Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Cz8TEoPt1Jx5VTDt7Y501BtGN9s.roa
File: Cz8TEoPt1Jx5VTDt7Y501BtGN9s.roa (raw, json)
Hash identifier: Q13ff4D0DHXTRzqKILFqE73n70rOWuJO7Mtmx3PtoxM=
Subject key identifier: 0B:3F:13:12:83:ED:D4:9C:79:55:30:ED:ED:8E:74:D4:1B:46:37:DB
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A704AF20EAF596A240B3189EC519FB4A8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Cz8TEoPt1Jx5VTDt7Y501BtGN9s.roa
Signing time: Thu 07 Sep 2023 15:37:54 +0000
ROA not before: Thu 07 Sep 2023 15:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:4a:f2:0e:af:59:6a:24:0b:31:89:ec:51:9f:b4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 7 15:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3f131283edd49c795530eded8e74d41b4637db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:35:ec:83:1d:5b:0e:e5:2d:2c:c3:42:d2:
f1:23:a7:23:9b:ed:1c:a7:22:6c:2f:08:f8:b3:21:
cb:81:8b:6b:20:29:8a:6c:23:e2:21:de:85:a7:30:
b1:a0:94:64:41:be:9a:da:82:70:d5:e0:c2:c8:94:
82:6a:58:a0:17:fa:cd:1c:bd:e0:a9:40:c9:6a:a5:
39:68:71:95:c2:f4:79:c7:13:d1:37:a8:aa:c0:04:
03:7d:36:2b:14:14:be:cb:5d:ad:93:60:a6:22:c6:
aa:f1:d7:8f:a6:df:3c:62:77:ba:b2:69:16:7c:ef:
d0:f9:71:25:af:cb:20:d5:d2:24:5b:ee:52:1c:b9:
b7:5f:f7:5d:51:ba:f1:4e:c9:93:e7:30:84:06:0f:
ae:21:f4:89:8f:f6:31:cf:bd:18:d6:bd:da:43:d0:
e5:57:66:aa:85:e6:20:5b:5c:35:45:d1:01:01:88:
e1:29:22:76:b6:05:4b:76:82:b4:55:8a:72:8f:53:
d3:a6:5f:47:0b:09:87:73:79:d8:53:80:d3:c7:90:
8f:df:9c:d2:49:3f:1f:aa:4a:48:47:d7:63:87:8b:
5c:e9:53:2a:19:df:fa:8d:3e:0f:03:29:bd:b1:c2:
89:13:3a:00:c9:73:f7:1b:93:79:cc:b4:99:68:59:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:13:12:83:ED:D4:9C:79:55:30:ED:ED:8E:74:D4:1B:46:37:DB
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Cz8TEoPt1Jx5VTDt7Y501BtGN9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:dd:e9:1c:d2:1f:76:4b:7d:b2:19:ed:a1:cc:3c:20:18:28:
99:c4:12:4b:98:88:48:fe:01:fe:5b:24:0f:83:43:18:e2:1d:
69:42:1b:e6:14:55:19:25:ca:a0:cc:7d:bf:27:96:31:89:2a:
0f:76:ad:a4:ad:a1:f2:03:0e:dc:c1:f9:d1:1d:f7:0d:b4:e4:
40:98:fd:cf:17:2f:80:d9:ae:43:61:0f:65:de:79:1d:ea:ae:
c0:1c:52:d8:dd:e8:4a:f3:6c:c9:e5:54:85:4a:19:e4:8c:d3:
54:77:da:ed:12:17:38:35:d0:1a:7a:90:23:78:d0:eb:ae:3f:
23:09:de:55:5a:af:0c:a1:e4:40:73:3d:fd:76:30:48:37:4d:
b0:e9:33:7f:33:46:bd:2d:a1:57:bb:2e:bb:50:c0:8d:fa:2b:
38:5f:72:53:06:47:01:b1:8d:1c:c6:60:d2:80:12:79:21:df:
c7:88:c1:37:bf:24:0f:5e:a7:51:5b:0a:b2:53:d1:d1:06:65:
f8:8c:24:81:7a:1a:94:2b:72:c1:7e:45:d0:75:d3:9c:d8:d6:
29:c0:2d:24:e9:fc:66:c9:f3:1b:a7:4a:65:fb:84:8b:ec:85:
37:e2:53:4d:58:8e:da:ba:9d:91:42:c2:07:db:79:07:cb:9d:
0b:07:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 17:12:41 2023 by rpki-client on console-ams.rpki-client.org