Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx4vGpAHxke7hDU5j_iyvh0CLB8.roa
File: tx4vGpAHxke7hDU5j_iyvh0CLB8.roa (raw, json)
Hash identifier: KqhKIIc2H9r6nkNdteiC6ZAf7Gr1eLKAOke7h4E5nEI=
Subject key identifier: B7:1E:2F:1A:90:07:C6:47:BB:84:35:39:8F:F8:B2:BE:1D:02:2C:1F
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01880BE61B4AF1432940D87882ADA40EAE7C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx4vGpAHxke7hDU5j_iyvh0CLB8.roa
Signing time: Thu 11 May 2023 17:40:09 +0000
ROA not before: Thu 11 May 2023 17:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.34.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:e6:1b:4a:f1:43:29:40:d8:78:82:ad:a4:0e:ae:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: May 11 17:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71e2f1a9007c647bb8435398ff8b2be1d022c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:4f:e0:ee:7a:8a:f0:bd:3b:4a:f6:de:61:
ff:98:d5:d8:0e:ab:fc:ce:58:b3:f4:ac:af:46:3d:
73:9c:9b:f9:94:52:0f:3c:71:66:a7:3b:02:6a:87:
24:c7:06:d9:0b:7d:3b:5d:79:1f:69:d8:9b:fb:01:
a6:15:85:f5:db:64:25:81:6e:a7:a1:96:0c:69:2a:
56:9e:45:18:b6:6e:3d:32:72:43:66:a1:25:d0:94:
fc:da:bc:be:31:b3:7a:33:b5:d1:81:12:d4:2f:7f:
ea:a5:eb:16:ab:04:23:f1:78:66:c4:10:7c:02:77:
0d:53:ae:d9:d4:dd:ed:c7:aa:67:fd:d0:31:8e:82:
e5:f1:ad:8c:1b:11:b9:a8:e8:fa:1a:cb:78:16:38:
11:82:dc:35:51:42:5b:1f:56:bd:ea:97:03:34:9b:
78:a2:d5:d7:fc:d0:42:91:b7:5d:4a:af:30:95:31:
35:8a:1c:8e:83:1b:b1:78:6a:6b:48:58:14:7b:00:
16:9f:13:3d:0f:43:7b:dd:04:b9:9a:6c:b2:46:60:
b3:de:d0:c4:d8:56:0d:d9:69:91:1d:26:c4:ef:10:
62:12:5b:ba:9f:20:33:5d:59:8e:08:9a:db:43:a5:
cf:cf:32:44:45:7b:a6:1e:8e:c1:10:c0:af:b8:bf:
b2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:2F:1A:90:07:C6:47:BB:84:35:39:8F:F8:B2:BE:1D:02:2C:1F
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/tx4vGpAHxke7hDU5j_iyvh0CLB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.46.0/24
Signature Algorithm: sha256WithRSAEncryption
74:0a:10:f9:eb:b6:3f:0e:d9:5a:bb:67:c3:3d:8b:03:e6:86:
c8:36:ff:87:95:d0:60:2e:35:38:dc:1e:7b:6a:6e:5c:3e:cd:
76:7c:e6:8e:be:88:a3:02:01:7f:ea:07:73:f2:2e:72:fc:31:
e6:cb:9b:1d:0b:47:d7:8d:91:e1:93:a8:78:63:a3:37:c9:37:
1c:8b:ec:84:bb:a8:14:6b:95:37:85:ee:e1:5d:8e:71:bd:a4:
87:4e:2d:51:c4:3e:5b:fc:1c:d7:9c:32:9e:64:ec:40:70:28:
3b:85:a8:2b:8d:84:3c:2f:dc:2d:12:e4:d1:e2:37:ac:2e:21:
51:ba:1b:b5:6e:c4:86:e9:cd:aa:6f:95:05:53:11:4f:9c:45:
50:7a:e6:95:ef:ba:67:63:06:7b:f0:f1:e0:80:dc:c9:c4:09:
fd:35:bf:40:3e:3a:9b:54:6a:f7:22:c9:2d:80:b6:8b:fb:bb:
ff:cb:af:45:c5:b8:49:92:28:ee:fc:31:ae:06:b3:26:36:64:
d9:f8:fd:df:08:57:8d:f7:c9:e8:fa:29:c4:c7:6e:6d:61:97:
0f:65:b3:f6:e9:5c:fd:43:34:82:00:ed:11:48:a9:4c:f4:db:
56:35:84:d1:1e:ff:45:d1:41:ec:ee:23:43:52:88:5c:91:03:
78:c5:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org