Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QT006gejjljrR1c-WKm_d1jHDAI.roa
File: QT006gejjljrR1c-WKm_d1jHDAI.roa (raw, json)
Hash identifier: 6Tz1wEj0Wm1c1lLWBcCyx/DYRSXnNUO1k7m2BsU/Q0Q=
Subject key identifier: 41:3D:34:EA:07:A3:8E:58:EB:47:57:3E:58:A9:BF:77:58:C7:0C:02
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01865AA219DDA93C39A2ED74766E36FF2111
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QT006gejjljrR1c-WKm_d1jHDAI.roa
Signing time: Thu 16 Feb 2023 14:30:18 +0000
ROA not before: Thu 16 Feb 2023 14:30:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 46.34.56.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 17:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:a2:19:dd:a9:3c:39:a2:ed:74:76:6e:36:ff:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 16 14:30:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=413d34ea07a38e58eb47573e58a9bf7758c70c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:b5:ab:22:79:f9:00:7f:f6:59:25:ab:0a:
2e:a5:83:4d:00:f8:01:e3:1b:a0:5a:3f:2e:b2:ea:
19:fe:6e:17:ef:7d:97:c5:99:6e:68:8a:8c:93:c9:
1d:be:0d:1c:d8:9b:dc:50:2c:c3:e1:13:7d:22:20:
be:38:24:86:c5:dc:34:26:20:bc:94:6b:a0:c8:6d:
29:90:f3:cc:4a:a2:88:f1:39:b2:6f:54:3b:04:98:
a3:0c:32:9d:5d:f9:ce:a7:e4:b4:0d:52:0c:12:47:
df:34:6e:9d:f1:7f:df:31:4b:6e:f9:97:37:04:0e:
74:a7:18:48:e4:fa:da:d5:38:f6:ff:08:5b:2d:07:
4d:8e:20:52:1d:e7:29:82:50:56:8f:c3:67:45:42:
97:bc:c2:ce:c3:f4:d1:df:da:12:91:91:c2:11:28:
b8:eb:df:2d:61:e0:95:99:bb:12:df:1e:cd:31:02:
88:f6:ce:fe:41:78:a9:d5:9a:47:4a:5c:a4:98:24:
ff:5f:63:43:1b:db:0f:05:36:65:2b:e2:9e:13:f8:
6d:33:ec:15:bd:0d:fa:c8:15:97:0a:2d:ab:17:70:
7f:53:82:a4:b1:9f:4e:99:22:96:4a:2b:8c:69:52:
39:ad:88:52:48:fb:fd:49:0a:8b:5e:e8:81:bd:ae:
7e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3D:34:EA:07:A3:8E:58:EB:47:57:3E:58:A9:BF:77:58:C7:0C:02
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/QT006gejjljrR1c-WKm_d1jHDAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.56.0/23
Signature Algorithm: sha256WithRSAEncryption
53:91:06:5d:4a:66:00:c1:48:c2:9c:f6:cf:43:52:2e:aa:0e:
f8:bb:29:a8:78:d3:58:9b:60:57:f7:13:35:fc:5e:25:53:5a:
ca:85:11:f4:a5:0a:1c:32:e7:13:c7:b6:5a:42:47:8e:84:84:
55:06:1c:55:2e:e1:d8:12:a7:b0:04:19:69:9a:0e:94:be:db:
37:2e:46:9a:1b:d7:37:25:1f:bc:7c:ba:d9:fa:4e:99:aa:b6:
b6:bf:1f:3e:c6:8d:00:2b:14:85:e0:8a:a6:71:96:6e:de:ad:
32:fe:bf:d7:de:10:41:98:a7:ad:6d:82:95:2a:1b:1d:9c:67:
82:0c:99:9e:57:c8:dc:a7:6f:bb:60:bb:ea:cb:56:d9:43:a3:
03:f2:bd:55:44:15:a0:89:3e:c0:61:5c:51:c4:3e:57:70:81:
57:3e:0c:a2:a1:54:2a:d5:96:d2:ee:b1:a4:85:67:5a:2c:d2:
51:a8:19:0c:cd:cb:85:cc:7b:a6:48:02:2b:90:7f:83:3b:90:
ac:b6:a2:31:79:c8:e1:f5:46:8e:e9:8d:71:26:60:d3:a7:92:
25:22:5c:a8:73:51:88:5b:2b:45:b2:64:c2:bd:df:c4:e5:7e:
fb:db:92:d4:bd:3c:28:9a:c5:80:dc:52:fe:64:4f:54:74:05:
6a:ab:db:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org