Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VxLcnRnpK_9GhIfwnKJynqi7tek.roa
File: VxLcnRnpK_9GhIfwnKJynqi7tek.roa (raw, json)
Hash identifier: gwALqJFlPYvyfZ+jNJ+kVB5jMzpn8lmIFScCI7inSi8=
Subject key identifier: 57:12:DC:9D:19:E9:2B:FF:46:84:87:F0:9C:A2:72:9E:A8:BB:B5:E9
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018A319DCB8971FB6CD8F543491B2B814773
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VxLcnRnpK_9GhIfwnKJynqi7tek.roa
Signing time: Sat 26 Aug 2023 11:32:19 +0000
ROA not before: Sat 26 Aug 2023 11:32:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.39.0/24 maxlen: 24
46.34.42.0/24 maxlen: 24
46.34.43.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:9d:cb:89:71:fb:6c:d8:f5:43:49:1b:2b:81:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 26 11:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5712dc9d19e92bff468487f09ca2729ea8bbb5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:fa:33:b3:96:75:d5:cc:a6:90:bd:54:46:
9a:a0:f2:39:99:6b:73:bc:06:db:f4:75:0b:b3:32:
ef:15:ba:22:e8:48:3b:97:25:54:b9:3f:b8:79:35:
aa:a6:e4:31:22:b9:fc:bd:f1:ba:16:50:a3:78:e0:
43:f1:0d:8b:75:d9:02:fe:f1:0e:16:44:0b:27:43:
16:cf:10:59:de:5b:44:9f:cb:b7:51:be:6d:86:c7:
b1:90:af:73:ba:2b:d0:4e:53:16:48:8f:2f:0f:dd:
e4:f5:eb:a4:a5:78:d2:38:43:54:d0:17:b9:62:22:
6a:ef:32:38:4a:c4:da:e0:9c:a2:e3:10:6b:b0:c6:
79:81:9c:72:a6:18:58:9b:ba:5e:2c:b3:92:9f:10:
61:f1:b3:a7:f8:a9:13:bb:d7:31:09:b7:02:c2:ef:
22:7e:8a:b7:05:5f:88:7a:4a:92:70:9e:0e:1e:5b:
35:fa:aa:ac:fb:af:12:3a:81:9f:47:e1:a4:92:c8:
68:0a:43:02:06:b7:d6:ce:c0:82:2d:d1:fe:04:2d:
59:eb:f1:53:03:2a:37:f5:1a:b3:b1:48:7f:6b:c4:
d4:ab:64:e4:0e:b2:31:b6:71:e6:bd:ae:6f:67:24:
c4:80:47:b5:cc:10:c4:9f:28:ad:34:a1:6b:86:fa:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:12:DC:9D:19:E9:2B:FF:46:84:87:F0:9C:A2:72:9E:A8:BB:B5:E9
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/VxLcnRnpK_9GhIfwnKJynqi7tek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.39.0-46.34.40.255
46.34.42.0/23
46.34.54.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f6:dc:46:2f:4b:b7:05:47:41:0c:1b:c2:95:d3:b1:72:79:
3c:07:a0:bc:18:9c:30:75:01:00:6f:4d:2e:7f:16:95:58:25:
28:45:ae:33:ba:13:c1:02:8c:b3:1e:67:8c:0d:d7:c8:85:9c:
0c:17:d1:b0:da:a9:7d:88:a4:81:8c:40:0e:af:b7:bd:4b:69:
e0:62:41:5e:14:1f:1b:05:ed:d1:2b:25:66:6d:ed:ca:ce:72:
03:bc:c8:e9:96:a1:2d:ea:13:ce:b5:e6:fc:3a:8e:a1:08:ff:
58:62:53:30:31:3a:8d:b1:eb:c8:b5:6c:9a:44:1b:f0:60:f1:
1f:56:7a:4f:1c:6d:54:38:75:d5:38:56:96:b1:4b:ea:ab:bc:
d2:3e:42:af:4b:95:bc:ff:2a:77:8f:47:3a:59:d6:78:13:ff:
c3:5a:23:ee:a0:44:ec:f3:35:d3:55:aa:17:15:dd:22:c6:00:
bb:41:6f:21:ba:d8:40:1f:c5:6a:a3:14:88:1c:3a:7e:82:89:
53:5f:f3:20:c9:b4:16:cb:fd:89:8f:0c:56:44:66:a4:f3:08:
4e:2f:73:e7:8b:37:f4:72:07:05:02:22:8b:4b:3d:f2:1f:95:
28:c8:fa:19:89:8b:bb:60:05:ba:83:78:5f:1e:9e:16:cf:ad:
95:f6:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 11:30:20 2023 by rpki-client on console-ams.rpki-client.org