Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f-YkNZ-XnAgYgBkQfhB4K02DqYM.roa
File: f-YkNZ-XnAgYgBkQfhB4K02DqYM.roa (raw, json)
Hash identifier: VcgUVuBFyEEzbsK2mpHYuLBmY9v8e5TlQjPreJKaxmM=
Subject key identifier: 7F:E6:24:35:9F:97:9C:08:18:80:19:10:7E:10:78:2B:4D:83:A9:83
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189E413EC98F3D078FCB62A84B825EBFBC8
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f-YkNZ-XnAgYgBkQfhB4K02DqYM.roa
Signing time: Fri 11 Aug 2023 10:10:58 +0000
ROA not before: Fri 11 Aug 2023 10:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.37.0/24 maxlen: 24
46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.42.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.41.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Aug 2023 10:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:13:ec:98:f3:d0:78:fc:b6:2a:84:b8:25:eb:fb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Aug 11 10:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fe624359f979c08188019107e10782b4d83a983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:dc:e7:d6:76:73:6d:d6:46:12:99:99:32:
4c:fa:0b:d3:53:95:5f:dc:2c:3a:1b:51:83:68:58:
b3:c4:0f:7c:b6:d3:86:c7:3b:d0:d7:ed:31:31:51:
d9:7c:a5:9d:fa:0c:d8:50:34:d7:17:9e:ff:20:b0:
8e:53:55:d2:f9:16:3a:17:c8:d0:1c:cd:4f:30:0e:
18:df:67:06:6a:fa:8f:60:89:b6:92:d3:52:20:db:
c8:c9:b0:52:66:dd:e9:c3:61:c3:b5:3b:14:a2:85:
61:1b:17:b7:24:73:da:3c:aa:23:b4:a1:8a:39:01:
86:c7:9b:34:01:ea:92:68:84:88:33:15:2c:cd:dd:
5a:b5:61:6c:57:ae:64:6f:4a:73:73:bf:1e:9e:e1:
01:60:51:a5:13:71:32:33:56:35:0b:c8:c2:cf:aa:
3c:5e:a4:23:b0:99:1c:ab:ec:dc:d1:20:bd:92:ac:
54:24:7e:30:7a:0d:5e:16:a1:7b:df:b2:db:18:07:
a9:59:18:59:8e:7c:91:6a:c6:8b:22:ec:ca:a9:71:
bc:9e:27:8d:e7:ca:15:e6:8d:72:82:84:10:05:4c:
5c:64:b3:1e:e3:1e:32:aa:67:40:b9:04:b0:41:5b:
69:cc:8f:4c:a0:6d:1d:76:f3:6f:e1:db:2f:4a:25:
f0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E6:24:35:9F:97:9C:08:18:80:19:10:7E:10:78:2B:4D:83:A9:83
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/f-YkNZ-XnAgYgBkQfhB4K02DqYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.40.0-46.34.42.255
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ed:09:c5:3d:95:9f:38:db:83:8c:3e:5b:1e:5c:ab:72:75:
07:76:62:a1:70:a2:be:fc:89:3b:14:03:c6:be:9e:bc:97:23:
ca:82:e6:de:e6:b8:22:b7:b1:05:f7:38:da:63:09:31:21:47:
07:f9:c3:b9:f1:6a:b3:23:b7:c4:2e:ab:39:52:01:a6:b8:15:
a8:2a:1b:1a:6b:f1:15:f0:27:67:d4:fa:30:96:9a:5d:ca:cf:
4b:75:15:f1:99:f2:61:f3:9f:06:35:f4:5a:55:2f:9b:3a:98:
48:a0:0c:44:31:bf:90:e3:d5:56:13:25:83:51:e4:a5:6d:b8:
3c:ca:b7:91:8e:13:76:e3:62:f4:4b:da:8d:25:f5:b0:f7:55:
d6:6e:d2:f1:05:d8:c5:0e:ca:43:4a:17:ec:da:c1:2f:d0:eb:
88:46:a9:a1:da:a4:1f:a3:5e:4a:5f:27:f2:3e:b1:86:88:12:
bd:4b:26:92:5f:47:97:cc:43:05:8f:78:9c:80:32:2d:4d:f6:
74:47:af:c7:e7:5e:0b:03:f8:27:59:e2:b9:dc:db:ca:b1:a5:
b2:4d:88:8e:9b:c5:8f:85:83:39:47:11:ff:bd:86:47:49:c9:
f2:d9:4e:34:47:06:ec:39:29:40:f4:01:a0:ae:da:9e:49:89:
93:3c:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org