Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n_gqmKdmwRS5Mx3cevbGiAXyeKg.roa
File: n_gqmKdmwRS5Mx3cevbGiAXyeKg.roa (raw, json)
Hash identifier: 44IDXUSwTjxkLSFuRadmV/JXfNS9NX33b0AKbaqVNh4=
Subject key identifier: 9F:F8:2A:98:A7:66:C1:14:B9:33:1D:DC:7A:F6:C6:88:05:F2:78:A8
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CC9BBF4D9F24346F986E4B713B9F942CF
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n_gqmKdmwRS5Mx3cevbGiAXyeKg.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 12:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f4:d9:f2:43:46:f9:86:e4:b7:13:b9:f9:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ff82a98a766c114b9331ddc7af6c68805f278a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:99:8f:1f:3d:e2:0f:12:c6:a6:95:47:3e:
e6:8b:bc:8c:6d:73:3e:3c:0d:7e:1f:7e:c9:33:7e:
96:b9:d1:f6:90:94:ec:a9:af:ee:7a:92:3c:e4:b1:
58:a7:ea:3c:63:88:7b:8d:07:5a:63:50:d1:9c:be:
cb:f1:1e:d1:ca:30:bf:0c:de:ff:84:c3:b3:fe:66:
0f:93:2f:0d:80:44:8e:aa:1f:51:6e:04:1c:76:aa:
40:d6:b1:96:b5:d7:85:d3:09:cf:21:0b:26:4d:26:
74:6a:79:22:82:06:93:09:36:21:f2:34:cf:f9:6a:
fd:90:b2:54:52:eb:9e:13:c8:5b:dd:b9:4a:76:86:
4a:80:6f:65:aa:e9:b2:6b:ab:d4:3e:f2:6f:5c:0f:
0a:5b:36:d4:e5:99:79:38:80:00:fb:72:de:d9:b0:
6d:18:ec:23:43:8a:d2:7c:5c:46:07:12:aa:c3:5c:
f3:39:4a:6d:26:47:6d:5f:a3:73:f4:59:14:b1:db:
58:f6:7b:24:e2:df:06:c9:d8:cb:f3:9a:e3:d0:ae:
58:a2:ca:c0:23:5e:24:64:9b:dd:39:81:91:3c:de:
56:c6:c4:45:39:19:3c:28:cf:68:68:c1:0a:c4:e3:
8a:e8:69:cd:eb:3f:7b:32:d1:3d:a9:07:74:10:2d:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F8:2A:98:A7:66:C1:14:B9:33:1D:DC:7A:F6:C6:88:05:F2:78:A8
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n_gqmKdmwRS5Mx3cevbGiAXyeKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
25:86:bd:37:a5:08:69:75:6f:58:50:c3:ae:c0:a0:98:b1:09:
c1:59:62:cd:80:2a:18:69:2a:7e:4e:83:77:be:11:62:39:18:
0c:48:ac:28:64:d0:c6:7d:4d:90:ab:05:74:d4:a4:6c:9a:81:
95:0f:e4:41:60:d3:00:25:9b:e8:e3:c4:21:ba:3a:48:f8:e8:
72:82:1e:f5:f4:89:d6:02:4c:b9:b9:a0:23:39:8f:4a:11:8e:
ce:25:36:d8:90:4a:38:f5:39:25:b9:2f:4f:92:a7:0e:e0:79:
59:02:19:12:58:c4:0e:74:c1:39:30:06:fd:32:c6:f2:4e:0e:
dc:fb:5e:ea:cf:44:50:c2:0d:78:5a:eb:bc:30:b2:da:07:da:
7f:7e:69:39:b2:10:1c:47:db:26:d6:73:6a:61:33:3a:ef:f1:
60:97:04:fb:c2:6b:cd:0e:f9:2c:ae:44:0b:5d:f9:48:40:c9:
6d:7f:a6:07:c3:46:56:35:ae:8d:2d:24:08:2c:66:a9:91:84:
1c:12:22:e6:86:01:6c:e8:83:15:99:67:1d:be:03:8a:a2:6f:
54:b4:95:23:4c:5a:50:ce:9f:59:81:05:ed:38:f0:2b:db:15:
21:59:0f:93:03:4a:f8:3d:2f:5f:70:ac:2f:94:93:dd:10:fc:
32:fd:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org