Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wD7i0MR426zFpNcsuUYfUTbgORA.roa
File: wD7i0MR426zFpNcsuUYfUTbgORA.roa (raw, json)
Hash identifier: tdzcwJFRXg5A7kjtYLo7qjevh4JPxIzdJqxyMQM3x+s=
Subject key identifier: C0:3E:E2:D0:C4:78:DB:AC:C5:A4:D7:2C:B9:46:1F:51:36:E0:39:10
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188DD99AFED77BB7A52639DE42E75F6AA41
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wD7i0MR426zFpNcsuUYfUTbgORA.roa
Signing time: Wed 21 Jun 2023 10:56:56 +0000
ROA not before: Wed 21 Jun 2023 10:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 46.34.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:99:af:ed:77:bb:7a:52:63:9d:e4:2e:75:f6:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 21 10:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c03ee2d0c478dbacc5a4d72cb9461f5136e03910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:78:ff:af:3a:1e:22:20:4f:25:c1:b2:33:
8e:c3:c1:9a:53:b4:4f:96:4e:01:c1:d1:41:e8:0f:
12:43:71:de:d1:52:81:8b:ea:6b:98:39:6b:cd:da:
ea:76:b4:04:0f:fe:13:0f:3b:76:21:13:3c:7e:17:
da:ff:51:61:04:87:82:f0:aa:91:d4:ee:53:b5:db:
3d:07:4c:66:24:5e:a9:37:62:fc:58:35:e2:74:9c:
de:66:b3:fa:5a:b8:04:f6:b5:fe:c5:e5:d0:bd:17:
1a:9d:8e:a2:2c:7c:4e:46:ed:ae:cf:bb:d0:82:87:
61:99:91:1f:f4:70:d2:d9:15:d8:cf:24:05:73:48:
41:25:7d:19:72:cf:c6:0e:0b:e1:c8:ce:8a:95:28:
2a:77:02:b0:a5:15:0f:c6:09:f3:33:0a:24:6e:7a:
88:c5:34:be:8e:4d:90:3e:12:6b:7a:dd:d3:44:bf:
0a:4d:ad:c5:26:c1:02:6f:ac:35:61:df:d6:a1:51:
7f:11:0d:30:97:4f:91:32:df:1e:e1:92:0f:f7:a8:
9f:0a:8b:58:61:8a:05:0d:4f:b5:2f:da:38:7c:93:
92:06:2a:83:4c:91:44:df:c7:ad:2d:72:6b:c8:fc:
f2:82:6f:e2:b7:2f:be:d3:7e:0f:77:0e:f8:cb:36:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3E:E2:D0:C4:78:DB:AC:C5:A4:D7:2C:B9:46:1F:51:36:E0:39:10
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/wD7i0MR426zFpNcsuUYfUTbgORA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:fb:01:0a:6a:dd:ab:d8:e5:66:5b:42:ba:2c:a3:47:ca:f4:
79:9d:88:27:8d:5e:c3:a1:08:9f:d7:3b:8e:7e:fd:b2:8f:07:
d2:d7:87:77:fe:3f:86:8d:4b:1e:92:d6:b7:54:36:d6:f7:89:
12:7f:bb:2f:f6:52:3f:60:63:c0:ca:6b:b8:38:6a:a1:dd:62:
43:00:32:b4:00:1d:71:d8:6a:c2:f8:24:2e:d1:5e:04:90:84:
da:4b:fe:83:09:61:e2:39:db:41:33:05:38:c5:53:9f:d4:53:
4b:41:d0:22:89:99:f5:e3:9c:47:bc:33:6a:1e:57:f1:c4:60:
44:0a:67:23:1d:1b:d0:c1:99:52:00:c3:65:98:99:7b:88:90:
f8:82:87:7b:5c:9b:95:80:c2:32:a0:57:e1:ba:5a:cc:b2:3d:
00:0f:b6:53:f1:df:c6:2c:0b:7a:d2:da:d6:14:4c:69:c6:33:
d5:97:82:f7:36:71:47:f4:e2:d2:7a:16:41:fb:95:49:78:15:
95:48:b7:45:0e:6c:df:5f:a4:92:59:fa:30:a5:44:4e:3b:3b:
84:d5:21:2c:ab:c7:9c:90:ad:c3:42:ee:5b:4e:d1:c9:f8:d2:
2f:ec:c6:38:45:08:b5:e2:eb:33:42:c7:b9:25:df:cc:b6:ec:
f0:e9:8a:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjdma/td7t6UmOd5C519qpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjMwNjIxMTA1NjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDNlZTJkMGM0NzhkYmFjYzVhNGQ3MmNiOTQ2MWY1MTM2ZTAzOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+B4/686HiIgTyXBsjOOw8GaU7RP
lk4BwdFB6A8SQ3He0VKBi+prmDlrzdrqdrQED/4TDzt2IRM8fhfa/1FhBIeC8KqR
1O5Ttds9B0xmJF6pN2L8WDXidJzeZrP6WrgE9rX+xeXQvRcanY6iLHxORu2uz7vQ
godhmZEf9HDS2RXYzyQFc0hBJX0Zcs/GDgvhyM6KlSgqdwKwpRUPxgnzMwokbnqI
xTS+jk2QPhJret3TRL8KTa3FJsECb6w1Yd/WoVF/EQ0wl0+RMt8e4ZIP96ifCotY
YYoFDU+1L9o4fJOSBiqDTJFE38etLXJryPzygm/ity++034Pdw74yzanewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMA+4tDEeNusxaTXLLlGH1E24DkQMB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvd0Q3aTBNUjQyNnpGcE5jc3VVWWZVVGJnT1JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIwMA0G
CSqGSIb3DQEBCwUAA4IBAQB/+wEKat2r2OVmW0K6LKNHyvR5nYgnjV7DoQif1zuO
fv2yjwfS14d3/j+GjUsekta3VDbW94kSf7sv9lI/YGPAymu4OGqh3WJDADK0AB1x
2GrC+CQu0V4EkITaS/6DCWHiOdtBMwU4xVOf1FNLQdAiiZn145xHvDNqHlfxxGBE
CmcjHRvQwZlSAMNlmJl7iJD4god7XJuVgMIyoFfhulrMsj0AD7ZT8d/GLAt60trW
FExpxjPVl4L3NnFH9OLSehZB+5VJeBWVSLdFDmzfX6SSWfowpUROOzuE1SEsq8ec
kK3DQu5bTtHJ+NIv7MY4RQi14uszQse5Jd/Mtuzw6Yp9
-----END CERTIFICATE-----
Generated at Thu Dec 21 11:21:37 2023 by rpki-client on console-ams.rpki-client.org