Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wRKVFJCP-nPLK_CH303HjBa1Rs8.roa
File: wRKVFJCP-nPLK_CH303HjBa1Rs8.roa (raw, json)
Hash identifier: U0feqVyEVJ98wrOhqCfr2DQwmPA+u03D4jb8/xk3GaI=
Subject key identifier: C1:12:95:14:90:8F:FA:73:CB:2B:F0:87:DF:4D:C7:8C:16:B5:46:CF
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B3820F908EDA6B73F1570A6F2A1C065C5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wRKVFJCP-nPLK_CH303HjBa1Rs8.roa
Signing time: Mon 16 Oct 2023 10:56:06 +0000
ROA not before: Mon 16 Oct 2023 10:56:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
46.34.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 13:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:20:f9:08:ed:a6:b7:3f:15:70:a6:f2:a1:c0:65:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 16 10:56:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1129514908ffa73cb2bf087df4dc78c16b546cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:7f:a4:35:43:7b:d4:f5:70:44:3c:b1:8f:
b0:dd:08:b6:0b:73:23:c1:ce:f2:a6:fb:b4:34:36:
b8:8b:32:84:25:cd:30:83:98:f5:c4:1b:5d:7d:34:
83:c0:cb:e1:3e:1e:c6:91:d9:ee:ce:d1:4b:7a:32:
db:9c:9f:76:f5:b1:47:2d:93:20:a6:6e:65:79:fb:
e6:7f:0c:20:ae:72:45:5b:0a:40:57:8f:7c:84:08:
a8:b9:16:7f:b5:98:0a:10:26:2f:ad:61:d9:9a:cd:
6b:b7:2e:58:dd:fd:a9:bc:0e:8e:93:4f:d0:a9:17:
ab:fe:8f:db:4f:d8:11:d8:14:db:a8:5c:59:1c:69:
74:7f:f4:e8:fd:1e:f8:a4:84:dd:f5:7c:fc:5c:64:
e9:7d:ae:84:b8:1e:cd:ba:92:20:88:b1:87:b1:30:
e8:f4:54:e7:96:6d:bc:09:8a:e3:42:e5:14:49:5f:
60:db:b1:dd:45:16:f7:7f:b3:33:92:2c:1a:37:19:
e2:2c:50:aa:76:eb:70:c0:76:dc:99:74:76:b1:02:
2e:4e:34:79:0e:8b:0b:11:1a:48:61:8b:78:c8:86:
57:9d:0e:4c:f8:32:6f:f7:d7:2f:06:ce:f4:f0:59:
12:19:68:5d:1a:76:b6:a5:3a:61:18:90:7f:d5:a2:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:12:95:14:90:8F:FA:73:CB:2B:F0:87:DF:4D:C7:8C:16:B5:46:CF
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wRKVFJCP-nPLK_CH303HjBa1Rs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.54.0/24
46.34.60.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ac:77:1d:fa:41:41:35:1a:db:98:8b:13:9f:cc:8e:06:d0:
c0:8d:f2:f2:e2:bc:51:08:1b:bc:c8:07:41:78:b8:43:45:a8:
e2:16:6e:f8:aa:04:98:32:3b:bb:2e:b5:62:9e:93:19:0c:bb:
87:9c:5a:59:73:4e:7a:0f:cd:64:80:f3:e3:61:24:1e:9f:b6:
d5:40:cb:96:23:25:20:46:e8:51:10:66:3f:66:06:a7:54:73:
7d:ad:aa:f0:1b:eb:77:08:1b:1c:a8:2d:4a:40:6d:1f:26:82:
05:25:0f:ea:34:64:a9:0b:79:fc:2b:6d:cd:a3:2a:b3:a1:03:
2f:be:5a:0a:e3:1f:50:0b:42:dc:03:eb:7a:3e:62:c4:9d:a7:
59:67:d8:f1:86:b4:f3:fe:99:f2:c6:e3:70:c3:14:ee:42:b5:
6e:0f:6b:6d:d2:58:2b:0a:2a:b3:73:2d:ed:8f:67:f1:ac:5e:
26:21:9c:da:74:2f:62:11:33:5f:80:bd:e3:ce:07:ff:3e:d4:
31:fc:92:af:90:05:fd:38:49:24:0a:64:6b:e7:2c:54:d7:df:
9c:8c:e2:19:d2:72:d9:f5:bb:35:16:ae:33:0b:19:54:95:b8:
20:cb:02:f7:d9:11:d7:b1:04:62:bc:26:5d:a3:30:23:71:2f:
52:0c:c6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org