Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/N2yjUHbN54Rcmf4rOccaZIHDCUM.roa
File: N2yjUHbN54Rcmf4rOccaZIHDCUM.roa (raw, json)
Hash identifier: 0KqhWdJGiZS17FvQRzj9950wt+vt8+UXJ95fWKPTYMg=
Subject key identifier: 37:6C:A3:50:76:CD:E7:84:5C:99:FE:2B:39:C7:1A:64:81:C3:09:43
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018CB1049AD6AEE63676363DB790DFA26E3D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/N2yjUHbN54Rcmf4rOccaZIHDCUM.roa
Signing time: Thu 28 Dec 2023 15:21:58 +0000
ROA not before: Thu 28 Dec 2023 15:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42689
IP address blocks: 46.34.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b1:04:9a:d6:ae:e6:36:76:36:3d:b7:90:df:a2:6e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Dec 28 15:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=376ca35076cde7845c99fe2b39c71a6481c30943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:bc:e7:bb:97:b3:22:78:ca:9f:66:dd:6f:
2c:e7:c2:c6:4e:76:93:fb:84:e0:ad:24:b2:ba:a9:
b6:e7:7b:7f:dc:0a:2b:ae:25:db:a6:9e:f2:21:e2:
c2:d9:ea:04:11:be:b7:de:e4:53:1a:de:e5:8c:3a:
ff:5b:65:f7:c7:fe:71:f2:fd:fe:14:2e:ff:54:88:
17:38:64:80:b8:bd:cd:f1:db:b4:91:aa:72:33:c4:
36:6a:a9:81:6f:7d:3a:53:e6:ad:0d:e2:2b:fb:a0:
eb:d4:e0:b6:fb:eb:1d:25:9e:27:6a:e6:df:3d:18:
bf:f7:38:ed:d7:cd:bd:12:26:d8:7a:8a:e7:f2:6e:
27:67:f7:08:8b:4c:3e:b6:76:c3:26:fc:d4:f4:69:
eb:7c:50:bf:8a:72:1a:1d:1a:91:be:40:67:4d:54:
36:18:c3:60:95:78:0f:97:a9:a3:52:f3:b2:60:06:
60:d4:dc:7b:20:78:99:10:b1:45:be:1b:5c:62:57:
2b:14:f6:94:1b:41:92:54:fe:a2:f4:e0:ea:0e:1a:
c6:3a:ed:cb:38:65:1f:7a:0f:c8:0c:05:5c:5c:a2:
c3:62:99:5c:b4:3f:4e:30:17:39:52:12:e5:8a:00:
2a:1d:a8:dd:99:34:1a:36:ff:31:eb:f5:c7:62:94:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:A3:50:76:CD:E7:84:5C:99:FE:2B:39:C7:1A:64:81:C3:09:43
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/N2yjUHbN54Rcmf4rOccaZIHDCUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.48.0/24
Signature Algorithm: sha256WithRSAEncryption
70:93:44:b2:bd:02:57:f7:ba:39:e2:4b:bd:5d:a2:ce:ce:45:
13:66:69:4c:5f:75:0c:22:09:ce:a4:86:f8:21:a1:d2:8a:3c:
0a:85:a1:71:27:06:17:68:bd:2c:40:27:87:11:cd:dd:12:a7:
e1:e7:43:56:56:bb:b5:ff:c2:4a:4e:36:19:7a:98:7c:be:ee:
b4:b7:1c:b1:8c:27:be:d0:73:9e:5b:70:c1:92:08:e9:45:5f:
69:12:88:f3:82:67:03:7c:d2:ef:de:b4:d2:97:5a:4b:bf:59:
08:80:8d:bf:14:c0:06:a6:50:e0:11:a2:42:84:34:9c:ea:11:
7f:31:c0:2b:e1:fc:64:2f:09:c1:11:1a:23:59:f5:05:d0:b5:
4e:8e:1e:43:e5:06:b8:c9:42:b5:a4:bc:04:1e:cf:82:70:6e:
88:8d:f1:ea:b0:c9:f1:e7:10:3b:92:a8:9a:1d:d0:4e:80:27:
4b:b3:29:ee:bf:fd:80:e9:a4:52:49:12:87:0c:7f:93:98:ae:
d0:e9:17:23:db:75:35:c7:cd:f7:cb:38:44:95:e9:19:34:b2:
2e:ac:37:99:6a:5d:e0:ae:61:eb:56:05:3c:ea:68:0d:b7:86:
67:50:8c:04:38:15:e1:79:c1:79:aa:fa:fb:e5:21:bc:e3:52:
0f:3b:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:21 2024 by rpki-client on console-fra.rpki-client.org