Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p-FH4rWvZinHsi6ouC5b30LOYXs.roa
File: p-FH4rWvZinHsi6ouC5b30LOYXs.roa (raw, json)
Hash identifier: 5FP9ptWkcCERFH8qvbIbN8e73QRn3NWZbDwxgV7vPKg=
Subject key identifier: A7:E1:47:E2:B5:AF:66:29:C7:B2:2E:A8:B8:2E:5B:DF:42:CE:61:7B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018659BEF8067D4FDF01BABE703675EF73E4
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p-FH4rWvZinHsi6ouC5b30LOYXs.roa
Signing time: Thu 16 Feb 2023 10:22:12 +0000
ROA not before: Thu 16 Feb 2023 10:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 46.34.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 16 Feb 2023 14:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:be:f8:06:7d:4f:df:01:ba:be:70:36:75:ef:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 16 10:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7e147e2b5af6629c7b22ea8b82e5bdf42ce617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:f2:d3:9f:bc:27:b1:a3:a1:a6:ba:cf:69:
bd:b2:46:b4:a8:2f:e4:18:ad:3e:78:c3:a0:7f:42:
0a:5f:69:e1:73:6a:7c:0a:44:0a:cd:6d:45:11:93:
9e:78:b6:c7:83:de:35:b6:75:f5:43:d8:7e:cc:2f:
61:48:bd:f2:65:d6:8a:ee:15:3e:ec:f7:92:70:48:
ca:95:fc:fb:72:2b:ec:5e:99:e2:d8:7b:66:89:6a:
bb:c3:a1:f8:cb:c1:68:47:f1:67:61:16:c6:c2:c5:
39:d2:6f:be:80:ad:a7:58:44:e5:c4:04:a9:9e:0d:
13:d9:04:80:e3:d5:c3:22:1c:0b:1a:95:a6:69:96:
9b:b1:a2:50:64:1b:a0:d6:cc:1b:44:f1:40:29:49:
b0:92:93:6d:6d:3d:01:d3:22:7a:7b:eb:67:13:8f:
54:42:8b:42:05:fd:b5:28:72:e8:c2:c7:9f:b2:66:
c9:13:bb:09:0f:75:fd:69:3e:30:20:c0:a6:8e:18:
86:79:ea:36:2e:a8:b8:bd:95:98:43:64:54:63:12:
4c:68:55:0b:6e:ef:57:f0:4d:e3:26:9b:2c:5a:ff:
d4:80:e6:f2:d4:63:12:49:a8:24:a6:af:8e:21:ba:
c9:17:8d:e8:b9:44:84:d9:28:f9:4b:a5:2c:54:ed:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E1:47:E2:B5:AF:66:29:C7:B2:2E:A8:B8:2E:5B:DF:42:CE:61:7B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/p-FH4rWvZinHsi6ouC5b30LOYXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.56.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:dd:60:a0:36:7e:ee:bd:b9:81:8b:a4:0a:2c:0f:26:a4:15:
39:e7:b7:36:89:c8:b5:f9:44:2f:e8:68:ff:da:a6:ad:73:4a:
9b:b5:45:08:51:d2:cf:a2:1b:5b:d8:58:20:ed:77:44:18:61:
32:e6:81:81:fe:6d:76:d8:da:21:03:c7:39:a3:8f:1d:d8:d5:
a7:38:90:cf:0d:26:01:4d:1a:d3:f0:87:b6:8b:97:38:36:1a:
0c:a6:4f:81:57:28:18:51:5b:a0:a4:33:96:5c:a3:60:a3:95:
be:a9:1e:04:a0:37:8d:4d:e0:d1:52:11:6f:d2:e5:65:8c:22:
7c:8c:85:87:1c:90:b1:d4:38:48:31:0c:b6:06:d3:e6:af:92:
91:6e:b7:92:c7:28:9a:d0:32:de:1d:79:31:c8:4a:bd:bf:e8:
b8:ab:02:f1:d1:65:f2:50:83:e6:67:71:f9:ea:2d:47:91:48:
76:79:1a:a2:e5:c6:ff:8b:76:30:bf:1f:1c:7a:19:f0:05:cb:
38:a6:88:ed:bc:96:02:ec:7b:51:b0:bb:67:86:88:7d:ec:4a:
8f:e5:f2:31:2f:c0:e7:f2:35:a4:37:b6:c7:17:57:9f:40:9b:
10:44:00:f8:c9:2e:e0:14:2d:1b:94:de:f9:e3:18:8c:74:ed:
c3:c5:d0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org