Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/4bqkATvFYRQk9tR29ul0i96RguM.roa
File: 4bqkATvFYRQk9tR29ul0i96RguM.roa (raw, json)
Hash identifier: JTKJ/V++bT92V8dEKkFdp7vn15ukBaVCAZkaGydKuj0=
Subject key identifier: E1:BA:A4:01:3B:C5:61:14:24:F6:D4:76:F6:E9:74:8B:DE:91:82:E3
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 018570395DCC23C9933F96086A10670E3D73
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/4bqkATvFYRQk9tR29ul0i96RguM.roa
Signing time: Mon 02 Jan 2023 02:04:45 +0000
ROA not before: Mon 02 Jan 2023 02:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48608
IP address blocks: 46.34.96.0/20 maxlen: 20
46.34.96.0/21 maxlen: 21
46.34.96.0/19 maxlen: 19
46.34.104.0/21 maxlen: 21
46.34.112.0/21 maxlen: 21
46.34.112.0/20 maxlen: 20
46.34.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:5d:cc:23:c9:93:3f:96:08:6a:10:67:0e:3d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Jan 2 02:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1baa4013bc5611424f6d476f6e9748bde9182e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:4d:fd:47:14:a5:d3:08:ab:1e:8d:03:0e:
ad:62:0e:74:f1:c6:c1:9f:be:8e:03:10:a0:89:cf:
ea:ec:6d:b8:db:ab:ea:66:ae:55:3b:0f:fb:ff:d8:
3e:ac:54:4d:76:e3:40:ff:1b:d0:6f:8e:44:d4:4f:
d6:ed:11:25:50:2c:4a:c9:ab:96:aa:16:53:e9:11:
5d:62:b5:28:90:21:76:0e:27:2f:9f:83:6f:2a:a4:
05:fb:ef:47:ef:79:c2:b3:c2:1c:28:5c:8a:46:82:
48:d0:e8:65:de:fe:14:fd:fa:67:89:b7:61:02:e1:
21:5b:2e:6e:2b:b8:dc:e8:b0:88:0c:c0:8a:dd:7b:
15:2a:8d:d2:75:92:cb:d2:40:93:fa:79:49:c8:c6:
b3:62:0a:2a:bb:24:62:e7:6e:65:66:68:07:a1:d2:
36:ed:1c:65:48:c5:fd:10:07:fd:f8:1d:6f:58:46:
e5:24:73:e1:5a:5b:34:35:57:61:a6:58:33:29:1a:
3d:18:8d:88:c3:06:df:8f:11:d1:6f:65:d5:d2:e5:
10:1b:c7:b5:0b:f3:a3:28:84:9c:48:0d:7a:93:32:
8d:73:ab:0e:36:61:54:64:6b:fc:29:40:52:46:24:
29:27:79:55:be:8e:1d:22:38:e5:58:40:34:24:fa:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BA:A4:01:3B:C5:61:14:24:F6:D4:76:F6:E9:74:8B:DE:91:82:E3
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/4bqkATvFYRQk9tR29ul0i96RguM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.96.0/19
Signature Algorithm: sha256WithRSAEncryption
19:2f:b1:fb:7c:fa:13:67:92:cc:09:f0:75:d2:5d:ad:9b:21:
01:b0:54:c6:9b:ea:83:32:73:bf:2f:9a:43:21:28:fb:ce:21:
74:de:23:5b:e6:79:7c:b6:88:be:98:5e:26:82:ff:d0:f0:30:
59:4c:cb:ee:b1:cf:24:c2:c7:3a:7b:e8:aa:54:78:43:bd:fa:
b7:ed:68:30:85:7e:77:13:b6:d0:51:a8:08:0c:41:d0:a5:4a:
23:fc:19:2a:3d:73:c2:5e:c5:53:18:81:25:64:da:13:ce:b1:
cc:88:2b:5e:a8:90:49:a6:39:e6:71:4f:58:86:2f:5b:56:20:
db:0c:45:a1:e5:62:90:62:97:10:ae:05:50:fe:6d:7d:4d:41:
78:dd:98:69:27:c4:42:bf:28:87:87:97:b0:48:ed:e9:bc:77:
20:15:cb:94:e0:1b:8a:c8:15:d8:ad:90:f0:89:da:70:60:2e:
75:2e:36:96:bc:bd:53:b2:c1:78:4e:7e:51:cb:8e:6d:a7:04:
a9:df:3b:21:8c:8a:f8:77:4e:9a:86:e1:f6:44:33:21:47:b2:
86:14:96:9f:81:ae:9a:c6:c9:2d:34:53:ad:ce:23:ff:09:21:
6b:99:05:85:1b:fa:33:b5:bd:06:50:21:3e:6f:01:36:bb:71:
9d:3c:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:58 2024 by rpki-client on console-ams.rpki-client.org