Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/t9frSc2OSLeJAHnVcHAtv6GkE18.roa
File: t9frSc2OSLeJAHnVcHAtv6GkE18.roa (raw, json)
Hash identifier: W7stYkGi+uCoq1Mio7F98jHeixRokIf913ueEZa1Pgs=
Subject key identifier: B7:D7:EB:49:CD:8E:48:B7:89:00:79:D5:70:70:2D:BF:A1:A4:13:5F
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01892A30D3C857F5647B60A8CBA3FBF08B5F
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/t9frSc2OSLeJAHnVcHAtv6GkE18.roa
Signing time: Thu 06 Jul 2023 07:53:10 +0000
ROA not before: Thu 06 Jul 2023 07:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.44.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 10:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:30:d3:c8:57:f5:64:7b:60:a8:cb:a3:fb:f0:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 6 07:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7d7eb49cd8e48b7890079d570702dbfa1a4135f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:48:f5:b6:d8:84:d6:cf:32:d4:6b:8a:aa:
0d:be:4d:a9:26:6c:d0:7b:17:02:97:10:57:42:d0:
fe:02:d4:1e:43:82:f9:5b:12:35:81:67:f1:00:f0:
04:52:86:c0:9e:71:d3:1c:31:0b:2e:a6:eb:97:e2:
2a:7a:c3:8b:f1:a8:65:ce:63:86:6c:9a:d7:2b:0b:
5a:8a:f1:d8:ac:2d:05:1a:3e:25:05:08:42:c2:0f:
e0:49:ba:49:77:83:cb:a7:fe:d5:de:63:0a:61:52:
d5:94:0f:41:6b:62:fb:b3:8a:36:43:59:17:24:e9:
38:cd:12:f2:d8:52:c3:dd:2e:7e:38:0a:55:e3:59:
fd:2e:61:86:0c:73:69:c6:a3:59:84:2a:f6:c0:9e:
e8:8c:1a:d5:4a:f1:79:e9:e9:01:2a:c7:52:fd:5d:
f0:fb:7c:91:8b:59:0e:f8:43:1e:aa:83:56:e1:6e:
ff:23:27:04:fa:a3:e3:2b:38:5f:94:ab:bf:a5:26:
b4:23:b4:6e:37:8f:0b:ee:37:08:f1:bf:95:79:01:
af:e4:85:e4:85:5c:f8:2d:42:f9:ae:63:8b:60:3a:
29:02:f9:11:73:16:f8:9a:0c:2a:ec:ab:29:b9:78:
09:d7:86:55:0b:c1:33:63:83:b6:93:54:57:bc:1b:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:EB:49:CD:8E:48:B7:89:00:79:D5:70:70:2D:BF:A1:A4:13:5F
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/t9frSc2OSLeJAHnVcHAtv6GkE18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.44.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fe:fe:7c:8d:d4:a4:c5:1f:eb:90:a9:61:60:d2:cf:26:f5:
f0:ad:00:25:4f:70:c9:ce:f4:89:29:ba:55:cd:e1:5d:3d:de:
4b:07:ed:33:7b:46:e3:49:85:20:b5:9b:d7:46:82:08:55:06:
bb:ff:67:32:be:94:78:dc:25:b7:a7:18:4a:a1:80:1d:96:8e:
ef:71:e8:5b:f4:78:d7:6d:5d:bb:bb:07:66:55:6b:21:0a:2f:
6b:24:cd:11:ad:11:0f:c2:43:43:f7:1e:ac:86:9f:6c:5b:5c:
c0:7d:a0:af:8b:0d:29:f6:55:d4:49:f1:1d:b4:d8:c5:cf:c7:
98:a2:85:16:e7:dc:75:09:48:6d:34:49:9c:f6:a8:8f:9f:c0:
9b:8e:3f:a0:17:cb:ab:57:f9:ca:88:e9:24:1b:2a:6e:ed:24:
16:04:7a:14:48:18:06:fc:5a:47:b2:b7:91:da:41:fd:0d:af:
07:5c:aa:f4:03:25:3f:ee:77:96:c8:6d:11:96:3f:c7:0f:1b:
e4:2b:8c:67:b2:38:74:8f:20:6b:dd:65:0d:99:2c:f2:65:bf:
46:d0:ea:90:fa:62:da:64:48:d7:6f:61:b6:01:26:63:7b:2b:
5d:61:f9:2c:16:3d:d6:17:e3:fa:ee:f6:a7:13:ab:f0:c3:8e:
73:94:ec:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org