Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vzxsastRi-2QMj3ly2kAxsYjIFg.roa
File: vzxsastRi-2QMj3ly2kAxsYjIFg.roa (raw, json)
Hash identifier: cR+tO/oZGvTOGWytHJcVSOW4t7rmMg8/PpgCLyiNMmM=
Subject key identifier: BF:3C:6C:6A:CB:51:8B:ED:90:32:3D:E5:CB:69:00:C6:C6:23:20:58
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0191DC689BF1E9BF9B04C0D22C3CC94D48C5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vzxsastRi-2QMj3ly2kAxsYjIFg.roa
Signing time: Tue 10 Sep 2024 14:48:48 +0000
ROA not before: Tue 10 Sep 2024 14:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 21:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dc:68:9b:f1:e9:bf:9b:04:c0:d2:2c:3c:c9:4d:48:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 10 14:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf3c6c6acb518bed90323de5cb6900c6c6232058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:69:72:b7:c7:71:67:58:d6:aa:75:c5:71:
21:f7:23:73:be:69:aa:b7:fd:46:0b:ff:2c:c8:b2:
6d:3a:a4:eb:31:3e:60:fc:54:b4:4d:5d:ea:d4:c8:
5f:8a:2e:92:db:ad:c8:5b:d0:ab:5f:6b:6f:aa:93:
c9:d3:d5:7a:fa:c7:39:42:db:65:07:04:e1:a1:5d:
b7:52:94:7e:e6:78:79:74:50:37:66:20:e6:49:fc:
e0:12:7e:5a:8c:28:1f:4c:53:21:05:b3:ee:d2:72:
79:93:66:bd:da:1f:10:bd:3a:5f:72:63:8e:b7:de:
4f:dd:3d:70:89:5a:c3:63:c1:97:d9:30:1c:44:0e:
f1:8b:43:b3:8b:47:79:4f:9b:05:b0:dc:7a:b6:47:
e3:78:04:ea:05:9c:5c:9a:07:b7:9e:5f:7f:12:11:
fb:c1:b3:13:fa:51:77:32:22:50:d7:21:7f:c4:3d:
4e:36:4f:9f:47:3d:a2:45:1c:c2:5b:8c:35:48:22:
bf:2a:26:50:8d:a9:07:c6:7d:9d:19:c6:40:82:13:
f1:3d:dc:9d:fb:31:7b:df:8c:e9:78:05:19:85:1d:
9e:36:82:50:72:13:c4:fd:11:4c:2d:4e:59:d9:93:
60:38:c3:f4:6e:1e:c5:e6:ee:17:9a:66:06:42:9a:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3C:6C:6A:CB:51:8B:ED:90:32:3D:E5:CB:69:00:C6:C6:23:20:58
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/vzxsastRi-2QMj3ly2kAxsYjIFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.58.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:32:23:3c:d2:32:81:f0:62:45:90:94:a7:30:20:f6:30:0d:
db:e8:8c:36:dd:55:93:93:66:e4:39:d8:ae:7d:10:82:af:ce:
22:3b:6a:ad:84:69:c3:c9:88:46:f3:14:14:cf:7b:4b:e1:7b:
57:a1:5d:69:41:c3:65:bc:51:1f:e5:67:37:e9:36:5c:9b:a6:
d1:1a:b8:4f:53:74:9b:0b:11:74:f1:f4:7d:66:92:ac:eb:4a:
ae:74:b5:8e:72:a7:9c:6e:ec:01:94:4d:1f:c3:59:d1:be:52:
36:f7:49:99:e6:64:04:88:47:3f:e1:d1:8e:6e:6d:40:1d:bf:
e2:5f:b4:da:bf:c5:75:32:af:8d:88:41:de:82:26:53:a7:a2:
d1:3c:ac:83:3c:85:31:5f:4a:61:41:18:ba:ac:38:2f:db:be:
10:ff:5c:ab:22:ab:02:3f:23:01:e1:ac:88:65:01:2d:13:5c:
72:fb:c6:7a:16:e8:55:be:9a:56:8c:e2:34:a9:26:05:c8:cd:
1e:c9:a9:6c:c4:d9:48:77:b9:83:f7:1c:04:9a:7d:d5:ff:46:
d4:59:4a:b1:33:e9:da:a1:bb:c1:ae:4e:d1:45:b3:ab:0c:b4:
6b:d6:5d:77:50:cd:2e:69:0a:1f:4c:55:a6:cb:42:4f:28:d2:
3d:8a:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:45 2024 by rpki-client on console-ams.rpki-client.org