Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/Shwo-iJZYQ-GoLVhqrn1egeue7o.roa
File: Shwo-iJZYQ-GoLVhqrn1egeue7o.roa (raw, json)
Hash identifier: RURzW7yhTyvJFbdBwroF3mVP2XbJ/i0G7dBUaOLlkcQ=
Subject key identifier: 4A:1C:28:FA:22:59:61:0F:86:A0:B5:61:AA:B9:F5:7A:07:AE:7B:BA
Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019
Certificate serial: 018726A0F9B65D9AD0B3C00415190B01DFDC
Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/Shwo-iJZYQ-GoLVhqrn1egeue7o.roa
Signing time: Tue 28 Mar 2023 05:11:36 +0000
ROA not before: Tue 28 Mar 2023 05:11:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39824
IP address blocks: 46.36.128.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 02:14:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:a0:f9:b6:5d:9a:d0:b3:c0:04:15:19:0b:01:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b243a7233e571c3c173eb8249111906326019
Validity
Not Before: Mar 28 05:11:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a1c28fa2259610f86a0b561aab9f57a07ae7bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:46:ac:d9:2a:ae:17:07:b8:f3:d4:4d:51:ad:
25:b6:88:d3:71:38:ed:7c:2b:1b:63:19:6a:ce:d4:
0c:5c:f4:63:35:8b:1d:5a:97:6c:2f:db:eb:14:cb:
35:ca:ca:42:a7:d8:ed:c6:2d:1c:fb:7a:af:46:71:
87:3e:67:33:92:6a:92:28:30:b2:0b:4c:03:47:d9:
98:3d:43:05:69:39:b8:c8:5f:63:c8:85:a6:21:b1:
34:f1:f4:b9:25:e1:29:18:66:5c:d7:59:c4:b3:03:
97:d9:e5:3c:63:3e:98:e3:3f:da:d2:dd:fe:d2:ba:
57:6a:e7:dd:05:29:5f:43:10:d0:aa:5c:85:2b:47:
ad:aa:bc:fc:ea:f2:76:7b:da:4d:c7:11:92:89:7f:
8d:a9:cb:0a:b9:bd:a8:2e:50:ac:07:a1:3a:d3:2b:
79:d2:20:7f:66:1b:cc:56:ba:cb:83:74:51:69:0b:
1c:d5:9c:31:2b:89:7c:41:82:0a:81:1a:e8:ab:2f:
90:88:14:cb:d7:30:c0:7e:34:86:96:e8:9c:01:a2:
50:4d:44:57:83:5d:46:82:02:f5:3d:52:f8:bb:e7:
6b:ce:e7:21:36:e0:45:1a:99:b4:a9:31:a7:34:d2:
9b:0c:e6:7e:45:24:17:23:e6:ab:b3:ff:06:60:f9:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:28:FA:22:59:61:0F:86:A0:B5:61:AA:B9:F5:7A:07:AE:7B:BA
X509v3 Authority Key Identifier:
keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/Shwo-iJZYQ-GoLVhqrn1egeue7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.128.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:8e:3e:34:f4:b5:d2:81:d6:cc:08:8d:4a:6c:88:37:2d:1b:
58:78:fc:70:af:80:36:29:b3:41:d1:09:9f:e5:dd:05:70:e2:
75:a2:31:e7:46:70:0d:3a:d0:3b:5b:3f:1a:2d:9c:14:3c:b4:
57:6f:ee:c1:72:f4:f7:c1:32:e5:95:83:c6:e6:53:76:dc:34:
63:07:a8:e0:fc:9a:d5:b5:67:00:27:06:d0:dc:9d:14:ba:3b:
9d:5a:11:ea:60:53:40:35:ed:90:a3:3d:76:dc:51:81:34:50:
62:9a:0f:81:e8:a9:59:75:8e:1c:b6:6e:28:2b:93:03:06:e5:
85:bd:18:64:cd:a7:86:27:34:ad:e8:2c:5f:77:1a:58:a7:62:
bf:e7:35:1e:2a:d7:d9:1a:bf:6e:47:72:f1:71:16:e2:d7:b1:
ec:c6:85:b0:78:53:b8:6b:da:5a:c9:e0:33:bf:4f:e1:bc:1d:
3a:5d:6d:de:1a:d8:93:bb:d2:cd:71:2c:17:a4:8b:50:ec:b1:
bc:95:70:bb:bf:64:45:85:0b:f2:c2:f0:a5:ee:a4:2b:ac:f1:
1f:ec:10:62:10:de:95:eb:9a:78:ee:c8:1f:7a:32:d3:d0:09:
96:56:af:16:66:5f:ff:6c:5e:6e:3f:dc:a7:ac:f0:73:4b:01:
28:78:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org