Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UJArLi6R8qw6uA-hp2o7g00-Gbs.roa
File: UJArLi6R8qw6uA-hp2o7g00-Gbs.roa (raw, json)
Hash identifier: lYnYTkhfFQEKFLQOlkJFO5D5o4HoBqZiazkV5tTvukQ=
Subject key identifier: 50:90:2B:2E:2E:91:F2:AC:3A:B8:0F:A1:A7:6A:3B:83:4D:3E:19:BB
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018AF16486D748B42F28EEC5EE2A97EBA14C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UJArLi6R8qw6uA-hp2o7g00-Gbs.roa
Signing time: Mon 02 Oct 2023 17:16:51 +0000
ROA not before: Mon 02 Oct 2023 17:16:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.34.39.0/24 maxlen: 24
46.34.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 03 Oct 2023 08:05:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:64:86:d7:48:b4:2f:28:ee:c5:ee:2a:97:eb:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Oct 2 17:16:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50902b2e2e91f2ac3ab80fa1a76a3b834d3e19bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:37:3b:26:4f:0b:db:3c:cf:03:7b:8c:ae:
3b:36:c9:a3:af:4e:1d:5e:65:05:68:66:e2:58:19:
23:8a:61:4d:36:cd:98:e3:44:18:b6:00:8a:71:db:
b9:27:e9:83:b5:96:0d:0a:d4:bd:d1:72:81:3c:f0:
26:7b:0a:de:9e:09:17:44:ae:dd:42:41:49:46:d1:
46:8a:dc:f4:a8:a0:a0:f9:68:a7:5f:fb:68:bd:e9:
07:78:59:4a:a9:2d:78:e4:cf:84:46:d5:8a:2e:36:
6b:a1:34:4a:31:86:87:64:de:84:d2:e2:16:36:4a:
ad:93:a3:56:e9:2d:37:8a:4b:d0:9a:dc:7f:06:ab:
9e:e6:e1:df:90:36:47:84:3f:3f:62:60:7e:aa:e0:
90:4c:20:26:eb:13:a6:f3:ce:3e:a9:99:3d:74:65:
65:95:f4:af:cd:5f:f2:da:dd:31:de:13:87:e5:ec:
f3:4b:39:5f:93:15:cd:91:8c:2b:1f:1e:6b:42:1e:
88:da:8c:45:ea:60:b0:5a:05:5d:a8:1b:23:06:97:
0c:0c:0b:df:9d:b9:c8:80:89:01:c5:10:2f:30:4d:
34:2e:5a:08:d4:bd:ca:ca:0d:92:e8:7b:fe:85:b8:
45:08:52:22:2f:3c:25:d1:8c:fe:d3:d7:e8:36:70:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:2B:2E:2E:91:F2:AC:3A:B8:0F:A1:A7:6A:3B:83:4D:3E:19:BB
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/UJArLi6R8qw6uA-hp2o7g00-Gbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
46.34.58.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:db:cb:d7:2b:a0:36:15:a1:6f:76:6c:b0:6f:09:5b:41:89:
2e:12:53:3a:d6:9f:1f:4c:71:30:a7:e2:64:77:f5:15:69:3f:
05:32:f8:b7:27:79:c2:7d:2c:7e:44:d4:cd:98:64:17:e8:09:
06:55:5c:ee:9f:0f:c4:dc:b6:18:3a:2a:e2:c9:70:e6:4c:d9:
2e:8d:fa:37:c0:4c:e5:a5:0c:d2:28:90:1c:5b:d1:0a:e5:0c:
4e:b9:46:f0:07:93:d6:73:0a:09:1a:50:16:95:71:4e:2f:fe:
2b:20:87:0f:50:86:a0:1c:dd:22:1a:d4:04:86:55:ad:15:fa:
5f:5b:24:9e:93:b5:2f:68:18:bb:47:f4:a0:e2:ab:b7:fe:4f:
b8:cf:af:a5:7d:cc:10:28:ab:c3:1f:3f:00:cb:81:f5:12:9a:
bb:54:0c:ec:98:fc:48:ef:0b:c5:ac:0f:91:68:23:ba:e0:5b:
ea:4d:36:0f:95:b8:ba:77:14:75:4f:31:02:2d:ff:ab:0e:c7:
8d:ad:d8:80:01:33:3a:e3:66:16:7d:ec:f0:d2:f1:f3:ba:7d:
3d:c6:e2:e9:7e:d9:3a:67:37:7d:61:15:fa:05:82:22:93:4f:
2a:37:c2:08:ce:8f:9b:6b:1e:ba:5b:ab:41:1b:b2:cd:40:3e:
d1:74:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org