Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uMH7NHPwO1GcO0TKwvUVgXYlZfw.roa
File: uMH7NHPwO1GcO0TKwvUVgXYlZfw.roa (raw, json)
Hash identifier: 61v4tK5CU0/8cJPw/DN2+pBBIDbERrZb0K87dIzWsMw=
Subject key identifier: B8:C1:FB:34:73:F0:3B:51:9C:3B:44:CA:C2:F5:15:81:76:25:65:FC
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018733A21C1CF29A9E4D7AE7D85E1AC5ADC0
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uMH7NHPwO1GcO0TKwvUVgXYlZfw.roa
Signing time: Thu 30 Mar 2023 17:47:54 +0000
ROA not before: Thu 30 Mar 2023 17:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/23 maxlen: 23
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Apr 2023 14:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:a2:1c:1c:f2:9a:9e:4d:7a:e7:d8:5e:1a:c5:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 30 17:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8c1fb3473f03b519c3b44cac2f51581762565fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:9c:d3:02:5b:9e:14:1d:a0:21:97:24:63:
12:e0:0d:7e:9e:ce:06:fd:8c:fd:1a:b2:1a:4b:cb:
5f:a6:1d:78:dd:b1:61:a1:9d:9c:cc:2c:8c:3c:41:
02:f3:2b:d2:b2:ef:63:5a:b8:db:52:79:5e:e1:47:
6b:b4:3c:d5:05:23:df:96:e5:b7:04:e5:ad:08:d6:
dd:68:b8:ed:f9:52:cb:78:2b:60:74:b8:dd:bf:ee:
b9:e5:d2:ce:72:1e:82:fb:85:b7:df:24:84:48:77:
ed:ec:25:2f:87:83:68:99:37:ea:c0:38:15:2d:f0:
80:dc:e1:4b:6f:ab:c1:bc:88:14:ce:34:0a:6a:f8:
c5:3f:2e:1d:f9:ab:35:ae:d6:fc:99:ef:89:a6:c9:
aa:c3:0f:26:56:c0:69:7e:bf:c2:3d:9a:94:f8:db:
78:9f:32:34:ee:56:8d:3b:e1:6a:c1:e7:27:18:ef:
5c:af:86:b4:08:71:95:94:00:a4:84:9c:d1:0f:3a:
f8:6d:f8:76:8a:4d:c2:98:f8:2d:50:e3:74:87:4f:
95:82:85:3b:9e:10:59:0d:3a:c5:fe:9a:a7:3c:a6:
65:fe:94:2b:1b:95:99:f7:20:3b:58:ce:b3:bf:da:
62:71:4e:6a:3b:ed:33:ea:23:d2:4b:31:13:30:dc:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C1:FB:34:73:F0:3B:51:9C:3B:44:CA:C2:F5:15:81:76:25:65:FC
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uMH7NHPwO1GcO0TKwvUVgXYlZfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/23
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:3c:03:1e:3e:59:8f:e3:ce:ec:9f:8d:da:30:22:df:18:4c:
e4:36:b5:97:a8:88:87:8b:38:81:70:7a:88:71:8f:e4:46:63:
cb:e2:88:c1:dd:4f:2c:69:d3:32:80:a0:96:33:6b:e9:7b:fe:
95:e0:15:df:b9:c6:6f:66:0a:b7:bd:9d:a2:85:70:d4:20:d8:
04:10:e4:6f:2b:02:0e:26:4c:91:06:7f:56:0c:1d:cc:ad:b2:
c7:7c:fb:cd:fb:a7:9a:12:22:24:40:2b:b3:32:a6:a2:3a:ae:
35:a7:04:71:ec:5c:2e:fc:6d:cc:4e:ad:ce:4f:e5:15:50:d6:
c1:46:63:73:7a:4d:79:54:d9:b6:a0:dc:b4:31:eb:59:7a:0c:
44:f2:e9:18:7e:e0:05:0c:54:ca:d0:48:98:2f:6f:d5:dc:54:
1f:c4:e1:e0:ce:d4:03:6c:a0:0a:9a:75:48:f3:13:c7:90:42:
74:f4:ac:e1:15:cf:ab:84:81:d7:8c:a7:03:3b:c6:68:e2:da:
3a:8b:ae:79:c7:39:5c:fc:e1:6c:b7:83:bb:28:4d:5b:3b:f4:
06:fb:ea:33:d7:c8:0a:2c:1b:54:36:ab:cd:fc:6f:02:a1:26:
1b:8d:d5:d1:bd:fe:b4:75:f5:e9:2d:33:d6:1c:07:db:ee:dc:
f3:76:5e:c1
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYczohwc8pqeTXrn2F4axa3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwMzMwMTc0NzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGMxZmIzNDczZjAzYjUxOWMzYjQ0Y2FjMmY1MTU4MTc2MjU2NWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWKc0wJbnhQdoCGXJGMS4A1+ns4G
/Yz9GrIaS8tfph143bFhoZ2czCyMPEEC8yvSsu9jWrjbUnle4UdrtDzVBSPfluW3
BOWtCNbdaLjt+VLLeCtgdLjdv+655dLOch6C+4W33ySESHft7CUvh4NomTfqwDgV
LfCA3OFLb6vBvIgUzjQKavjFPy4d+as1rtb8me+Jpsmqww8mVsBpfr/CPZqU+Nt4
nzI07laNO+FqwecnGO9cr4a0CHGVlACkhJzRDzr4bfh2ik3CmPgtUON0h0+VgoU7
nhBZDTrF/pqnPKZl/pQrG5WZ9yA7WM6zv9picU5qO+0z6iPSSzETMNwfLwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLjB+zRz8DtRnDtEysL1FYF2JWX8MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvdU1IN05IUHdPMUdjTzBUS3d2VVZnWFlsWmZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAEuIigDBAIuIjwwDQYJKoZIhvcNAQELBQADggEBAFo8Ax4+WY/jzuyf
jdowIt8YTOQ2tZeoiIeLOIFweohxj+RGY8viiMHdTyxp0zKAoJYza+l7/pXgFd+5
xm9mCre9naKFcNQg2AQQ5G8rAg4mTJEGf1YMHcytssd8+837p5oSIiRAK7MypqI6
rjWnBHHsXC78bcxOrc5P5RVQ1sFGY3N6TXlU2bag3LQx61l6DETy6Rh+4AUMVMrQ
SJgvb9XcVB/E4eDO1ANsoAqadUjzE8eQQnT0rOEVz6uEgdeMpwM7xmji2jqLrnnH
OVz84Wy3g7soTVs79Ab76jPXyAosG1Q2q838bwKhJhuN1dG9/rR19ektM9YcB9vu
3PN2XsE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org