Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FJuEteHx3SFp9SYwSAjPRerq1ds.roa
File: FJuEteHx3SFp9SYwSAjPRerq1ds.roa (raw, json)
Hash identifier: 0nVYclAEahv+ydl2Q+3EyDPhskrwwfCm01F61/5bgoA=
Subject key identifier: 14:9B:84:B5:E1:F1:DD:21:69:F5:26:30:48:08:CF:45:EA:EA:D5:DB
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A6E8FD4FD08802110AA369663BA23BEFE
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FJuEteHx3SFp9SYwSAjPRerq1ds.roa
Signing time: Thu 07 Sep 2023 07:33:54 +0000
ROA not before: Thu 07 Sep 2023 07:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:8f:d4:fd:08:80:21:10:aa:36:96:63:ba:23:be:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Sep 7 07:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=149b84b5e1f1dd2169f526304808cf45eaead5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:78:38:5c:7c:78:f7:91:9e:1e:91:f1:62:
8a:59:d0:8e:99:89:32:15:11:cf:e5:e1:27:51:88:
0f:0a:6a:c5:f5:2f:51:08:c6:e4:23:f5:9e:f6:45:
4a:00:c6:8c:11:2b:79:47:d8:de:58:45:c4:b0:90:
ae:41:6e:72:91:2f:65:64:45:ca:c8:4d:9d:e2:5c:
88:aa:52:a5:7c:29:9e:f8:aa:6d:05:05:90:c5:60:
a0:b7:36:0c:fd:b1:04:73:2f:ec:3a:d1:76:10:5c:
f5:26:d4:4b:af:fe:55:ba:77:37:5f:36:5e:27:50:
51:dc:2a:cc:db:05:fd:00:46:e4:ce:0c:62:ce:b6:
42:78:53:4d:bb:15:84:9d:68:ea:5d:c7:86:af:3f:
30:0a:e7:82:6e:b6:7f:6c:30:3d:dd:c8:72:d1:76:
ab:c4:e2:96:62:08:39:31:cf:ed:6b:08:c8:c6:e9:
7b:15:8a:3c:84:66:69:f1:72:3e:21:32:54:6d:05:
5c:a1:f0:b9:48:ff:2e:9d:f5:9b:cd:3a:e8:19:f3:
4b:02:81:27:b4:d9:91:97:98:de:7f:43:5b:4e:71:
70:52:af:ae:03:9f:2f:ee:7c:67:27:02:76:4e:26:
2c:45:12:a9:03:ba:9e:88:3c:87:66:bb:1b:b6:f7:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9B:84:B5:E1:F1:DD:21:69:F5:26:30:48:08:CF:45:EA:EA:D5:DB
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/FJuEteHx3SFp9SYwSAjPRerq1ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.42.0/23
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ab:d3:4b:ce:b6:ce:92:78:9b:ed:f3:e8:da:53:6c:24:13:
90:19:c4:f6:9a:8d:7f:42:7b:fe:18:24:b3:79:3c:af:32:98:
ce:80:a5:fd:ec:33:c1:c8:5b:ba:80:33:76:9d:3d:fc:18:c1:
66:2c:91:b8:20:b9:a0:20:70:bd:1a:fe:b0:6a:f4:17:8c:1a:
34:83:ae:c6:8c:73:6c:82:79:29:d3:36:94:8d:69:2a:a2:bf:
4c:49:89:50:d2:74:1d:3a:02:d5:63:ce:ac:98:11:e5:99:2e:
5f:9c:07:b5:91:28:01:50:c2:c4:28:d1:4d:b4:2b:f0:07:5e:
57:05:10:ba:8e:20:55:2a:eb:cb:c1:d2:ba:19:6a:2b:97:8a:
66:63:c7:96:f1:99:fb:f4:51:63:45:56:82:ad:98:4b:0b:8f:
a6:ae:52:d1:32:3c:00:8e:d9:0a:c0:5a:23:de:d3:7b:f7:78:
d9:d6:97:f4:4c:30:e7:3a:b1:94:64:c8:2e:03:79:be:4d:76:
9f:22:0e:1c:2d:86:de:e3:d5:de:6a:7a:5b:4f:bd:10:be:65:
c8:f4:34:bb:e8:b6:65:d4:e0:52:cb:b3:cd:52:51:91:84:da:
b2:c7:5f:2d:3e:45:2b:ba:f2:0c:90:ca:55:3b:c5:6e:53:aa:
d2:e1:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 16:10:20 2023 by rpki-client on console-fra.rpki-client.org