Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yJvb0DorY9bYYS39Xgye4sQnynM.roa
File: yJvb0DorY9bYYS39Xgye4sQnynM.roa (raw, json)
Hash identifier: zHG7BZwJSZosX+Y+PMKTDzXh4l66CI4WFb2dKvtC8M8=
Subject key identifier: C8:9B:DB:D0:3A:2B:63:D6:D8:61:2D:FD:5E:0C:9E:E2:C4:27:CA:73
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186C8B24C03D8CDB4CDA35010EE8BA40DB5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yJvb0DorY9bYYS39Xgye4sQnynM.roa
Signing time: Thu 09 Mar 2023 23:26:13 +0000
ROA not before: Thu 09 Mar 2023 23:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/23 maxlen: 23
46.34.52.0/24 maxlen: 24
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 12 Mar 2023 14:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c8:b2:4c:03:d8:cd:b4:cd:a3:50:10:ee:8b:a4:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 9 23:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89bdbd03a2b63d6d8612dfd5e0c9ee2c427ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:9b:87:42:95:c3:88:f1:ac:86:6e:9d:3c:
7a:aa:3d:7e:9a:7f:67:9d:c6:fc:6b:c5:0a:b8:92:
9c:66:ff:60:41:31:33:0f:3f:88:97:e5:e9:d6:84:
ca:19:83:89:7f:b2:59:84:33:6f:99:52:a2:b9:af:
dc:14:94:d1:9d:28:b4:c6:bc:70:ab:9f:b1:de:42:
2d:bf:43:24:ee:bb:f2:0b:a4:51:0c:c8:52:6e:1d:
e4:51:8b:19:fb:92:41:ea:6c:95:71:e3:58:db:01:
14:52:0e:41:c2:ab:c6:0a:2d:2c:c4:c5:97:d3:6e:
c8:0a:74:5d:3c:97:92:f4:92:d7:21:03:88:38:ab:
8b:04:d1:21:0d:12:15:f6:03:86:96:85:f3:e0:49:
bb:4b:85:4f:55:e6:1d:72:18:95:3d:8c:f4:9d:cd:
2a:c0:d4:60:65:5f:2d:de:63:a3:a9:80:ff:0e:41:
51:03:2a:27:7b:04:ce:bf:41:01:eb:a3:68:60:56:
c3:ca:d4:6b:08:9a:20:55:a7:a6:6d:4c:e3:f7:f5:
ce:06:6f:58:5b:d8:27:ec:71:9d:35:76:16:3b:26:
ca:f6:67:16:58:0c:46:fd:42:ef:90:b9:2a:c5:66:
2d:68:0c:ba:53:31:8f:c8:8e:c9:d9:5f:b1:33:02:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:DB:D0:3A:2B:63:D6:D8:61:2D:FD:5E:0C:9E:E2:C4:27:CA:73
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yJvb0DorY9bYYS39Xgye4sQnynM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.52.0/24
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:be:ad:b7:cb:e7:d1:29:fe:71:42:ae:51:5b:42:ef:82:35:
a7:56:50:32:85:dc:0f:b6:7e:13:3d:b8:9c:99:e6:a3:8d:8c:
17:2e:bb:7d:ff:9a:b1:18:c4:d4:59:a0:79:74:fb:62:a2:6a:
e2:59:8d:22:d8:54:6e:a1:c4:72:50:60:c7:4f:36:0b:40:0b:
86:4a:e3:a7:36:74:af:2f:07:f2:25:2e:ff:d0:51:90:5c:b3:
6e:39:a8:d0:a3:21:65:08:ca:1b:1c:e4:91:6c:da:3e:d1:dc:
24:db:a5:bc:be:de:c4:83:a7:58:4e:d4:15:47:e2:6c:c8:85:
2c:8f:81:5d:1e:c1:9d:47:61:45:74:58:39:25:62:59:03:e7:
b1:71:74:20:9a:05:b3:ee:cb:f4:ce:72:5d:a8:f0:f8:80:0d:
01:2a:07:f3:f3:6d:96:4b:94:be:77:50:0a:48:e2:c5:95:51:
d8:aa:c1:f9:20:29:49:bb:30:74:28:5a:b6:bb:0f:b1:f8:66:
9f:4b:3f:9c:fa:b3:89:b0:80:c0:ef:06:62:66:5c:43:fa:cb:
65:4c:f7:c7:ac:db:b1:14:10:ee:7a:fa:75:b2:fd:94:d6:e7:
b4:23:d3:dc:e3:d6:10:46:2e:5c:08:89:ec:04:37:2d:96:37:
34:d2:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org