Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vLC74L7XtX_Zkp_H15og3Rx4cyw.roa
File: vLC74L7XtX_Zkp_H15og3Rx4cyw.roa (raw, json)
Hash identifier: ONrRKc68FU3PWdxiPzsl3r6JMFz4kQ4L1Wmv8cI03vE=
Subject key identifier: BC:B0:BB:E0:BE:D7:B5:7F:D9:92:9F:C7:D7:9A:20:DD:1C:78:73:2C
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0187FA557F1BB047D9E5A0ED137A14CDEEDF
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vLC74L7XtX_Zkp_H15og3Rx4cyw.roa
Signing time: Mon 08 May 2023 07:48:39 +0000
ROA not before: Mon 08 May 2023 07:48:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.34.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 May 2023 17:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:55:7f:1b:b0:47:d9:e5:a0:ed:13:7a:14:cd:ee:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: May 8 07:48:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcb0bbe0bed7b57fd9929fc7d79a20dd1c78732c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:b8:f1:c5:ef:96:78:f5:7c:92:a8:9b:75:
66:e5:69:6a:b7:79:6d:8f:16:f1:c4:e2:10:5d:89:
3f:20:fb:6c:84:55:fc:dc:53:9c:58:85:4a:50:cf:
b9:a0:4e:47:16:3d:ad:7b:5f:0f:8e:02:7f:1f:e8:
59:a4:ab:90:3e:1d:e7:c0:42:77:6b:a1:75:ed:0f:
49:8a:a4:90:f7:9a:63:d7:d8:4a:74:ce:18:7a:9c:
fe:e0:99:8d:ca:7e:78:49:54:78:65:31:b9:a8:79:
35:f1:d1:61:9b:2f:6a:d0:11:b9:cd:90:db:0e:29:
51:99:52:bf:8c:a9:55:e3:9e:c7:54:63:58:f3:d4:
70:39:4f:07:ab:26:b6:81:fb:27:47:fc:e6:12:48:
22:e4:50:dc:b3:ec:a5:84:8b:e0:de:7a:87:c6:d7:
7e:0d:4a:18:0b:9c:bc:05:f4:6c:53:eb:77:9f:12:
1a:de:fd:06:c6:29:29:a6:2f:46:75:81:61:e2:73:
fe:82:84:b4:a7:eb:40:0f:1a:20:c2:73:35:9b:c7:
a7:a4:fe:f2:d4:94:99:d7:d7:59:90:48:d1:20:e4:
36:5e:87:51:0c:55:ed:93:69:68:ae:6f:3b:fa:b8:
3c:44:c0:28:09:c3:d6:5c:b1:75:ec:39:5b:28:87:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:BB:E0:BE:D7:B5:7F:D9:92:9F:C7:D7:9A:20:DD:1C:78:73:2C
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vLC74L7XtX_Zkp_H15og3Rx4cyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.46.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:68:5f:7a:db:68:e2:f9:2a:ac:41:57:b3:f3:14:06:ec:
75:23:cc:7c:25:5d:02:dd:6f:07:4c:ae:5a:19:19:e6:ea:db:
6a:94:0a:e6:fd:9d:94:a6:b6:7d:49:48:57:36:9a:e9:02:00:
3e:72:ac:b0:91:0a:9c:ad:93:ab:11:c1:c5:60:db:af:70:ae:
b6:29:ad:fc:51:d4:2d:eb:83:62:15:d0:df:8d:11:74:64:b8:
1e:e7:46:f7:f7:af:4d:43:d0:13:00:2b:39:14:22:a4:5b:0c:
e4:ff:0d:0b:f3:b2:5d:66:af:8d:95:22:82:fc:8b:e6:b4:9d:
2d:ed:4d:ac:0e:b3:ef:3b:53:c4:3c:13:72:6f:17:32:3a:94:
bd:5e:c5:55:3c:3a:5b:68:70:e0:ba:13:ce:3d:5b:ab:fb:90:
20:f6:9a:71:74:e9:b2:2e:07:b7:e8:8b:c2:2d:17:55:30:e2:
f7:d6:f3:5a:2e:1b:7b:51:ae:20:e0:3d:30:f7:45:ba:b5:1b:
9b:90:5d:53:1b:49:06:b3:b3:28:63:a0:8e:c2:c3:dd:d3:c8:
a8:df:fe:ab:51:f9:38:e1:74:41:e6:1e:84:ee:5a:83:f5:d5:
34:5f:10:6f:29:8f:2f:b2:5f:69:17:e5:a2:ba:7e:d4:11:63:
09:0d:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org