Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nwFZixBJg3aQEo1EV7p8F0HZuSY.roa
File: nwFZixBJg3aQEo1EV7p8F0HZuSY.roa (raw, json)
Hash identifier: hJeVD0JMGyjNN9WzFLNncGVxbsl+bvqukJ8RHSArxHg=
Subject key identifier: 9F:01:59:8B:10:49:83:76:90:12:8D:44:57:BA:7C:17:41:D9:B9:26
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01872C6DD9B8EE224EB087C818F6BBF64428
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nwFZixBJg3aQEo1EV7p8F0HZuSY.roa
Signing time: Wed 29 Mar 2023 08:13:29 +0000
ROA not before: Wed 29 Mar 2023 08:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204774
IP address blocks: 46.34.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:6d:d9:b8:ee:22:4e:b0:87:c8:18:f6:bb:f6:44:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 29 08:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f01598b1049837690128d4457ba7c1741d9b926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:5f:75:0c:90:8d:ca:53:5f:b1:b1:15:12:
28:03:85:ba:69:84:39:e4:85:1f:71:82:6d:02:90:
af:ae:33:2e:ef:2b:55:64:82:ed:ef:99:56:8f:b0:
4c:55:8f:c0:16:81:58:f1:40:c1:46:aa:41:42:f4:
c4:66:41:bc:45:71:37:ac:4d:a1:1d:0e:fe:b2:7e:
9c:6c:fe:34:87:d9:e9:ba:4b:60:dc:d7:4b:98:73:
32:7d:00:2e:ce:2a:da:d1:87:e0:2f:6d:7c:c3:a5:
a3:c1:3f:d6:45:a4:77:0d:65:3f:ee:d6:ec:49:86:
4b:f7:ae:12:93:b4:83:7a:3a:c4:b8:40:a5:ed:7a:
4b:74:16:ea:7a:6e:b4:cb:7f:10:c4:c9:ab:92:78:
ab:7c:15:9f:49:c7:6c:60:f6:96:2a:d8:4a:40:df:
e0:7d:f4:8a:e2:6e:cd:dc:d8:03:8f:a7:9e:a7:e0:
95:3a:16:7e:b5:47:38:0e:27:8b:75:83:33:50:cd:
73:fb:1a:9c:ba:a5:f9:85:a1:f4:ba:e2:ef:cd:af:
07:4e:fc:2c:c1:9c:28:7d:9c:11:82:c5:e3:78:ad:
83:3d:85:11:77:1a:df:2d:ed:fb:b3:da:19:1d:7a:
77:03:0b:27:7e:da:96:fe:ea:a2:d5:f6:20:db:a8:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:01:59:8B:10:49:83:76:90:12:8D:44:57:BA:7C:17:41:D9:B9:26
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nwFZixBJg3aQEo1EV7p8F0HZuSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.53.0/24
Signature Algorithm: sha256WithRSAEncryption
14:36:d6:bf:15:5e:93:54:92:7d:07:75:f4:c8:b7:3e:21:b1:
2c:f1:0c:f8:15:77:23:71:de:c4:c4:13:ce:d3:f6:74:1d:b4:
e9:15:49:4c:8b:1c:2d:31:52:1d:3f:85:16:d9:df:e3:d5:58:
a5:2f:5a:46:21:35:30:1d:1e:46:8e:d6:49:59:aa:b5:c8:2c:
d6:8c:45:88:2c:15:0e:ea:aa:8d:41:b9:8e:01:cf:4c:3f:83:
04:50:34:cd:28:b2:5d:d9:bd:e9:77:92:39:77:41:32:35:92:
bf:04:28:70:d1:0d:8c:dc:f0:67:9e:4a:5b:6b:24:a0:0a:ef:
d1:9e:7c:94:ac:10:e7:2d:6c:ed:db:81:25:fc:ab:0f:d9:c9:
23:3e:b4:76:ed:b2:64:e4:91:b6:db:05:b5:50:8d:fa:b3:44:
9b:e3:a6:c2:d5:05:9d:e8:51:4b:cf:09:f8:17:fc:20:6f:87:
df:6f:5e:22:5d:bb:26:12:85:a8:3c:a3:80:a2:60:9e:b9:c6:
3c:c0:c1:24:89:78:dd:c6:4e:c2:c3:bf:a3:5f:32:20:b1:c2:
2e:66:36:da:dc:c0:78:d4:bb:12:01:98:f6:56:15:ab:3b:d8:
5e:3f:73:bc:ad:f2:c5:db:60:8d:05:a9:e7:df:0f:55:59:e4:
c3:22:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org