Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3USDvFbRURECLhXROHSWE30zZa4.roa
File: 3USDvFbRURECLhXROHSWE30zZa4.roa (raw, json)
Hash identifier: LKH4Qr/65kSmP7FV0w01SCK1uAt1wbCnfJOluzbRA2M=
Subject key identifier: DD:44:83:BC:56:D1:51:11:02:2E:15:D1:38:74:96:13:7D:33:65:AE
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018945A4218B0FD3BAD9A1A17ABAC24C36F3
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3USDvFbRURECLhXROHSWE30zZa4.roa
Signing time: Tue 11 Jul 2023 15:48:51 +0000
ROA not before: Tue 11 Jul 2023 15:48:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 46.34.39.0/24 maxlen: 24
46.34.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 17:10:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:a4:21:8b:0f:d3:ba:d9:a1:a1:7a:ba:c2:4c:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 11 15:48:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4483bc56d15111022e15d1387496137d3365ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fe:32:f7:50:b0:25:79:96:1c:2e:45:ab:68:
a6:07:9d:49:bd:1d:80:bc:de:ee:ff:30:9f:f4:56:
31:00:3f:4b:ac:ba:13:87:df:bc:79:a7:22:97:57:
e0:4b:ee:e7:f7:4f:21:0a:67:99:6e:5a:e7:89:69:
c9:17:e7:14:9d:72:d1:c7:92:aa:47:0e:04:e2:da:
dd:0d:9f:34:e1:5a:13:32:df:b2:46:a0:55:49:61:
12:c1:d8:ea:c6:2e:48:2c:83:f4:14:4c:e8:f6:cb:
f2:97:16:bc:e4:96:79:bb:fc:62:b5:f8:bb:06:e3:
72:75:e7:6d:d8:9c:dd:ae:90:a7:3e:28:ae:35:e1:
6d:81:e1:b4:2b:10:08:de:4d:3c:bc:9a:3a:99:b8:
25:8e:e9:97:c2:16:94:be:ec:8d:73:52:df:3b:5e:
e2:d1:5f:5c:2c:02:f6:09:0f:7b:e8:af:f3:4e:5b:
59:f2:c6:5a:28:d5:61:80:50:6a:96:f3:96:a5:e7:
6e:13:fe:8b:f9:43:8f:d5:e3:a1:56:3d:e2:ae:c4:
a6:95:ce:b8:91:e4:12:d9:62:bd:fe:04:eb:e8:37:
0d:b2:ec:2a:30:f9:04:fb:84:20:ab:61:25:38:a5:
6a:6d:37:e7:f5:75:47:6d:dd:0f:77:75:4e:94:d2:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:44:83:BC:56:D1:51:11:02:2E:15:D1:38:74:96:13:7D:33:65:AE
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/3USDvFbRURECLhXROHSWE30zZa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
46.34.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b6:90:a0:11:eb:a6:eb:1c:07:e6:4a:f3:be:c2:83:27:a6:
8a:05:cb:76:53:61:59:d2:04:4d:be:e3:13:eb:e8:c5:cf:70:
69:75:62:62:d2:10:0a:5c:e6:06:26:ec:b0:62:92:04:fe:25:
4e:bd:99:74:e6:aa:e5:75:8f:0b:9e:09:39:ee:51:6e:62:d0:
db:e8:4f:55:27:f5:d1:cf:33:6d:68:22:05:b4:2a:24:08:a1:
9a:8a:53:8e:85:b5:e6:34:51:ed:18:e3:0f:e8:e4:f2:9d:4a:
11:38:61:36:eb:fe:61:32:fa:c2:a2:56:36:27:c4:ee:89:2d:
3e:16:00:62:33:7e:80:39:a4:66:e9:22:3c:f7:a6:bc:cb:02:
e4:72:18:55:17:60:97:23:a0:c3:a3:65:83:bc:51:1c:fd:8e:
59:bb:6f:af:c6:d8:8d:f0:f8:e1:30:3d:e1:0f:17:a1:8a:12:
ef:5b:79:37:9b:09:01:ce:40:51:1c:2b:f3:de:4d:a0:03:9b:
a3:d0:cc:20:41:dc:f8:8a:dc:a7:a2:95:9a:eb:54:4f:58:30:
bc:46:1b:34:ae:02:5d:b6:23:f5:54:b5:53:6a:a9:71:12:7d:
59:72:50:53:56:f2:f7:3b:e1:40:b8:4a:8a:3a:3b:9c:9b:94:
e1:7e:33:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org