Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/y1wTTbyg-Z-58LBHKnVMpMYFUkE.roa
File: y1wTTbyg-Z-58LBHKnVMpMYFUkE.roa (raw, json)
Hash identifier: 421nD0D5yja4ipDBezR8YL0/gJYVQbvocDj9dtLMLCs=
Subject key identifier: CB:5C:13:4D:BC:A0:F9:9F:B9:F0:B0:47:2A:75:4C:A4:C6:05:52:41
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018732CE9E62A9B138075416E0FB23F5DCF7
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/y1wTTbyg-Z-58LBHKnVMpMYFUkE.roa
Signing time: Thu 30 Mar 2023 13:56:54 +0000
ROA not before: Thu 30 Mar 2023 13:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 46.34.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 17:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:ce:9e:62:a9:b1:38:07:54:16:e0:fb:23:f5:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 30 13:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb5c134dbca0f99fb9f0b0472a754ca4c6055241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:1b:13:ef:07:37:f6:47:5c:64:d9:0c:f7:
06:93:59:0a:7c:24:c2:79:9d:e1:b8:49:43:8f:e3:
52:91:99:14:8a:7c:8f:ba:c9:89:d7:19:88:fd:53:
15:21:b2:96:0d:29:c1:6b:9a:b2:87:ea:e6:cd:23:
02:ba:ad:ff:d7:30:e2:72:e5:67:6f:df:74:cb:35:
ec:a1:81:9f:6f:f1:35:2d:ec:57:a6:96:ac:d2:1b:
97:16:79:93:7b:8c:64:fb:55:4d:35:af:49:cb:3a:
d8:8f:28:8b:82:b0:84:16:65:55:2d:a1:c8:5f:42:
0e:0d:f8:ac:02:b1:f2:ac:ff:c2:79:d4:1c:10:63:
78:bb:e6:19:91:3d:73:5b:40:49:93:fd:18:47:9c:
50:7c:96:b4:ae:47:de:07:01:d7:8c:35:22:d3:d7:
e5:5f:0c:92:cb:32:f7:92:7d:13:1d:7b:99:81:f2:
46:98:46:6a:16:02:e8:18:d0:dc:58:c4:7f:e6:2e:
df:ae:9b:68:4d:ac:74:ad:41:10:ad:55:17:42:3e:
95:48:d0:27:58:96:f9:92:30:86:32:ff:06:c8:d1:
85:1e:fa:84:c6:07:af:72:84:55:fb:a2:41:17:50:
92:ec:50:bd:81:c9:2b:25:52:92:2b:b7:45:82:5d:
d4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:13:4D:BC:A0:F9:9F:B9:F0:B0:47:2A:75:4C:A4:C6:05:52:41
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/y1wTTbyg-Z-58LBHKnVMpMYFUkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.51.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7a:55:f9:04:6c:5d:13:72:32:77:e8:84:ee:c4:c2:a8:3e:
c4:a7:fa:18:3b:b4:75:dc:57:36:f9:f8:e9:a6:c5:fc:a1:d9:
02:86:c3:41:25:a9:73:8d:c1:26:a9:73:2f:53:76:21:6b:d1:
a8:d2:7a:d7:f8:30:62:68:86:05:c9:3d:ab:d0:fe:75:87:56:
2c:7a:be:1b:22:59:be:b3:3b:72:a7:e9:e5:bf:cd:6c:b8:71:
ca:8b:f9:12:d8:17:97:77:41:c1:eb:d8:24:90:55:65:5a:51:
ce:0f:07:e2:b3:a5:da:b2:8c:73:74:6e:3d:5b:15:a8:3c:a1:
11:6c:40:16:36:fa:a0:43:60:a7:96:ad:53:e5:0a:4d:5a:14:
4d:58:6f:f8:74:96:fb:be:a6:77:70:ca:e0:07:0b:2b:00:1f:
00:1e:77:fc:9a:11:f7:72:8e:b4:47:03:fe:6c:5d:b1:56:76:
02:f2:8a:98:88:9e:6a:be:5c:5f:90:74:f6:d4:c2:43:6f:df:
61:b7:72:a8:2e:c6:39:4f:87:1e:55:0a:88:98:46:16:c1:72:
0b:e0:ce:8c:c0:fc:24:0d:ec:5d:8a:54:12:ab:6e:40:1a:00:
06:55:50:70:a9:96:70:4a:52:b5:5a:8b:f6:12:1d:62:12:e5:
80:09:1a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org