Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uKOzQaj8KVoXzubb2nCahld8l-g.roa
File: uKOzQaj8KVoXzubb2nCahld8l-g.roa (raw, json)
Hash identifier: z1sX49wpbJhu/2mHqjl/n2TyN+U9LWugNvwlmsW/SLE=
Subject key identifier: B8:A3:B3:41:A8:FC:29:5A:17:CE:E6:DB:DA:70:9A:86:57:7C:97:E8
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018C05BBC806C5DEB00E14F60AA5AECCA6A5
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uKOzQaj8KVoXzubb2nCahld8l-g.roa
Signing time: Sat 25 Nov 2023 09:07:21 +0000
ROA not before: Sat 25 Nov 2023 09:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.36.0/24 maxlen: 24
46.34.32.0/22 maxlen: 22
46.34.40.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 08:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:05:bb:c8:06:c5:de:b0:0e:14:f6:0a:a5:ae:cc:a6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Nov 25 09:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a3b341a8fc295a17cee6dbda709a86577c97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:32:57:6f:c2:19:36:d0:a0:15:21:a8:4d:
aa:8a:eb:14:cb:41:32:02:45:31:60:92:65:3c:29:
21:ab:c2:a8:57:47:f6:2d:c7:50:c6:c4:e5:78:db:
a9:d0:87:8c:a8:f5:8d:71:a5:33:95:78:20:ea:6f:
02:c5:1a:98:c7:94:bb:41:1c:60:d5:bf:9e:b4:5a:
f8:4e:b4:ec:04:5a:53:45:6e:9d:30:ec:1e:6e:5e:
a0:3d:36:4e:11:d0:b0:e7:33:5c:8f:8c:b6:aa:14:
31:02:1d:6b:7d:e1:46:23:88:e8:a7:50:28:25:ec:
f3:50:5b:f8:fc:c2:98:35:42:c7:a1:4e:87:11:fa:
5b:ab:84:ae:73:19:af:a3:14:e1:10:4a:5e:e4:41:
40:d9:f0:d9:fd:e0:04:e4:a0:ba:56:8a:7a:bc:54:
72:c9:5b:51:2e:0b:11:b1:9b:54:69:1b:7b:66:5d:
af:6d:dc:6f:dc:90:d4:40:4b:9d:f3:2a:3b:a1:d3:
53:a3:4b:f3:9c:57:51:2f:4b:29:76:87:8b:a3:22:
1d:de:98:47:9f:68:f9:4a:ef:f9:e1:df:12:3f:89:
d0:d9:a4:b0:f6:cc:86:3e:38:1c:e1:7c:8e:37:4e:
99:16:a7:f6:9a:e3:c1:0c:55:b8:e8:18:2d:d7:56:
43:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:B3:41:A8:FC:29:5A:17:CE:E6:DB:DA:70:9A:86:57:7C:97:E8
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uKOzQaj8KVoXzubb2nCahld8l-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
41:aa:f7:38:5f:35:4e:92:f8:e1:df:b8:29:7b:8c:ff:04:80:
20:c1:69:23:ba:6b:ce:e1:e3:9e:04:7b:fd:71:ed:f8:bf:76:
e7:63:a1:ca:a5:99:24:1b:86:dd:01:cf:7e:4b:e1:0e:43:f9:
ba:24:27:b2:c2:b1:8a:60:46:b0:89:11:ec:6f:6f:c7:64:cb:
9e:0a:99:95:33:70:06:41:cb:8d:6b:30:25:45:42:60:fd:a8:
7b:d3:da:d2:17:c0:bf:14:33:00:da:27:bf:fd:df:22:c1:d2:
8c:39:dd:2c:77:9a:e6:40:dd:52:97:b0:66:5d:d4:16:25:89:
56:1b:ba:b9:95:ba:54:e6:ca:8c:24:72:4e:62:0c:8b:4a:df:
14:60:35:3b:24:03:6d:6e:24:97:98:1a:dc:32:32:b2:83:54:
9b:61:89:ce:83:fb:48:ff:ad:74:fc:4b:5a:9f:5c:90:a5:76:
81:4f:9f:e8:0e:70:56:7f:aa:fa:d5:0d:d4:70:80:36:85:76:
df:27:44:ca:0d:80:54:9d:bd:42:16:5e:30:cc:c3:49:9b:f6:
4e:9d:46:53:b9:f4:a5:58:e8:5f:ce:1d:85:82:92:31:88:36:
12:b9:54:1c:f3:21:a7:90:f8:12:02:24:49:4e:f5:5b:c1:a9:
41:6a:05:46
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYwFu8gGxd6wDhT2CqWuzKalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMxMTI1MDkwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGEzYjM0MWE4ZmMyOTVhMTdjZWU2ZGJkYTcwOWE4NjU3N2M5N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xoyV2/CGTbQoBUhqE2qiusUy0Ey
AkUxYJJlPCkhq8KoV0f2LcdQxsTleNup0IeMqPWNcaUzlXgg6m8CxRqYx5S7QRxg
1b+etFr4TrTsBFpTRW6dMOwebl6gPTZOEdCw5zNcj4y2qhQxAh1rfeFGI4jop1Ao
JezzUFv4/MKYNULHoU6HEfpbq4SucxmvoxThEEpe5EFA2fDZ/eAE5KC6Vop6vFRy
yVtRLgsRsZtUaRt7Zl2vbdxv3JDUQEud8yo7odNTo0vznFdRL0spdoeLoyId3phH
n2j5Su/54d8SP4nQ2aSw9syGPjgc4XyON06ZFqf2muPBDFW46Bgt11ZDmQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLijs0Go/ClaF87m29pwmoZXfJfoMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvdUtPelFhajhLVm9YenViYjJuQ2FobGQ4bC1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD
BAAuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBAEGq9zhfNU6S+OHf
uCl7jP8EgCDBaSO6a87h454Ee/1x7fi/dudjocqlmSQbht0Bz35L4Q5D+bokJ7LC
sYpgRrCJEexvb8dky54KmZUzcAZBy41rMCVFQmD9qHvT2tIXwL8UMwDaJ7/93yLB
0ow53Sx3muZA3VKXsGZd1BYliVYburmVulTmyowkck5iDItK3xRgNTskA21uJJeY
GtwyMrKDVJthic6D+0j/rXT8S1qfXJCldoFPn+gOcFZ/qvrVDdRwgDaFdt8nRMoN
gFSdvUIWXjDMw0mb9k6dRlO59KVY6F/OHYWCkjGINhK5VBzzIaeQ+BICJElO9VvB
qUFqBUY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org