Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/93joTchqNxRV46nierHIaKXNEAU.roa
File: 93joTchqNxRV46nierHIaKXNEAU.roa (raw, json)
Hash identifier: LoR5B9YoQlKkcYS1DwgOz2SMowPUCKNTX7w+YeMG47c=
Subject key identifier: F7:78:E8:4D:C8:6A:37:14:55:E3:A9:E2:7A:B1:C8:68:A5:CD:10:05
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018943F5D6A6CB6247E4AF361362AAB038DC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/93joTchqNxRV46nierHIaKXNEAU.roa
Signing time: Tue 11 Jul 2023 07:58:51 +0000
ROA not before: Tue 11 Jul 2023 07:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.38.0/23 maxlen: 23
46.34.44.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:f5:d6:a6:cb:62:47:e4:af:36:13:62:aa:b0:38:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 11 07:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f778e84dc86a371455e3a9e27ab1c868a5cd1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:eb:39:a1:0f:a7:fa:bc:6e:4a:cf:7a:74:
24:d7:2c:e6:6b:5f:78:b3:5c:2b:6a:bf:2a:eb:38:
92:a6:2e:91:e1:ac:0d:9a:43:54:95:18:c4:cb:c9:
52:ab:d4:5b:bb:e5:fb:c1:8c:04:85:9f:4d:45:1b:
61:b2:22:65:ce:f2:6d:ab:6b:06:f3:96:90:5f:3d:
49:79:ef:85:02:a2:99:7d:4c:db:f3:5e:f7:0d:ad:
e7:36:b8:be:1b:48:58:b0:31:70:02:29:12:ed:d9:
a1:2b:b5:c4:fa:1d:fc:36:69:16:f0:be:16:30:44:
a7:c1:19:b0:75:f5:09:09:71:2a:a1:2c:3c:11:b6:
0f:d7:7b:56:c3:e8:a2:ec:bb:36:b5:23:c6:84:5d:
8f:23:9f:14:5a:1d:9f:c7:53:a3:25:db:38:e0:1b:
32:fc:2b:bf:28:7a:f5:e5:28:ab:fb:d0:dd:ba:55:
20:79:6a:ef:ff:6a:99:12:d1:25:f1:01:5e:e9:5c:
97:18:a7:bb:54:e2:c8:9d:b7:69:03:2f:24:46:62:
73:66:a2:09:c6:27:3f:55:b5:93:1d:fe:d7:3b:61:
bb:80:19:42:f1:05:3c:35:bb:57:26:89:3a:6b:d2:
3a:d3:30:c2:4b:f6:09:52:e7:05:e2:67:df:68:f5:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:78:E8:4D:C8:6A:37:14:55:E3:A9:E2:7A:B1:C8:68:A5:CD:10:05
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/93joTchqNxRV46nierHIaKXNEAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.38.0-46.34.40.255
46.34.44.0/24
46.34.58.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
07:be:9a:f8:af:e2:98:14:ba:c8:fb:39:f7:65:79:e0:2e:c6:
56:9f:9f:7a:fe:6b:35:06:8a:7d:7b:2a:27:09:f6:b2:5d:4e:
c7:45:b2:a6:e2:08:fa:17:9b:1c:66:e7:bb:27:8b:e1:df:53:
8e:a7:07:b4:1a:5d:61:53:11:aa:2a:52:b8:ad:c4:9c:07:d6:
6b:f7:81:e7:5c:5e:3b:55:af:14:c5:06:c0:f4:51:55:9b:1b:
75:61:27:bb:f2:84:10:a8:60:c1:b1:16:3d:50:ec:43:fd:c1:
49:b5:f0:d7:00:9f:0e:d9:eb:24:2b:19:7e:10:11:d8:01:d6:
24:3b:28:de:c0:ab:d7:48:d8:af:40:8a:22:ec:01:ff:2b:5a:
bb:dc:9f:82:b8:b9:eb:34:e0:87:39:47:4d:a8:87:74:b7:a1:
d4:2f:0c:64:b8:f7:af:84:b3:18:f8:a8:b8:71:4f:37:68:76:
36:46:e3:71:08:a9:3f:b5:94:1d:29:ad:dc:c3:10:d4:e3:d1:
c5:28:c7:aa:43:a7:0d:4e:55:d3:15:95:fa:f0:2e:f9:4e:a0:
86:a5:71:58:b6:00:69:f8:cc:09:2a:a9:ea:ee:62:41:fd:68:
15:72:ca:fe:b6:fe:7b:a8:35:e3:cd:e4:fc:98:70:56:a0:41:
63:a0:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org