Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BjNSpMSe7TNGQ93drPZwYJMWk1o.roa
File: BjNSpMSe7TNGQ93drPZwYJMWk1o.roa (raw, json)
Hash identifier: u/tJP45IbnB+WyWtEBsHj7JaZd6h66Nie8Dc4Krvp+s=
Subject key identifier: 06:33:52:A4:C4:9E:ED:33:46:43:DD:DD:AC:F6:70:60:93:16:93:5A
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188DD43868201DEFA5FC91EFD02069F7416
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BjNSpMSe7TNGQ93drPZwYJMWk1o.roa
Signing time: Wed 21 Jun 2023 09:22:50 +0000
ROA not before: Wed 21 Jun 2023 09:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.55.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
46.34.54.0/24 maxlen: 24
46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 07:58:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:43:86:82:01:de:fa:5f:c9:1e:fd:02:06:9f:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 21 09:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=063352a4c49eed334643ddddacf670609316935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:3f:40:27:1c:5a:8b:1f:d1:df:02:34:1c:
37:cb:27:43:e4:22:72:a9:38:15:51:6c:5b:9a:ee:
dc:1c:19:18:3e:4e:0b:7f:74:a4:6e:52:46:a4:1a:
42:5d:89:9e:e9:8a:1f:65:69:d5:35:65:c4:9d:29:
47:0e:2f:20:b5:09:e9:e1:ce:29:1b:08:57:5d:a4:
1f:35:6c:fc:b5:47:0c:0b:15:07:b7:9e:c5:8b:f7:
40:3d:c8:78:f2:44:c6:20:cd:1d:93:06:d5:dd:ca:
15:44:25:05:48:11:cd:db:d7:26:51:d0:77:31:f4:
83:fb:8a:69:ce:41:f5:5a:20:ea:41:a2:3d:b5:0a:
41:e8:13:e3:33:27:f8:1a:08:7c:d5:85:7e:63:d4:
3d:71:a1:3e:34:d5:8c:f4:94:b5:3f:43:e7:ef:02:
e2:ca:f8:e7:19:64:6f:74:9d:1a:f7:ac:9c:50:2f:
9c:a0:58:76:63:ff:64:29:00:da:4c:77:18:34:87:
e7:77:d9:f7:bf:50:2e:d5:1b:02:5c:8e:73:92:b2:
63:59:56:d6:c4:3c:da:05:6a:91:c1:29:0c:26:70:
12:78:44:5a:a2:7e:07:e3:08:23:42:97:86:c7:97:
6d:92:1b:2b:46:31:c9:56:cc:c6:17:7a:08:ac:06:
11:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:52:A4:C4:9E:ED:33:46:43:DD:DD:AC:F6:70:60:93:16:93:5A
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/BjNSpMSe7TNGQ93drPZwYJMWk1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.54.0/23
46.34.58.0/23
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f6:eb:e1:68:32:7f:8b:69:71:15:5a:94:6a:d2:95:e8:5c:
90:ce:74:43:7c:a7:eb:59:3f:3f:b7:ab:2c:6a:39:59:b2:33:
f3:91:6a:a9:09:59:d3:f8:2e:90:03:87:c1:fa:6e:db:a2:e6:
98:35:46:4e:73:f8:82:f5:46:1a:d6:d2:d1:dd:50:b4:9c:5e:
52:dc:ad:82:e0:f0:bf:3a:f8:b8:34:99:33:5f:52:1d:ee:04:
36:e8:df:cd:07:7c:9d:1d:3c:53:1b:46:b0:e7:0a:56:73:a2:
ba:2a:76:d5:ae:e3:63:a7:1e:8f:1a:2f:23:22:32:6c:2a:1d:
46:c1:db:59:af:d4:4e:91:2a:58:74:31:2a:7d:41:cc:78:55:
46:87:a7:4b:f5:e8:1b:e9:4b:cc:17:8c:1b:cf:cd:cb:39:5f:
64:1d:8f:f6:fc:6e:b2:ae:77:9e:c6:13:71:94:0d:3a:53:e9:
ff:42:3a:ac:60:6b:6c:04:d2:5f:d8:e5:65:29:08:08:f9:23:
eb:98:0b:bd:3f:e4:39:77:65:d2:ad:75:83:a7:bd:f2:ac:29:
bf:a6:f3:0e:e5:3b:3d:63:ff:59:98:e7:56:c3:b5:05:33:bf:
6c:33:75:ac:9f:10:f3:be:81:c0:7f:c0:37:59:e5:0d:c4:a5:
f9:28:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org