Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LS74lO6V8mDRjzqsxPUjLM2fGQk.roa
File: LS74lO6V8mDRjzqsxPUjLM2fGQk.roa (raw, json)
Hash identifier: muZRbICd8fJbjlhzwSWtLoK16cf5b9spudW/Gjkls1U=
Subject key identifier: 2D:2E:F8:94:EE:95:F2:60:D1:8F:3A:AC:C4:F5:23:2C:CD:9F:19:09
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018954074FD4693968C34818573B5D4D6045
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LS74lO6V8mDRjzqsxPUjLM2fGQk.roa
Signing time: Fri 14 Jul 2023 10:51:52 +0000
ROA not before: Fri 14 Jul 2023 10:51:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 46.34.42.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:07:4f:d4:69:39:68:c3:48:18:57:3b:5d:4d:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 14 10:51:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d2ef894ee95f260d18f3aacc4f5232ccd9f1909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:ea:ae:d7:cc:b3:b8:b3:47:58:03:49:ca:
1d:5d:88:00:09:ae:85:d2:c8:6b:06:29:cb:13:2f:
4f:89:9a:25:51:45:16:86:02:a8:20:18:f2:2e:6f:
c2:ff:b1:cc:7e:82:3c:23:2f:03:16:ce:0d:ac:30:
46:36:40:bb:5e:04:3e:92:55:49:44:ca:d9:a2:1b:
b5:41:88:c5:13:d1:14:23:a9:6e:a2:04:e5:f2:4f:
e9:e0:3e:f7:85:c1:7c:74:55:e2:e2:cf:aa:dc:8a:
85:d8:a1:05:62:f0:9c:be:7d:89:b3:1d:8c:fd:dc:
b1:a1:3a:8d:a3:fc:78:3a:d5:d6:1b:fa:e1:92:d9:
92:37:64:ce:59:3e:ea:50:f1:1d:41:3c:30:67:ec:
22:3d:71:f2:bc:95:26:06:70:6f:a9:ed:76:ee:dc:
d7:2d:33:e8:36:75:08:0c:f3:0f:dd:ca:72:81:b2:
38:8d:79:44:a9:ea:db:35:0f:8b:2b:01:df:d8:63:
c9:7f:3a:e6:08:5c:11:86:77:2b:38:46:ad:d0:5f:
a2:f8:f6:73:ab:5a:b6:ea:e3:2e:b1:f3:04:69:b3:
67:9a:f8:61:03:b3:41:48:1e:89:34:e6:5f:c3:a4:
78:80:8b:8e:8b:41:cc:20:75:66:89:b9:83:02:19:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2E:F8:94:EE:95:F2:60:D1:8F:3A:AC:C4:F5:23:2C:CD:9F:19:09
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/LS74lO6V8mDRjzqsxPUjLM2fGQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:19:9e:a7:bc:ad:ca:60:53:3c:7b:8b:89:e7:33:78:d0:90:
60:ba:9f:97:e0:0d:ff:e4:ae:86:84:ef:4d:3e:96:a8:a2:89:
42:b4:be:c0:fe:f5:86:2e:c0:e1:f6:ab:85:90:83:73:a1:01:
86:d2:0f:e5:f2:ca:82:66:3b:38:0d:04:f4:4d:ec:02:aa:3a:
64:e4:bb:60:5d:78:ce:f7:23:f9:be:68:f3:77:5d:a4:46:c4:
8b:ae:7e:01:82:a0:25:b4:6e:3a:5a:9b:21:43:2f:ba:0e:82:
36:dd:bc:a8:78:8c:de:7d:59:3e:44:ba:71:f9:f5:32:22:9f:
db:0e:cc:ad:2a:7f:24:1f:98:77:6a:1d:37:f5:ed:f1:71:60:
0e:79:6d:17:1f:0b:bb:08:83:4a:f3:68:38:2a:c3:72:2f:c1:
aa:e6:0a:dd:52:2a:e1:13:3f:00:d6:0b:0f:5a:5f:58:df:fa:
10:0a:02:6c:4f:06:3e:c7:31:6e:5e:d7:f5:f9:8e:ce:f4:da:
b8:b7:cc:89:63:0c:0b:f6:88:4d:ab:df:5d:b4:55:04:45:61:
38:96:1b:10:17:71:fd:fb:92:65:57:95:11:81:e4:0d:73:af:
36:d0:76:30:e9:48:ce:f4:7d:4f:be:f6:10:ea:5e:fe:71:f2:
19:e9:54:7d
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 09:41:19 2023 by rpki-client on console-fra.rpki-client.org