Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uA1wD1gahEWKpgL6iVA8s7U1JAQ.roa
File: uA1wD1gahEWKpgL6iVA8s7U1JAQ.roa (raw, json)
Hash identifier: HPcijj45ZZenapHbcvFJ/MBceBviGtu74skiXykA/uc=
Subject key identifier: B8:0D:70:0F:58:1A:84:45:8A:A6:02:FA:89:50:3C:B3:B5:35:24:04
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189B069BF1C9E7C221D184A25225C493D66
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uA1wD1gahEWKpgL6iVA8s7U1JAQ.roa
Signing time: Tue 01 Aug 2023 09:24:27 +0000
ROA not before: Tue 01 Aug 2023 09:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.34.43.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 10:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:69:bf:1c:9e:7c:22:1d:18:4a:25:22:5c:49:3d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 1 09:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80d700f581a84458aa602fa89503cb3b5352404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:8b:c9:ea:d5:81:3e:8f:a7:75:55:1c:dc:
bb:32:ab:8a:22:d1:8c:77:b5:e3:c4:43:2d:60:f7:
af:f3:6f:a7:32:6a:e4:e5:db:78:02:75:0d:f7:09:
17:21:c4:ec:a6:69:f6:31:a7:d3:92:03:6b:d3:95:
79:f0:61:90:ad:e4:7d:0e:9e:67:a1:3a:88:67:ee:
2b:70:b8:3e:06:8e:3f:24:a4:2c:40:71:35:85:91:
e6:22:90:11:9d:6a:8b:7d:7c:53:ac:c1:f1:f7:56:
32:f5:50:70:b8:af:28:aa:3e:e4:a9:12:b2:65:1a:
a2:98:f6:6e:58:41:d5:1d:3a:0f:cd:ac:2b:e7:68:
85:4c:aa:9c:56:6f:f4:b0:d3:83:f2:26:b2:74:80:
6a:f3:9c:43:cf:30:5f:cf:c1:a3:d3:4e:a2:4b:7b:
86:45:29:dc:17:38:fc:33:a3:f1:3f:a3:b8:10:99:
48:80:b5:e1:b5:e3:4a:12:78:64:4b:9c:d0:df:06:
84:21:7e:a0:ff:9b:a8:59:75:c6:0a:85:db:48:23:
2d:02:b4:ac:66:1a:9e:b8:20:cf:f1:eb:be:be:9e:
46:5b:93:65:41:64:a1:68:1a:ac:40:70:a5:cc:bc:
fe:d4:c9:79:16:d4:eb:9e:1c:ed:60:c0:e9:9d:49:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:70:0F:58:1A:84:45:8A:A6:02:FA:89:50:3C:B3:B5:35:24:04
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uA1wD1gahEWKpgL6iVA8s7U1JAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
Signature Algorithm: sha256WithRSAEncryption
66:9e:ab:91:df:c9:12:58:7e:75:da:b1:be:10:85:a6:82:0e:
e7:93:3d:ea:c8:11:bd:c5:f1:18:00:79:da:f3:72:f5:0d:a5:
9b:8c:a7:bd:6b:3a:4d:f6:c2:c4:cf:44:2a:36:fd:29:3e:9c:
b0:f0:73:a8:cd:91:c9:82:1e:eb:52:c3:84:a2:5c:e0:40:eb:
80:bd:39:86:4e:80:97:2f:34:b8:c0:1a:19:4d:97:a4:29:d2:
93:12:b6:7c:8f:b3:df:67:39:f5:39:3b:7d:1e:79:38:10:6b:
c7:e0:c3:90:f0:69:af:f6:cb:36:da:71:a4:ae:69:6c:ac:cd:
fa:95:a4:bf:b0:29:35:92:5b:6f:d1:a6:79:48:fa:5e:82:77:
1d:2b:51:83:b2:df:19:dc:21:ae:48:10:75:61:44:6c:0d:16:
73:f3:bb:d4:d9:06:41:68:3f:4c:ef:36:79:81:68:80:2a:dd:
58:f8:60:14:10:0c:e0:4a:27:f5:a4:ad:6e:28:08:50:19:6a:
02:ee:42:80:6b:50:8f:40:4d:63:65:b1:1f:86:f1:34:4e:a2:
86:31:ab:5e:c5:1f:80:c8:4f:38:39:e8:a6:e9:e1:85:2c:e8:
34:14:a2:9e:a5:0b:7e:18:e2:f2:8c:f3:d5:f5:c9:34:f6:3a:
d9:fb:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org