Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hJ-hEWfHau2VbhsKNq_4zNOH_uo.roa
File: hJ-hEWfHau2VbhsKNq_4zNOH_uo.roa (raw, json)
Hash identifier: qTgIA5/ixyFmuOm31hLp3vcDUsbmqJnGfE3M/v4nvlQ=
Subject key identifier: 84:9F:A1:11:67:C7:6A:ED:95:6E:1B:0A:36:AF:F8:CC:D3:87:FE:EA
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186C59D3D932FC42E4092C8C07AADD0E416
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hJ-hEWfHau2VbhsKNq_4zNOH_uo.roa
Signing time: Thu 09 Mar 2023 09:04:21 +0000
ROA not before: Thu 09 Mar 2023 09:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/23 maxlen: 23
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:9d:3d:93:2f:c4:2e:40:92:c8:c0:7a:ad:d0:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 9 09:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849fa11167c76aed956e1b0a36aff8ccd387feea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:d6:3c:c0:79:4e:42:f4:ff:b7:21:86:95:
ab:9a:ef:01:da:cc:77:5c:7a:24:2f:1d:47:36:fb:
6a:75:ab:28:00:d8:08:fb:d5:5f:f3:e1:80:91:bb:
08:2b:68:c5:17:00:7d:15:57:c8:89:8e:e0:63:b3:
53:e0:9f:40:bc:b6:e8:f5:0c:4d:15:38:bb:2d:bb:
75:d0:ea:50:5c:41:20:1a:67:78:2a:53:b5:ec:0f:
8e:2b:cf:1a:0e:89:68:90:a1:e8:31:eb:d2:80:5b:
59:b2:af:db:85:9f:f9:d9:11:f5:3d:57:15:ea:04:
4a:03:fb:32:e5:68:fd:f7:c5:50:58:e4:16:31:bf:
f1:64:64:20:61:8a:6b:aa:90:7c:6c:7d:91:a5:b7:
c2:a4:bc:e5:14:b0:78:d5:68:b5:f0:c2:cd:f0:67:
94:77:8c:db:cd:3e:99:d0:4c:54:22:eb:bd:8d:27:
50:ec:29:81:04:30:a1:cd:0b:dc:02:f1:ad:46:1d:
59:67:72:9f:af:4e:c2:aa:1f:fb:76:0c:ca:f9:6d:
17:d3:af:c9:04:d5:23:05:39:3a:ae:80:28:f3:10:
29:31:66:1b:9b:ca:6e:42:c6:ab:89:86:9a:ce:ab:
de:2d:62:f1:3b:68:08:de:a1:ce:7a:e2:7d:30:aa:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:A1:11:67:C7:6A:ED:95:6E:1B:0A:36:AF:F8:CC:D3:87:FE:EA
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/hJ-hEWfHau2VbhsKNq_4zNOH_uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
13:e1:39:2c:0a:3d:46:ca:db:4f:65:ed:94:36:40:1e:f4:35:
2b:1a:6c:1d:15:5c:ac:a4:35:59:ea:63:f2:8d:70:29:82:da:
80:ab:ee:f0:ec:18:48:ae:82:7b:d6:f0:ed:34:f9:a7:84:db:
86:79:db:1f:e2:90:ac:6f:8d:30:3a:46:95:1b:21:76:3a:33:
4c:f3:98:af:e2:00:52:3c:43:7e:a5:36:42:20:6c:1d:0a:29:
96:07:89:83:a1:e9:93:3e:7e:ab:46:8f:be:34:32:2d:b1:39:
7a:c4:5d:8f:fb:2b:ff:b1:65:e1:c8:a7:8f:1d:4c:00:60:f6:
03:b6:14:f8:50:a2:01:c8:4b:92:e1:83:4c:ec:60:09:66:7d:
d3:bd:42:8a:c3:1f:30:50:06:cb:09:7f:d0:9e:27:56:e0:e9:
d4:7c:49:bd:56:08:08:88:e1:6b:62:03:a6:60:ad:f9:97:07:
12:15:4c:c7:84:54:fa:9f:53:91:90:8a:b9:cf:36:1d:fa:23:
7a:f9:8f:74:44:dc:5e:91:42:a2:67:23:6a:36:d1:e4:85:aa:
d0:e1:26:68:ac:dd:57:15:03:cb:50:84:2f:1d:97:fe:8a:48:
84:cc:3a:9d:7d:1a:f9:c8:20:18:0d:5a:b9:f4:b1:0e:b8:bc:
52:d4:93:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:51 2023 by rpki-client on console-ams.rpki-client.org