Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MaTlNFmyVUGpVAMI-SfKTWkJIfQ.roa
File: MaTlNFmyVUGpVAMI-SfKTWkJIfQ.roa (raw, json)
Hash identifier: s2YGI+KBsB9oo5/D4PuOCYVXCNT2DMI1mimW7z+YQS0=
Subject key identifier: 31:A4:E5:34:59:B2:55:41:A9:54:03:08:F9:27:CA:4D:69:09:21:F4
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018B7527AB0D0D2B39DF2CB847C4E94D6F05
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MaTlNFmyVUGpVAMI-SfKTWkJIfQ.roa
Signing time: Sat 28 Oct 2023 07:20:15 +0000
ROA not before: Sat 28 Oct 2023 07:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Nov 2023 13:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:27:ab:0d:0d:2b:39:df:2c:b8:47:c4:e9:4d:6f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 28 07:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a4e53459b25541a9540308f927ca4d690921f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:85:3a:10:83:ed:05:84:1a:7d:ef:7a:dd:
94:f5:77:05:3a:f4:ae:02:38:a3:ce:74:c8:d5:a4:
66:05:3d:7e:50:8c:bd:4a:45:fd:4f:be:b1:f4:ce:
3c:0a:db:7f:0f:9d:b3:6c:cf:e6:37:f8:fe:65:96:
8c:62:af:fb:56:cb:43:a8:05:73:1a:c8:be:22:fa:
84:5f:68:f0:f0:0f:09:d0:6d:78:6d:f5:b8:93:ec:
2d:93:ba:c0:0c:20:12:9f:08:61:e7:e9:0a:87:0f:
92:80:92:e8:93:81:25:39:7e:ce:eb:5a:d8:2b:a3:
77:29:c2:a3:65:a2:52:02:2c:72:c6:70:96:ce:2a:
f7:5d:f0:bf:b3:1b:45:28:e7:48:81:0b:b9:cc:6b:
6e:02:fe:4a:08:80:b1:a5:26:b3:4a:3f:e0:e1:fb:
e7:ab:6f:1b:6c:e6:d6:b9:86:d3:67:c0:43:12:8d:
a8:61:af:72:d0:a9:7a:fd:87:60:e5:4d:09:98:e9:
0d:47:5c:e2:b6:cd:6d:5e:14:54:ed:26:0b:df:76:
c8:4c:ed:20:fe:6f:22:48:66:6b:51:72:c9:b1:51:
e3:83:48:f4:1f:4c:c8:b9:65:14:8c:cc:7c:00:57:
c1:7e:21:e1:53:ff:58:55:c8:2b:8d:98:2c:e2:0b:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:E5:34:59:B2:55:41:A9:54:03:08:F9:27:CA:4D:69:09:21:F4
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/MaTlNFmyVUGpVAMI-SfKTWkJIfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:80:95:32:36:41:1b:77:34:b2:29:b8:ba:a4:2f:c2:e7:4a:
a7:a5:ac:9b:56:4f:b9:44:84:9b:30:49:b2:1e:97:02:7d:ed:
5d:7c:98:de:96:56:2e:dd:9c:52:c0:95:18:77:27:90:71:b3:
d2:37:4d:42:19:9e:2a:83:95:01:1c:91:af:7e:47:3b:75:44:
61:aa:59:90:5d:2e:ab:31:03:be:76:f7:0e:34:bf:cd:2c:bc:
42:81:17:89:1c:32:48:16:24:7d:1e:b4:57:dd:ee:e6:7d:b1:
19:16:c7:86:fa:59:86:48:5a:fc:e0:5b:6d:fa:f9:c6:38:3d:
4d:6c:e9:24:20:98:68:ea:41:27:a4:45:10:ec:6b:46:92:8b:
5a:82:8c:15:08:ea:72:be:41:65:d7:b6:a9:2f:32:e0:09:32:
99:71:38:9c:9d:55:13:03:80:c3:e1:f5:a7:5b:55:34:01:ae:
37:8b:da:98:75:7b:fa:59:82:65:9b:ff:55:66:0b:07:82:59:
07:70:69:23:cb:a9:6c:bf:91:c5:00:76:3b:61:dd:96:2b:e4:
a2:11:c9:80:bb:b1:ad:64:0b:f3:3a:7e:62:f6:bb:80:21:f3:
29:3d:6e:34:e7:77:b3:0a:fc:88:e9:39:41:5d:37:d3:7d:24:
92:de:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org