Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rbXxUgdRN7QmwLZUFPMnII9oOkw.roa
File: rbXxUgdRN7QmwLZUFPMnII9oOkw.roa (raw, json)
Hash identifier: sb+a5pERfvdLloPMUrsvZnXjjeje5z8r7XgRLUvwkdU=
Subject key identifier: AD:B5:F1:52:07:51:37:B4:26:C0:B6:54:14:F3:27:20:8F:68:3A:4C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A40EA318BC870B4F23EEAFF14AC2244D6
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rbXxUgdRN7QmwLZUFPMnII9oOkw.roa
Signing time: Tue 29 Aug 2023 10:50:04 +0000
ROA not before: Tue 29 Aug 2023 10:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 16:19:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:ea:31:8b:c8:70:b4:f2:3e:ea:ff:14:ac:22:44:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 29 10:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adb5f152075137b426c0b65414f327208f683a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:5a:a0:22:bc:8b:18:46:58:63:8a:a2:1b:
65:8d:be:34:5d:8b:4c:e3:a5:46:bb:99:54:c7:20:
3c:90:b4:7c:51:68:49:ea:17:f1:c1:b4:37:db:5c:
a8:3f:ee:56:e8:56:db:2b:f6:7a:48:d1:a4:c2:83:
5a:91:3b:9f:b8:c1:49:62:23:6f:a3:12:28:9d:56:
c2:5d:f9:e4:3e:6d:f7:55:ba:74:5c:f3:2c:1b:7d:
fb:c7:a4:6a:7b:a4:bd:c1:e7:93:08:4d:a4:40:b4:
b4:9b:a7:da:79:b5:7f:43:85:73:6c:57:7b:38:9c:
60:d5:38:51:2a:ca:8c:6e:19:c7:c9:57:4d:75:17:
3c:c1:80:23:47:00:b4:0a:4e:e4:23:02:5b:7c:65:
a3:55:4f:6a:f9:82:cb:c7:4f:45:c4:d2:76:76:59:
77:82:c5:40:f7:e5:c2:b7:88:b3:09:51:7d:7b:a4:
69:61:61:70:35:66:6e:6a:67:ac:a1:0c:5d:2c:30:
86:05:d6:97:32:44:3e:da:38:e6:f0:a8:37:90:d0:
a5:d5:32:40:cd:71:51:ab:4e:13:41:b3:78:9d:03:
82:36:02:bf:8b:f2:77:6e:7d:0d:7a:63:a6:94:f6:
36:fe:ee:a3:87:2d:30:ec:f7:74:b2:60:78:a9:5d:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B5:F1:52:07:51:37:B4:26:C0:B6:54:14:F3:27:20:8F:68:3A:4C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/rbXxUgdRN7QmwLZUFPMnII9oOkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
37:5b:50:25:c4:82:72:6a:4d:24:7d:32:ef:f1:ac:28:fc:1d:
88:06:44:83:9f:69:82:8e:75:4f:9c:0d:95:66:08:f3:4f:73:
4b:fc:83:02:23:1f:73:eb:91:e1:c9:e5:71:7b:3e:8c:39:47:
26:cc:dd:65:8f:f8:73:67:87:8a:5c:60:33:ca:12:d6:48:62:
54:56:16:ce:f9:bb:5f:a3:5c:3a:19:65:fb:c0:13:78:0a:a4:
18:3a:7a:64:2d:27:ef:cc:ec:10:bf:90:16:e2:03:07:08:41:
8a:d5:be:b8:24:dc:8c:9e:94:08:28:e5:d1:94:50:e6:b0:62:
12:e5:84:e8:62:ba:4d:b6:02:60:84:7d:c4:66:fe:87:56:f4:
a0:9b:9d:43:7b:33:40:7c:6d:42:3e:c3:fa:bf:c0:0f:b7:30:
22:ac:ed:c6:11:f4:6c:a2:c7:18:bf:25:36:ef:98:dd:8c:aa:
51:20:da:8d:f7:e9:48:22:5d:a5:77:6a:aa:9b:82:8a:fc:5f:
8b:e8:72:97:41:68:1c:2a:0e:66:f9:f2:77:29:81:9a:5e:d8:
b1:04:7b:7b:4f:3b:81:5f:af:70:f2:f0:c6:ea:ac:b3:27:a2:
5b:8f:38:77:30:e6:33:c7:53:ef:b0:9c:ff:41:53:2f:15:f1:
39:e5:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org