Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx1Crq9Za4NQaWuvspH07WDH7cw.roa
File: tx1Crq9Za4NQaWuvspH07WDH7cw.roa (raw, json)
Hash identifier: CosDxycWNn+6TnMEwyUuDGXCjcwZAxrIBCzLgJtJsMs=
Subject key identifier: B7:1D:42:AE:AF:59:6B:83:50:69:6B:AF:B2:91:F4:ED:60:C7:ED:CC
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018AF1648765437E5C02E9918982DFCC73EE
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx1Crq9Za4NQaWuvspH07WDH7cw.roa
Signing time: Mon 02 Oct 2023 17:16:51 +0000
ROA not before: Mon 02 Oct 2023 17:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Oct 2023 08:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:64:87:65:43:7e:5c:02:e9:91:89:82:df:cc:73:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 2 17:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71d42aeaf596b8350696bafb291f4ed60c7edcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:40:6e:c7:6f:90:0b:be:3d:f0:b8:79:5a:
de:68:c2:ee:b3:f0:b3:9e:53:19:46:9b:f4:80:97:
1f:d2:a4:4e:5f:6d:7a:7b:d0:08:3c:56:43:93:1a:
c5:f9:0b:4c:8f:db:11:a2:f4:f6:7e:bb:2a:d2:31:
89:61:13:c3:a9:59:eb:6e:81:14:b1:3a:b7:c9:25:
49:2f:00:f9:2f:ec:1c:cb:3c:fd:ec:ff:20:d3:c7:
74:59:c1:38:e3:20:9d:71:71:05:0f:b5:90:bf:b8:
eb:4a:dd:5f:7f:34:98:70:ef:dd:31:ee:b6:6f:62:
9e:22:c9:4a:8b:d3:56:85:82:c1:cf:11:3e:0d:4c:
e3:38:65:71:b5:bc:14:64:66:2e:8f:8b:68:c1:df:
87:29:2f:31:25:36:af:18:64:06:08:73:d2:58:2d:
58:4c:89:1e:31:66:fe:95:92:63:3c:28:cd:d2:7d:
02:22:fa:26:69:1a:48:fa:dd:b5:38:2c:56:e6:32:
6d:35:a9:b0:20:57:34:fa:33:13:b1:40:ad:05:7a:
d3:87:5a:69:a3:bc:1b:3c:ef:8a:5d:36:34:86:af:
29:11:b4:e3:f6:39:d0:2c:95:f6:1e:6a:50:12:22:
a2:61:be:d8:6c:ec:58:bd:ae:97:ba:3b:1a:74:84:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:42:AE:AF:59:6B:83:50:69:6B:AF:B2:91:F4:ED:60:C7:ED:CC
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx1Crq9Za4NQaWuvspH07WDH7cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
21:75:90:30:53:b4:1b:f0:a7:b1:25:1d:0e:23:53:0a:bd:59:
11:5d:da:34:9e:f4:c5:59:f8:0b:a1:e1:25:8d:52:c4:93:df:
0d:f4:09:22:37:be:04:d3:c9:d6:63:a0:00:da:8a:64:8f:b7:
84:7a:13:c3:78:5c:77:2c:31:d9:64:dd:35:82:01:22:df:72:
8f:f7:dc:47:a2:d1:96:dd:c9:e3:77:a5:e3:1e:b5:c2:77:ee:
8e:dd:e3:dd:f3:33:0e:d0:d5:1d:9d:45:c2:4e:1e:94:7b:34:
f6:01:e0:38:25:2c:26:02:13:ab:0e:b5:93:56:89:0d:50:58:
9d:12:26:6e:6f:a7:2b:ca:0d:4f:15:b1:f6:65:58:fc:d7:71:
ce:95:53:33:58:94:e7:f8:01:94:9d:55:79:d6:7e:52:30:ac:
a9:64:bd:43:1b:17:fb:2e:d1:b7:05:f0:4a:da:1c:74:8a:c9:
d1:63:e9:e0:89:1a:a9:18:b2:72:e8:48:6f:60:25:51:27:db:
4f:c6:75:54:b4:20:c5:9a:ac:29:e5:e0:94:e9:a1:06:0a:32:
38:50:ea:2e:c8:f5:e6:9c:cf:a0:61:e0:9c:62:90:6f:b2:d9:
f9:0d:5f:4d:e6:86:52:8e:c4:00:9f:6e:aa:ba:f2:64:3f:b7:
cf:cb:aa:c6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYrxZIdlQ35cAumRiYLfzHPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMDAyMTcxNjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzFkNDJhZWFmNTk2YjgzNTA2OTZiYWZiMjkxZjRlZDYwYzdlZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzBAbsdvkAu+PfC4eVreaMLus/Cz
nlMZRpv0gJcf0qROX216e9AIPFZDkxrF+QtMj9sRovT2frsq0jGJYRPDqVnrboEU
sTq3ySVJLwD5L+wcyzz97P8g08d0WcE44yCdcXEFD7WQv7jrSt1ffzSYcO/dMe62
b2KeIslKi9NWhYLBzxE+DUzjOGVxtbwUZGYuj4towd+HKS8xJTavGGQGCHPSWC1Y
TIkeMWb+lZJjPCjN0n0CIvomaRpI+t21OCxW5jJtNamwIFc0+jMTsUCtBXrTh1pp
o7wbPO+KXTY0hq8pEbTj9jnQLJX2HmpQEiKiYb7YbOxYva6XujsadIThZQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLcdQq6vWWuDUGlrr7KR9O1gx+3MMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvdHgxQ3JxOVphNE5RYVd1dnNwSDA3V0RIN2N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAEuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBACF1kDBTtBvwp7El
HQ4jUwq9WRFd2jSe9MVZ+Auh4SWNUsST3w30CSI3vgTTydZjoADaimSPt4R6E8N4
XHcsMdlk3TWCASLfco/33Eei0ZbdyeN3peMetcJ37o7d493zMw7Q1R2dRcJOHpR7
NPYB4DglLCYCE6sOtZNWiQ1QWJ0SJm5vpyvKDU8VsfZlWPzXcc6VUzNYlOf4AZSd
VXnWflIwrKlkvUMbF/su0bcF8EraHHSKydFj6eCJGqkYsnLoSG9gJVEn20/GdVS0
IMWarCnl4JTpoQYKMjhQ6i7I9eacz6Bh4JxikG+y2fkNX03mhlKOxACfbqq68mQ/
t8/LqsY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org