Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n4Vr1yb3Snod6-uxvGkw9U1OygE.roa
File: n4Vr1yb3Snod6-uxvGkw9U1OygE.roa (raw, json)
Hash identifier: B9lD46kLtfyGOZCZL1ZUttucpZ5vHYyGuq6RJAmuYIk=
Subject key identifier: 9F:85:6B:D7:26:F7:4A:7A:1D:EB:EB:B1:BC:69:30:F5:4D:4E:CA:01
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B9019415275F4286DA9B59CE6D5832356
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n4Vr1yb3Snod6-uxvGkw9U1OygE.roa
Signing time: Thu 02 Nov 2023 12:54:16 +0000
ROA not before: Thu 02 Nov 2023 12:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 13:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:19:41:52:75:f4:28:6d:a9:b5:9c:e6:d5:83:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 2 12:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f856bd726f74a7a1debebb1bc6930f54d4eca01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:73:5c:aa:c3:49:e1:93:a1:6c:94:e5:37:
42:d0:c7:43:b4:ce:07:39:d9:5e:a6:c7:a3:82:37:
cf:ee:32:25:83:e8:d2:02:e7:fa:5d:b7:72:58:12:
1a:e4:af:a8:08:e9:81:13:24:b0:1d:8b:84:c4:c3:
f3:40:15:72:98:b1:59:7f:d7:26:f7:66:83:d0:fc:
49:96:e7:40:dd:cc:cc:ba:73:fe:b1:f7:28:5c:86:
e0:2b:69:66:1b:21:35:fb:ac:39:69:6d:6c:32:3f:
2e:dd:99:30:46:8c:92:0c:32:87:35:1b:5d:1e:65:
29:b9:36:82:c5:e9:ad:df:ce:e7:e2:d6:e8:60:01:
b9:8a:6a:17:fa:ef:11:38:be:db:e5:4b:ba:e2:b1:
96:c1:0d:bd:94:91:1c:cb:3a:61:58:ab:1d:0b:8e:
2a:99:f7:cf:85:bb:66:df:a4:25:41:e3:01:37:58:
34:58:26:80:d6:b3:9a:83:82:b4:4c:9d:24:98:11:
e1:64:06:a3:b0:a6:ae:fc:34:5b:23:47:3c:a5:3c:
af:5d:0e:e7:7b:f3:db:f4:f0:cb:6a:4d:ce:6a:4b:
57:c4:67:2b:45:92:13:88:da:9f:4a:cc:db:02:67:
0f:08:ca:b8:75:79:c4:1a:1e:b2:9e:76:b4:f4:26:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:6B:D7:26:F7:4A:7A:1D:EB:EB:B1:BC:69:30:F5:4D:4E:CA:01
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n4Vr1yb3Snod6-uxvGkw9U1OygE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fd:93:9d:07:05:3e:07:6f:ef:3c:20:82:72:9a:e4:3b:e0:
a1:8a:50:bc:20:e7:20:69:df:a9:31:c1:88:e8:f1:6e:bc:11:
b6:78:ae:2a:75:94:72:64:ed:af:02:07:42:01:70:0b:9b:53:
8c:a9:b1:7e:16:18:72:7e:1d:e2:a3:bd:d7:e7:10:24:01:95:
c3:0f:c9:20:25:f8:ab:63:1d:98:7f:24:bc:c2:5d:b4:82:9a:
eb:53:6d:a3:35:2c:fa:a8:51:7d:31:1e:d4:2f:f3:df:b7:4e:
cc:d2:54:e0:9e:a5:72:40:46:ff:74:b2:b2:96:cf:47:e5:56:
c0:44:51:b9:c5:92:32:d2:df:d5:c6:72:9d:94:a7:f6:19:c7:
b7:dd:81:00:8d:4c:f6:08:7b:49:fa:1a:29:e7:1f:ff:05:3d:
9b:2e:ca:4b:6e:dd:09:cc:55:f2:f8:50:65:46:4f:0d:6a:98:
3c:07:47:16:27:7f:bb:d0:af:2a:a9:6f:5e:ff:29:a7:36:fa:
8d:68:88:1a:c6:06:f0:18:63:00:27:ed:9e:23:69:30:aa:a7:
9a:26:08:b3:8b:de:d4:2e:24:c5:f7:1b:17:30:f4:12:64:fb:
48:d0:87:d0:0d:c3:c3:c3:df:ec:c3:5d:fc:7a:83:57:bf:ec:
c9:44:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org