Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aYH_MO9fSOltuMsmMabKdYq4MAA.roa
File: aYH_MO9fSOltuMsmMabKdYq4MAA.roa (raw, json)
Hash identifier: E8L2LQT4EJ9v5sgGscAQJuJH9tbDoT7xeVDqXex+f1Q=
Subject key identifier: 69:81:FF:30:EF:5F:48:E9:6D:B8:CB:26:31:A6:CA:75:8A:B8:30:00
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018BD51AFCAC2741389BD938D2A93384F4B8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aYH_MO9fSOltuMsmMabKdYq4MAA.roa
Signing time: Wed 15 Nov 2023 22:29:57 +0000
ROA not before: Wed 15 Nov 2023 22:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.34.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 00:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d5:1a:fc:ac:27:41:38:9b:d9:38:d2:a9:33:84:f4:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 15 22:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6981ff30ef5f48e96db8cb2631a6ca758ab83000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:84:33:77:2a:c4:d7:fc:cd:af:4b:12:3d:
99:59:af:98:f4:0c:4e:d8:21:3e:82:7f:5d:e2:c8:
9a:ba:6a:73:f6:c8:bd:b3:9d:54:69:8b:7e:d6:94:
fb:dc:90:fc:60:a6:4c:fe:74:a8:39:31:c7:1a:9e:
56:a4:25:5c:06:74:ea:3a:37:ac:cc:db:64:cc:80:
3a:b5:67:7f:ce:bd:d0:88:74:08:a7:27:ca:f3:07:
8b:1a:54:8c:9e:87:11:c1:60:a4:05:3c:3e:0e:f4:
61:ea:c6:e0:0c:bf:bf:a5:b6:79:75:2c:d7:c8:a9:
e9:61:bd:4e:cf:94:d6:d8:ff:b3:ea:40:aa:36:0a:
29:ee:48:6e:48:de:ad:73:1b:95:74:eb:0a:c6:f1:
02:52:c2:6a:81:ef:1d:16:dd:56:89:41:86:13:3d:
42:76:23:30:5f:f5:c9:18:d9:00:f8:f4:5f:2a:40:
73:fa:55:b3:8d:f1:36:8f:62:4c:d3:02:21:84:e5:
ed:eb:54:1d:3c:d4:2b:b8:18:9e:2c:a3:ca:fa:90:
e9:1e:a7:ef:ab:d9:2c:1b:9a:93:b8:d6:2f:2c:7d:
b9:64:4c:9e:a2:4e:b1:20:16:cf:81:3a:b9:72:74:
00:1c:10:ba:1b:b4:74:70:5b:3c:06:21:6d:b0:b3:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:81:FF:30:EF:5F:48:E9:6D:B8:CB:26:31:A6:CA:75:8A:B8:30:00
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/aYH_MO9fSOltuMsmMabKdYq4MAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.58.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1f:97:fe:8c:a1:2e:55:a2:17:f9:a7:14:9c:b8:a7:08:9a:
ce:74:49:b3:9e:41:c3:2c:7a:23:a8:c4:bd:89:09:11:95:a4:
99:65:cb:0d:72:30:69:c0:64:1e:4c:e7:c8:23:43:e1:09:f5:
2e:53:02:e2:6a:7d:4a:f4:15:95:46:7a:69:ce:45:29:ab:8b:
29:c2:59:14:f1:54:9f:4e:2f:b0:b5:ae:d0:96:8e:cb:fa:fe:
36:99:5c:2b:fd:3b:70:fc:ce:f6:47:17:a0:b6:68:f0:18:40:
2e:cc:24:3a:86:58:a3:af:91:62:7d:d8:da:e4:69:c3:06:cb:
60:35:30:c3:8e:2c:02:7c:77:68:7f:31:77:0a:9a:94:3c:79:
34:41:a4:71:6d:43:8a:e0:81:6d:88:f3:e5:41:10:4c:60:6d:
c4:ef:b0:f9:33:c1:b9:ca:ff:4f:96:0b:98:a8:8d:e5:4f:62:
e9:e6:8d:9c:84:c7:cd:a8:b2:39:33:fb:b4:81:65:bf:6e:35:
b0:d8:aa:1b:ac:67:5f:5d:e4:59:2b:b6:94:28:60:08:3a:fa:
55:bf:7d:14:4f:12:d4:f3:7f:9a:b0:fe:43:58:04:ee:c0:90:
29:92:c5:f2:9c:b6:05:c6:38:bd:b4:25:76:04:23:ee:69:3c:
71:cb:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org