Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vJpchDVhl1QXTf5pzLfu5Dbmat4.roa
File: vJpchDVhl1QXTf5pzLfu5Dbmat4.roa (raw, json)
Hash identifier: OoVPhk2pnpgfVBZQUqrS3D0h3w+T15wvXsebFJ3VFDU=
Subject key identifier: BC:9A:5C:84:35:61:97:54:17:4D:FE:69:CC:B7:EE:E4:36:E6:6A:DE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01888B057A991EDB7BC70B76FD1894D4FB37
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vJpchDVhl1QXTf5pzLfu5Dbmat4.roa
Signing time: Mon 05 Jun 2023 10:06:12 +0000
ROA not before: Mon 05 Jun 2023 10:06:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Jun 2023 06:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:05:7a:99:1e:db:7b:c7:0b:76:fd:18:94:d4:fb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 5 10:06:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc9a5c8435619754174dfe69ccb7eee436e66ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:83:5d:50:29:a2:13:7b:c7:e6:98:2a:a9:
7f:4e:26:bd:7c:c8:f9:09:56:a5:2e:9c:61:39:23:
43:77:a0:f5:5d:7d:fc:21:90:3c:c4:23:0c:99:8b:
30:1f:51:1d:cc:a9:59:95:2c:f1:e5:22:cf:55:78:
25:1e:bb:0d:8c:0c:f4:a1:e4:07:44:03:87:ac:ce:
08:3a:e3:5b:a4:22:5b:6a:6b:7b:62:d7:af:20:0f:
18:c3:3b:55:43:67:db:44:cb:fb:5f:50:d8:cb:72:
c9:ad:f9:93:ed:9d:5b:6f:59:b2:97:90:f7:1b:f0:
92:22:d8:78:fe:0c:40:bc:60:af:1e:1d:20:78:94:
7f:87:e3:33:e3:e8:2b:ea:c3:4a:bb:e1:ad:06:c7:
d5:68:bc:0b:10:dd:19:bc:81:8f:28:e9:b9:fb:cb:
a9:01:a4:c3:55:69:28:dd:e4:07:3e:cb:44:09:f1:
fb:9a:b8:71:11:3b:2c:8c:5f:f9:38:60:04:a4:fa:
00:2f:e0:00:32:33:29:d5:c7:8f:e4:89:4f:87:7e:
94:5e:a1:8a:ad:7a:c4:5f:64:29:bb:12:32:68:2e:
08:44:07:41:81:06:a5:b3:91:7f:5e:5c:5a:77:88:
51:f5:30:72:fb:df:c9:5c:a7:68:37:cb:b6:ce:0f:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:5C:84:35:61:97:54:17:4D:FE:69:CC:B7:EE:E4:36:E6:6A:DE
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vJpchDVhl1QXTf5pzLfu5Dbmat4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e5:b9:28:63:2b:a3:b2:a6:f5:c7:51:4d:3f:6d:ab:08:64:
a4:9d:7b:24:7d:3e:aa:2d:d7:62:72:e5:0d:b3:f6:d2:6b:a8:
24:66:2c:7a:c8:fd:29:7d:eb:b0:c8:ed:7c:8b:c9:00:4c:f2:
a6:e7:a5:0c:f6:3f:34:97:b3:22:3c:d8:d7:80:e1:a6:da:70:
7e:8b:22:81:b4:46:a1:83:d4:85:70:16:9a:9d:2c:05:f7:58:
e5:af:9c:d2:2c:fa:29:43:68:6f:92:e0:40:ab:39:59:a4:fa:
9a:a3:68:17:b3:20:02:97:03:a5:f1:59:5c:b9:52:0a:29:c2:
72:d0:58:59:57:2f:5b:f1:39:3c:6a:8a:db:70:a1:e2:8c:bd:
90:59:ad:88:16:3b:95:fb:35:fe:c3:90:1a:b4:4d:3f:e2:9c:
39:74:7a:6e:5f:8e:f3:57:90:8b:19:6c:1d:26:8b:8d:db:3a:
77:f4:0b:5f:b9:32:01:94:f0:48:32:af:76:25:36:ff:72:42:
58:9f:c3:aa:7c:18:34:fd:d3:50:92:1d:0c:99:ac:e7:7b:87:
b5:f7:34:92:b4:bc:62:f5:51:c1:5a:40:c9:ec:a7:4c:3a:4c:
42:e1:07:ee:ae:8f:b1:b5:eb:46:1e:5c:58:27:89:cd:f8:60:
7c:60:97:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org