Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nw-9vG2lZijpjjUQ6AXRjoomeic.roa
File: nw-9vG2lZijpjjUQ6AXRjoomeic.roa (raw, json)
Hash identifier: vrkT5TAYndFegqjaug9sLsb5QsM89h6i2O6GeFwhb40=
Subject key identifier: 9F:0F:BD:BC:6D:A5:66:28:E9:8E:35:10:E8:05:D1:8E:8A:26:7A:27
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01862925D034771F4CD42AE0AB4791B9D1D9
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nw-9vG2lZijpjjUQ6AXRjoomeic.roa
Signing time: Mon 06 Feb 2023 23:53:09 +0000
ROA not before: Mon 06 Feb 2023 23:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/21 maxlen: 21
46.34.32.0/19 maxlen: 19
46.34.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 10 Feb 2023 13:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:29:25:d0:34:77:1f:4c:d4:2a:e0:ab:47:91:b9:d1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 6 23:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f0fbdbc6da56628e98e3510e805d18e8a267a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:2e:2a:3e:80:6f:22:bd:75:69:71:9d:db:
e5:aa:1b:62:eb:0d:8a:4a:20:28:7f:2a:76:1e:0d:
72:ae:88:c1:6c:d5:f0:47:b8:ab:3f:e8:6a:25:6d:
a6:74:f0:26:cc:0e:b5:78:96:4c:8f:95:78:62:4d:
de:92:49:5a:11:a6:a5:1a:d6:89:9c:ff:d7:19:5d:
de:76:85:5f:f2:3e:d6:14:36:e6:8a:67:5c:7a:a8:
49:63:fd:73:fd:76:6a:9e:c9:19:15:d0:8c:31:54:
d5:6a:a5:01:00:fb:8b:0d:69:d5:26:ca:80:c5:1f:
43:46:dd:7a:84:f6:c8:d9:c8:c2:29:99:2c:43:8e:
58:99:f5:b7:aa:b8:6f:b7:37:30:60:84:68:04:9f:
cc:57:ad:61:07:a0:c5:59:c5:d7:9b:70:9e:b6:84:
df:3c:31:04:73:d9:43:cb:c3:72:96:6f:8c:8c:b6:
60:cb:2d:43:87:ef:a2:b5:6e:92:c7:7c:c6:18:bc:
92:83:6e:a1:96:c2:96:78:ae:81:fc:3e:44:1f:f4:
01:ec:ac:f9:db:f2:2a:d4:49:cc:4c:0e:6a:5a:6a:
dd:67:dd:85:d5:fb:5d:07:ae:5d:58:c3:1e:b3:4a:
10:c5:46:1e:c1:49:c3:8a:5b:ae:f4:3a:fa:1d:5f:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:BD:BC:6D:A5:66:28:E9:8E:35:10:E8:05:D1:8E:8A:26:7A:27
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nw-9vG2lZijpjjUQ6AXRjoomeic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/19
Signature Algorithm: sha256WithRSAEncryption
41:6b:13:f4:9d:5b:8c:f5:ba:dc:8a:ee:ba:fd:bd:f0:61:9c:
83:f9:c0:21:66:3e:ed:4d:e8:8e:60:2d:e3:b9:88:9a:fd:32:
fa:77:a9:e7:9b:2c:54:31:c5:05:22:a3:52:9d:fd:27:35:6c:
62:14:fb:d7:da:83:77:6e:9d:93:d0:9b:b7:e9:eb:bf:50:ad:
58:d1:4f:1d:d3:77:66:e7:d3:ec:d7:93:e0:ba:93:bb:16:98:
0e:66:16:dd:ab:21:5d:9f:06:65:91:88:aa:dc:dc:c5:bf:1f:
6a:2e:ec:7a:10:49:6e:a9:44:17:fd:ac:a4:df:f6:c6:b4:55:
e1:e3:f9:4c:74:6a:5b:04:8d:af:62:c7:c0:29:4b:8e:fe:97:
e3:99:b3:32:34:d7:c7:5f:07:eb:5b:1a:db:f6:8e:98:7f:24:
bc:b8:dc:47:4b:4c:11:a1:69:76:b6:54:94:c2:9d:18:46:ab:
93:e3:39:bd:b2:84:14:21:0d:4f:da:20:73:46:4d:e0:b3:e4:
f9:c1:19:ab:14:be:b0:eb:a4:09:4b:73:ac:8b:1b:8f:2a:ec:
54:57:85:79:a7:2b:d1:aa:c9:ac:fa:3f:72:00:f4:44:bf:96:
8f:41:4f:21:4b:9c:cc:da:51:0a:ea:b5:9d:80:7e:51:72:a4:
10:88:36:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYpJdA0dx9M1Crgq0eRudHZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMjA2MjM1MzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjBmYmRiYzZkYTU2NjI4ZTk4ZTM1MTBlODA1ZDE4ZThhMjY3YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbYuKj6AbyK9dWlxndvlqhti6w2K
SiAofyp2Hg1yrojBbNXwR7irP+hqJW2mdPAmzA61eJZMj5V4Yk3ekklaEaalGtaJ
nP/XGV3edoVf8j7WFDbmimdceqhJY/1z/XZqnskZFdCMMVTVaqUBAPuLDWnVJsqA
xR9DRt16hPbI2cjCKZksQ45YmfW3qrhvtzcwYIRoBJ/MV61hB6DFWcXXm3CetoTf
PDEEc9lDy8Nylm+MjLZgyy1Dh++itW6Sx3zGGLySg26hlsKWeK6B/D5EH/QB7Kz5
2/Iq1EnMTA5qWmrdZ92F1ftdB65dWMMes0oQxUYewUnDiluu9Dr6HV/EqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8PvbxtpWYo6Y41EOgF0Y6KJnonMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvbnctOXZHMmxaaWpwampVUTZBWFJqb29tZWljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLiIgMA0G
CSqGSIb3DQEBCwUAA4IBAQBBaxP0nVuM9brciu66/b3wYZyD+cAhZj7tTeiOYC3j
uYia/TL6d6nnmyxUMcUFIqNSnf0nNWxiFPvX2oN3bp2T0Ju36eu/UK1Y0U8d03dm
59Ps15PgupO7FpgOZhbdqyFdnwZlkYiq3NzFvx9qLux6EEluqUQX/ayk3/bGtFXh
4/lMdGpbBI2vYsfAKUuO/pfjmbMyNNfHXwfrWxrb9o6YfyS8uNxHS0wRoWl2tlSU
wp0YRquT4zm9soQUIQ1P2iBzRk3gs+T5wRmrFL6w66QJS3OsixuPKuxUV4V5pyvR
qsms+j9yAPREv5aPQU8hS5zM2lEK6rWdgH5RcqQQiDa3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org