Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_BqMY2sPxK0KrkKlo5AJwVgmDH4.roa
File: _BqMY2sPxK0KrkKlo5AJwVgmDH4.roa (raw, json)
Hash identifier: kWNxNKygB4yCFFsId2xZPzCwvLogzTfZ169l2w1ac1w=
Subject key identifier: FC:1A:8C:63:6B:0F:C4:AD:0A:AE:42:A5:A3:90:09:C1:58:26:0C:7E
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018BDAB1696F4CAFB59D628BAC3CC7377096
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_BqMY2sPxK0KrkKlo5AJwVgmDH4.roa
Signing time: Fri 17 Nov 2023 00:32:21 +0000
ROA not before: Fri 17 Nov 2023 00:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.34.39.0/24 maxlen: 24
46.34.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:b1:69:6f:4c:af:b5:9d:62:8b:ac:3c:c7:37:70:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 17 00:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc1a8c636b0fc4ad0aae42a5a39009c158260c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:44:da:f0:d0:e2:90:dd:ff:09:0a:af:98:eb:
0b:bd:f4:58:9d:e4:48:66:3e:ff:1f:3b:7c:b7:93:
89:e8:6f:b5:e2:5a:01:34:a9:2b:0f:4b:e6:ef:19:
68:f9:0c:c4:2f:fd:75:a1:44:2c:2a:2f:25:aa:fb:
d3:1d:3a:27:22:4c:f7:38:13:af:21:06:7b:4e:a5:
a2:ce:8d:05:c2:35:46:94:e5:f6:bf:43:5c:9f:2a:
3d:1d:96:f1:a9:02:ac:23:3e:5e:d5:e8:8f:bc:cc:
e6:f9:ad:36:bf:a8:ed:39:77:f4:bd:91:8f:1b:97:
46:e5:97:4c:2e:23:e1:fd:2c:6b:e8:f6:d7:1d:d3:
3b:c9:a1:f2:4b:99:d1:15:0e:a8:a2:20:01:9f:28:
c8:85:31:92:da:53:3d:86:d1:c9:3c:90:8c:aa:e4:
f1:d7:cf:ac:9a:fa:f4:03:86:01:3a:cb:a9:b6:9d:
f5:5e:eb:1b:2b:79:bb:9c:5e:2e:21:b3:f7:2b:a1:
83:c8:7d:17:f4:83:3e:d5:e2:85:b1:d4:8a:3d:f8:
84:3e:02:03:64:21:d5:c3:db:bd:e8:d7:ff:14:39:
67:9e:9e:56:1e:8f:7a:e8:ac:b1:a5:7b:f1:fa:dd:
b5:fa:cb:bb:2d:db:bd:49:99:42:83:34:32:9d:af:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:8C:63:6B:0F:C4:AD:0A:AE:42:A5:A3:90:09:C1:58:26:0C:7E
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/_BqMY2sPxK0KrkKlo5AJwVgmDH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.39.0/24
46.34.58.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ed:df:b7:2a:c7:fe:fd:34:e0:02:3b:04:e9:72:9d:ad:62:
7b:40:35:20:d0:31:b9:35:32:0e:0c:0a:28:52:da:5e:7b:21:
76:6b:df:0e:66:23:fc:41:03:90:f4:49:92:4d:e6:d2:ba:66:
97:e3:ea:ce:15:8e:a9:ca:1c:29:f0:60:50:3c:a4:47:fc:d7:
bd:81:fb:43:8d:60:db:ee:6e:ae:49:9e:4d:49:ef:fc:f8:1e:
8e:ef:33:31:99:5a:a2:6a:7e:cf:d0:5b:43:6d:4d:75:4c:7a:
64:11:f8:cc:a7:d2:64:96:ab:77:1b:7b:7b:87:46:11:c5:cb:
8c:f5:2c:f6:b5:3b:de:50:ec:80:85:be:a3:7e:e1:31:1f:77:
fe:ad:d7:b5:d5:8f:b7:b6:7a:cd:63:32:f4:1e:7e:74:7e:1a:
6f:28:af:df:b9:0d:5a:45:ea:56:9e:ca:97:e6:a4:f2:55:9c:
15:5a:37:f0:d9:58:48:64:8f:7b:9c:eb:8a:37:cd:75:b2:8d:
e5:23:47:e7:63:4a:20:3c:65:7c:f7:60:4d:8b:fe:d6:59:ba:
e1:93:48:f2:4e:0e:2d:eb:95:19:77:28:45:41:4c:fe:cf:3a:
5f:e8:2d:0b:d4:33:63:9a:33:70:3b:ae:5b:fc:2b:da:1d:a5:
d3:9b:69:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:21 2024 by rpki-client on console-fra.rpki-client.org