Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nnpHgmiW_CPwERPIJXbBmc9SR2Y.roa
File: nnpHgmiW_CPwERPIJXbBmc9SR2Y.roa (raw, json)
Hash identifier: 4IBO758ew6Yfj7OisNRYQuv/mIM2dK4tAm9LJCQNPa0=
Subject key identifier: 9E:7A:47:82:68:96:FC:23:F0:11:13:C8:25:76:C1:99:CF:52:47:66
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018C394B72E32367A1F98A7B258FD5C664A5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nnpHgmiW_CPwERPIJXbBmc9SR2Y.roa
Signing time: Tue 05 Dec 2023 09:24:54 +0000
ROA not before: Tue 05 Dec 2023 09:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215906
IP address blocks: 46.34.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:4b:72:e3:23:67:a1:f9:8a:7b:25:8f:d5:c6:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Dec 5 09:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7a47826896fc23f01113c82576c199cf524766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:51:7b:7d:cf:ef:33:11:1f:aa:a1:3f:20:
70:c2:dc:8c:6c:b2:21:5a:c9:e7:3f:61:3a:f6:2c:
d6:f3:93:06:6f:80:ed:64:2d:b9:3c:d4:a3:4a:81:
ba:2f:80:42:e0:26:fc:24:cf:f1:d9:20:fc:5a:37:
b4:f4:24:75:d8:a5:67:46:75:67:0e:7b:7e:0d:c8:
03:12:da:fd:0c:b7:4d:d4:bc:7c:5b:99:50:8b:a7:
f0:4a:d9:3e:99:0b:0c:d5:7c:f2:83:b2:79:81:90:
4b:e5:45:5b:b8:10:9e:f5:25:69:71:2f:47:0c:6c:
db:2f:da:08:d1:3c:bc:93:e1:ee:e1:76:3e:69:0f:
a8:8a:18:72:9a:1c:5b:19:f8:6a:8e:22:77:3b:79:
a8:68:99:7b:50:56:dc:b4:a8:3d:ee:51:7c:82:e7:
f3:d1:e1:18:bb:73:6e:d8:7a:7f:fc:95:f3:65:dd:
4b:fb:78:4d:f7:88:48:13:f8:e6:ab:ab:d8:ff:fa:
d2:9b:00:ca:e3:0c:3b:bb:3e:6d:73:ce:ed:8d:75:
66:77:c4:09:c6:ed:43:83:d6:f7:d7:1e:f7:fb:8a:
61:27:23:5f:6c:3d:04:5c:8d:66:76:06:29:d1:cb:
5a:37:c7:d0:63:8e:96:35:66:50:1f:7a:82:43:bb:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7A:47:82:68:96:FC:23:F0:11:13:C8:25:76:C1:99:CF:52:47:66
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/nnpHgmiW_CPwERPIJXbBmc9SR2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.62.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8d:17:4a:fd:0c:1f:3c:71:50:1d:6b:65:7f:ce:f3:c7:5f:
a1:f0:e0:48:3e:04:17:b9:bf:ea:eb:75:31:3c:19:4b:34:1b:
44:df:96:83:18:d2:5b:19:e1:b9:63:b5:5b:73:95:6a:a5:c6:
87:f7:e7:a9:6d:b2:db:b2:6a:34:da:ae:1b:fc:6b:e0:1c:5f:
50:4a:f8:10:04:ba:d2:b6:83:1c:a3:76:cf:96:58:3e:62:d1:
45:3e:37:7a:b6:14:6d:7e:58:81:52:d8:cb:d2:29:15:d9:2b:
5a:ee:94:30:88:98:fc:21:9b:1c:e7:9b:be:35:56:c6:9a:01:
2c:64:13:39:bb:b3:84:d3:73:0d:6f:b3:f8:0a:0a:5d:99:d6:
f1:28:ee:17:56:16:fe:4b:ed:b6:0e:bf:b8:c9:76:c8:51:e9:
9f:23:26:fe:f7:a9:a8:78:4e:ae:49:56:fb:f5:37:b2:4d:f8:
c5:c2:23:57:7b:c6:83:90:60:ae:3f:cb:17:8b:01:0d:c5:67:
ca:05:68:58:68:cb:bc:4f:a4:b7:6b:36:6e:f7:01:29:af:fd:
b7:5c:2a:17:5e:0d:0a:df:c4:0a:b1:61:b5:aa:1b:fc:72:26:
53:b9:66:cf:10:53:07:26:74:1b:e2:08:b6:c8:f2:87:0b:c3:
00:ec:70:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw5S3LjI2eh+Yp7JY/VxmSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMjA1MDkyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTdhNDc4MjY4OTZmYzIzZjAxMTEzYzgyNTc2YzE5OWNmNTI0NzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjhRe33P7zMRH6qhPyBwwtyMbLIh
WsnnP2E69izW85MGb4DtZC25PNSjSoG6L4BC4Cb8JM/x2SD8Wje09CR12KVnRnVn
Dnt+DcgDEtr9DLdN1Lx8W5lQi6fwStk+mQsM1Xzyg7J5gZBL5UVbuBCe9SVpcS9H
DGzbL9oI0Ty8k+Hu4XY+aQ+oihhymhxbGfhqjiJ3O3moaJl7UFbctKg97lF8gufz
0eEYu3Nu2Hp//JXzZd1L+3hN94hIE/jmq6vY//rSmwDK4ww7uz5tc87tjXVmd8QJ
xu1Dg9b31x73+4phJyNfbD0EXI1mdgYp0ctaN8fQY46WNWZQH3qCQ7tnDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ56R4Jolvwj8BETyCV2wZnPUkdmMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvbm5wSGdtaVdfQ1B3RVJQSUpYYkJtYzlTUjJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiI+MA0G
CSqGSIb3DQEBCwUAA4IBAQApjRdK/QwfPHFQHWtlf87zx1+h8OBIPgQXub/q63Ux
PBlLNBtE35aDGNJbGeG5Y7Vbc5VqpcaH9+epbbLbsmo02q4b/GvgHF9QSvgQBLrS
toMco3bPllg+YtFFPjd6thRtfliBUtjL0ikV2Sta7pQwiJj8IZsc55u+NVbGmgEs
ZBM5u7OE03MNb7P4CgpdmdbxKO4XVhb+S+22Dr+4yXbIUemfIyb+96moeE6uSVb7
9TeyTfjFwiNXe8aDkGCuP8sXiwENxWfKBWhYaMu8T6S3azZu9wEpr/23XCoXXg0K
38QKsWG1qhv8ciZTuWbPEFMHJnQb4gi2yPKHC8MA7HCf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org