Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wPO2YVdMsSN46QdBccZVFfOV1b0.roa
File: wPO2YVdMsSN46QdBccZVFfOV1b0.roa (raw, json)
Hash identifier: IcKnMc1+Y1xoIdfvB224NQhKw7VSZXv4SCNbjlillqw=
Subject key identifier: C0:F3:B6:61:57:4C:B1:23:78:E9:07:41:71:C6:55:15:F3:95:D5:BD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01888F6AAA1BC682B8B2025544BEAF32CE78
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wPO2YVdMsSN46QdBccZVFfOV1b0.roa
Signing time: Tue 06 Jun 2023 06:35:12 +0000
ROA not before: Tue 06 Jun 2023 06:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 11:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:6a:aa:1b:c6:82:b8:b2:02:55:44:be:af:32:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 6 06:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0f3b661574cb12378e9074171c65515f395d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:3b:ae:78:2d:31:7f:62:30:04:69:83:8a:
06:8f:94:f1:b5:91:d6:25:39:94:e5:64:c6:63:50:
b5:4a:21:eb:2b:67:b2:44:5c:69:41:bf:cf:6e:70:
87:2d:8e:8b:50:69:5f:ed:64:87:c3:50:dd:1e:1b:
cf:14:d0:38:3c:08:5b:5f:4a:ab:8b:56:c0:1f:b4:
58:cc:8b:71:3b:fe:ec:fa:b1:b1:a7:e9:83:d8:e5:
7f:00:bd:69:f6:8a:cc:35:26:7d:29:5d:f9:8b:5c:
90:ed:11:57:68:d8:c2:9f:9e:5a:7a:7f:74:2d:97:
3d:4c:ce:0e:80:92:c4:91:20:fb:f5:49:ec:1c:bc:
58:ba:7c:7d:c7:00:d7:4d:82:8e:c3:2f:12:15:dc:
20:89:8e:68:da:42:c4:0e:2b:58:9f:6e:d7:d8:27:
ae:26:06:9d:c4:6f:38:9e:57:13:cc:66:91:f1:b9:
1f:0e:b4:ae:c4:13:63:64:f1:78:c0:64:b2:07:be:
9f:2f:11:fd:d9:26:77:87:33:1f:3a:53:35:5a:e1:
b0:fa:ef:f0:d8:17:63:a5:29:d8:f9:c0:7b:d3:91:
d0:79:e0:0f:11:bf:bb:c1:40:82:8f:e9:92:c3:bc:
cc:57:2d:bc:b9:4b:b9:25:c4:a8:d3:30:6f:b3:c7:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F3:B6:61:57:4C:B1:23:78:E9:07:41:71:C6:55:15:F3:95:D5:BD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wPO2YVdMsSN46QdBccZVFfOV1b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fc:41:29:61:5b:7a:16:3e:90:b1:17:0a:3a:94:54:2f:36:
81:9b:ea:79:1c:06:f6:4a:0f:15:e1:c3:9a:8c:8b:ab:32:2d:
65:62:62:52:cb:fc:06:3f:24:96:b5:c8:c8:f3:0a:2d:75:2e:
e9:7f:a4:24:59:8d:a2:2a:e5:cc:ab:3b:46:f3:1d:89:62:00:
18:cc:2e:93:20:56:67:62:59:16:16:f8:d3:ac:39:c7:2e:62:
80:65:08:ff:2f:1e:71:82:58:4d:1f:75:b5:ca:e7:6e:af:05:
3b:48:d6:ec:cf:dc:ca:58:a1:2d:57:a9:19:20:c7:08:a0:0e:
c6:9b:e0:56:a6:cf:67:b3:30:44:2b:14:fd:c7:3a:2c:c1:99:
e3:d7:23:ed:9b:b2:1f:2e:80:c9:2d:18:31:70:42:75:6d:16:
fa:57:62:59:5f:c1:3c:b8:9f:38:2c:fb:c0:67:77:df:cb:ff:
4d:41:05:83:d8:3a:75:00:b3:3d:95:ae:bf:26:d5:f9:79:e4:
b6:8e:e2:38:74:c4:df:3d:94:11:19:7f:49:dc:b0:03:8b:87:
56:8b:04:ab:98:42:69:3d:c9:8b:ae:d4:27:16:c5:d0:1a:d9:
b0:a9:6d:85:21:ce:d5:0d:29:05:c6:0b:05:e6:7a:35:18:37:
c1:93:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org