Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/i6PKJgk2KMeA2kB4CznPMKQfYN0.roa
File: i6PKJgk2KMeA2kB4CznPMKQfYN0.roa (raw, json)
Hash identifier: p1glB90JIYZsAJv0gLpzS+xjV24Lw04cnGDqb6PuwEc=
Subject key identifier: 8B:A3:CA:26:09:36:28:C7:80:DA:40:78:0B:39:CF:30:A4:1F:60:DD
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01867D9B06A91F44C4799DCACA0F4C569131
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/i6PKJgk2KMeA2kB4CznPMKQfYN0.roa
Signing time: Thu 23 Feb 2023 09:29:16 +0000
ROA not before: Thu 23 Feb 2023 09:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 46.34.42.0/23 maxlen: 23
46.34.48.0/24 maxlen: 24
46.34.55.0/24 maxlen: 24
46.34.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7d:9b:06:a9:1f:44:c4:79:9d:ca:ca:0f:4c:56:91:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 23 09:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba3ca26093628c780da40780b39cf30a41f60dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ad:0c:cf:16:38:e5:aa:3e:5e:b8:72:62:4d:
64:38:6c:78:e9:fc:04:2f:05:40:70:43:f1:87:c2:
cc:b7:48:82:30:6e:22:44:df:3f:16:97:d7:3e:41:
57:62:18:22:44:2a:1a:cd:37:fb:ac:58:d0:a1:53:
9f:b3:08:75:24:bc:c1:d5:d7:2d:4e:39:c6:ad:ed:
14:1b:df:d1:c7:95:b3:b0:fb:71:76:e9:37:db:08:
8d:ee:c2:89:e2:1c:dd:d2:d3:4a:9d:7e:8b:df:18:
a7:24:0a:51:26:74:61:fe:54:0f:3c:fc:13:a3:e4:
56:f0:3f:09:6b:91:5a:56:8e:2d:ae:d3:49:d6:ba:
6f:b9:b2:e1:6c:ef:bf:e0:38:a2:56:e9:4c:16:fb:
ad:89:d0:26:89:3f:ca:6f:08:f4:58:42:a2:9d:ac:
d4:50:be:d7:36:df:14:2b:4e:f2:6c:3c:34:8b:33:
f2:5b:a0:2f:9f:40:0f:c5:3c:1c:1d:35:45:f9:39:
09:22:c3:88:10:3d:22:59:4f:38:9e:7d:16:4e:d2:
9b:7f:69:59:53:8c:7d:2f:7b:0f:97:46:d0:b3:81:
e9:b4:ae:69:31:e1:3a:b3:cf:74:72:b0:e8:97:81:
01:34:79:bc:49:f5:c3:ff:97:c8:73:03:bf:4d:4c:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:CA:26:09:36:28:C7:80:DA:40:78:0B:39:CF:30:A4:1F:60:DD
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/i6PKJgk2KMeA2kB4CznPMKQfYN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.42.0/23
46.34.48.0/24
46.34.54.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:6f:a3:e2:65:00:62:2f:23:5d:2e:e3:03:7f:5f:e0:96:2b:
3b:9f:08:d0:ff:19:05:db:b6:b3:98:1b:4e:b8:af:11:9f:f4:
78:39:a1:db:d1:60:58:10:bf:db:fb:6e:f7:86:24:3d:9c:82:
b7:a4:b2:7d:0c:ee:dc:e1:57:91:ad:63:4a:62:ec:f2:2c:cb:
5c:53:fa:ec:41:4b:c3:82:dc:fe:1c:03:57:64:74:e2:c3:91:
bf:17:52:b6:e2:ec:53:9a:9b:6d:e0:af:9d:b8:94:c2:15:fe:
86:82:7d:9a:72:cf:64:48:9a:ac:4f:33:a2:97:c4:4e:9d:09:
ce:b0:69:d1:a7:1a:3e:47:c9:7d:44:11:fb:aa:1f:65:6b:2c:
a7:c8:2f:c1:d0:03:0d:b5:c8:74:b7:2c:43:44:f7:1c:78:3e:
9d:45:d4:2c:cf:5e:f9:da:fa:f1:d8:eb:4b:9c:54:b3:04:59:
1b:93:9d:8c:3c:48:d5:a2:f4:e3:49:26:89:b0:56:39:b8:67:
dc:bf:25:d6:ed:a3:15:d7:a9:2e:0e:db:d6:7f:59:98:17:48:
8a:aa:f5:7f:71:42:d0:de:12:4e:0d:6e:5b:d0:97:05:01:91:
cd:c1:51:40:7f:fd:76:0f:58:ac:4b:d9:4f:47:81:12:8f:40:
00:b2:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:51 2023 by rpki-client on console-ams.rpki-client.org