Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yHs8FMT-lRJ_sd4zVP_UWC6_Bg4.roa
File: yHs8FMT-lRJ_sd4zVP_UWC6_Bg4.roa (raw, json)
Hash identifier: KKu7BoroP6rWKlSuHbgAyytGBkQDIm+voKS8En/irLU=
Subject key identifier: C8:7B:3C:14:C4:FE:95:12:7F:B1:DE:33:54:FF:D4:58:2E:BF:06:0E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189E1F41C7FB9CBA248891654FAB8A3CD08
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yHs8FMT-lRJ_sd4zVP_UWC6_Bg4.roa
Signing time: Fri 11 Aug 2023 00:16:58 +0000
ROA not before: Fri 11 Aug 2023 00:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 46.34.60.0/24 maxlen: 24
46.34.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 10:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e1:f4:1c:7f:b9:cb:a2:48:89:16:54:fa:b8:a3:cd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 11 00:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87b3c14c4fe95127fb1de3354ffd4582ebf060e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f3:fe:8e:69:f6:e6:49:1d:0a:9d:89:3e:4e:
e5:22:b5:7d:b8:8e:07:c3:21:44:48:bc:0c:6f:1a:
21:3f:26:46:95:90:81:1a:6e:b0:49:be:7f:a6:d8:
4b:95:80:9b:46:53:7b:b8:7b:5a:06:92:58:28:b2:
d2:d3:1c:8d:d2:4e:02:d3:4f:ea:93:e9:80:07:7c:
41:97:11:4b:95:68:0e:bd:77:f7:57:8b:d9:f7:ea:
a4:ea:b5:73:be:ad:45:2b:6e:39:02:20:89:de:5d:
32:3f:7c:0d:2d:4a:f0:af:68:67:05:b1:a3:4d:8e:
01:ee:48:8c:c1:c7:e3:e9:32:38:19:0b:f7:6c:12:
e0:cb:69:15:e3:a4:f7:59:5b:c7:f2:b0:e2:f4:64:
50:ef:98:7f:d0:1a:e5:93:d7:71:38:85:9b:04:df:
a8:f7:39:79:87:fc:89:4b:a2:c9:d8:cf:ab:c1:ed:
80:ac:b9:a4:7b:c1:83:8c:56:8e:2c:b3:a6:7c:6d:
61:52:76:7c:da:f3:86:6b:74:6a:55:02:ef:b4:e0:
41:7f:98:2a:3d:4a:e6:e2:6e:3e:ce:8b:5a:f2:5e:
1e:e3:3c:6f:e8:84:a4:5f:b6:48:6f:25:07:33:80:
a6:35:81:85:f6:ef:2b:88:4d:f6:7b:ad:bd:ec:a0:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:3C:14:C4:FE:95:12:7F:B1:DE:33:54:FF:D4:58:2E:BF:06:0E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yHs8FMT-lRJ_sd4zVP_UWC6_Bg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.60.0/23
Signature Algorithm: sha256WithRSAEncryption
56:0d:aa:59:13:96:f0:a8:0b:d7:80:86:27:36:85:61:2c:e8:
ef:20:50:8f:0c:0b:09:a0:cf:d8:f1:81:31:c3:f0:ba:3e:c0:
4f:c3:0f:84:10:3c:85:b3:a2:72:bb:36:d5:0e:a1:8b:6d:6a:
10:02:5a:f1:76:b7:56:5c:d0:68:bc:06:8b:a4:03:d4:84:e3:
7f:df:b4:96:1d:ff:64:ba:6a:97:c1:16:9a:ef:91:77:66:53:
ff:61:e5:59:89:c3:49:09:6b:ad:56:11:ca:dd:1e:66:ac:86:
47:30:ee:12:66:32:04:d0:b4:67:b9:84:b9:db:85:63:43:68:
92:92:32:7e:f0:8e:54:a9:c2:9b:0c:f3:da:98:d9:d8:e4:87:
b7:b1:55:a3:99:4c:c4:e2:f3:f4:15:11:51:f9:5e:02:cc:ba:
ba:bb:b1:40:ec:23:4a:91:dd:bd:72:d5:6c:dc:7e:fd:04:07:
32:fd:48:88:74:ae:ad:03:3b:bd:f5:8b:1b:e9:fd:e3:31:9e:
ef:0a:e4:b2:bb:e4:42:2d:43:5d:62:06:25:e6:6b:b4:09:22:
f4:7b:bd:11:2f:8f:33:68:98:5b:7a:c3:90:ca:2a:85:d0:1e:
2e:2e:0a:bd:d0:13:c5:58:ed:67:ca:fa:94:92:4e:92:72:e8:
9f:49:8e:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnh9Bx/ucuiSIkWVPq4o80IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwODExMDAxNjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODdiM2MxNGM0ZmU5NTEyN2ZiMWRlMzM1NGZmZDQ1ODJlYmYwNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/P+jmn25kkdCp2JPk7lIrV9uI4H
wyFESLwMbxohPyZGlZCBGm6wSb5/pthLlYCbRlN7uHtaBpJYKLLS0xyN0k4C00/q
k+mAB3xBlxFLlWgOvXf3V4vZ9+qk6rVzvq1FK245AiCJ3l0yP3wNLUrwr2hnBbGj
TY4B7kiMwcfj6TI4GQv3bBLgy2kV46T3WVvH8rDi9GRQ75h/0Brlk9dxOIWbBN+o
9zl5h/yJS6LJ2M+rwe2ArLmke8GDjFaOLLOmfG1hUnZ82vOGa3RqVQLvtOBBf5gq
PUrm4m4+zota8l4e4zxv6ISkX7ZIbyUHM4CmNYGF9u8riE32e6297KCMoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMh7PBTE/pUSf7HeM1T/1FguvwYOMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEveUhzOEZNVC1sUkpfc2Q0elZQX1VXQzZfQmc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiI8MA0G
CSqGSIb3DQEBCwUAA4IBAQBWDapZE5bwqAvXgIYnNoVhLOjvIFCPDAsJoM/Y8YEx
w/C6PsBPww+EEDyFs6JyuzbVDqGLbWoQAlrxdrdWXNBovAaLpAPUhON/37SWHf9k
umqXwRaa75F3ZlP/YeVZicNJCWutVhHK3R5mrIZHMO4SZjIE0LRnuYS524VjQ2iS
kjJ+8I5UqcKbDPPamNnY5Ie3sVWjmUzE4vP0FRFR+V4CzLq6u7FA7CNKkd29ctVs
3H79BAcy/UiIdK6tAzu99Ysb6f3jMZ7vCuSyu+RCLUNdYgYl5mu0CSL0e70RL48z
aJhbesOQyiqF0B4uLgq90BPFWO1nyvqUkk6ScuifSY6H
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org