f:2d:f8:6b:82:
2a:01:78:21:0c:6e:7f:d6:01:53:4f:53:cd:bf:41:
2a:b4:90:63:95:3e:3a:7e:c6:6e:65:ee:73:75:3d:
af:f8:5c:80:b9:c1:18:74:32:23:d5:b7:7f:18:40:
90:18:b0:12:40:d6:f0:9c:42:39:28:f8:af:78:b5:
5e:dc:5c:10:20:c8:c6:d4:fa:5b:d5:90:1d:ad:05:
d5:76:8e:75:16:2d:02:21:41:38:4a:8e:48:41:09:
21:1e:61:3e:06:fe:68:05:45:4d:73:df:39:e3:50:
49:bb:76:cb:7a:27:3d:92:8e:de:25:b1:5e:64:ce:
f1:b5:02:3f:1d:05:fe:92:d3:a1:c1:81:d4:b8:21:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:3A:05:09:B2:09:64:81:BA:FC:72:05:04:B7:95:7B:F3:7F:51
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/mJg6BQmyCWSBuvxyBQS3lXvzf1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.59.0/24
Signature Algorithm: sha256WithRSAEncryption
15:36:2c:3c:58:27:97:54:d4:3c:b3:93:83:97:22:22:8f:44:
c5:75:4c:31:41:da:51:16:06:2c:0d:60:4c:29:95:11:d9:45:
bd:84:a8:43:9b:ad:b6:c4:7a:b1:84:4a:44:11:cf:ea:24:66:
73:d5:c1:23:de:d5:3b:6d:2e:b1:33:5e:61:99:e9:59:97:f6:
b0:0d:59:82:e4:00:07:77:d4:26:d7:ef:af:c1:53:a3:b0:f6:
ae:28:13:32:81:4a:a2:73:35:2d:aa:90:bf:85:b3:aa:71:b7:
b5:7e:c5:da:3b:fd:cb:9a:cd:38:4b:d6:9f:7e:06:42:17:16:
91:e2:1f:63:6a:b5:28:4b:df:66:4f:16:ca:19:e0:4a:9c:c4:
10:f8:09:85:52:ed:4e:d8:ee:e9:ff:74:8f:1d:46:73:fb:e5:
bc:10:7e:7a:bd:12:2c:c0:9e:46:5d:76:47:cb:1e:12:51:98:
42:51:f0:43:ef:e6:09:a1:39:31:cb:a5:9f:f5:5a:df:8a:22:
45:d6:0e:51:bf:6f:bc:c4:f8:f7:33:56:eb:48:8c:ed:c5:7f:
d3:06:7e:78:5b:c5:70:d0:4a:ff:fd:e0:89:d8:11:32:8e:da:
92:5c:c6:92:1f:b7:7f:b9:02:f5:e4:1e:d5:d3:5b:75:5f:2a:
81:4d:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org