Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yxWsSd0DIK7j6Fdvzme7KdWzhpE.roa
File: yxWsSd0DIK7j6Fdvzme7KdWzhpE.roa (raw, json)
Hash identifier: rWLoU5eLT3m4EijNtlcetB1Ggd2Xhe3hfCmVbwxhSd8=
Subject key identifier: CB:15:AC:49:DD:03:20:AE:E3:E8:57:6F:CE:67:BB:29:D5:B3:86:91
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 01863B7CA2CFF7A44600F7EA67B8DAC1ED0C
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yxWsSd0DIK7j6Fdvzme7KdWzhpE.roa
Signing time: Fri 10 Feb 2023 13:21:09 +0000
ROA not before: Fri 10 Feb 2023 13:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/21 maxlen: 21
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:7c:a2:cf:f7:a4:46:00:f7:ea:67:b8:da:c1:ed:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Feb 10 13:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb15ac49dd0320aee3e8576fce67bb29d5b38691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:e3:f5:99:59:62:4e:2d:bb:74:e4:1e:52:
ad:93:1c:c2:f5:bd:b4:98:43:cc:e8:91:69:26:e0:
a0:6c:d4:76:c2:16:5c:be:97:96:d5:01:ae:07:61:
21:6d:ae:fe:7d:b4:f2:cd:a6:91:ec:47:8a:3e:cc:
49:43:8d:0e:38:ec:bc:c2:d6:71:11:c8:97:ed:6d:
01:20:11:b2:c7:e6:4e:98:a1:54:99:4c:be:2a:58:
a4:fc:77:7d:b9:23:52:21:30:60:f8:fa:6e:d3:56:
25:3b:f6:68:32:af:e1:31:04:19:90:fc:c9:fa:f1:
02:c0:ab:55:67:4a:83:68:52:b1:60:ad:b5:ea:71:
e9:8c:58:23:74:6c:f1:4a:85:3b:5f:da:84:98:fa:
d5:ae:63:5c:93:f1:68:ab:62:6c:15:b9:3b:39:9d:
2e:10:24:32:ab:3e:8d:39:69:a8:5a:b0:ff:b1:9c:
eb:ef:6c:7d:26:8a:b2:79:b0:a5:29:9b:b5:9b:e2:
8d:52:81:ab:12:49:8a:04:88:28:d1:b8:18:97:34:
3b:85:de:e4:3d:9d:f5:37:dc:fa:bd:12:51:80:e3:
23:fb:cf:50:0d:73:36:73:2e:3b:9c:e1:94:f4:6d:
2c:af:cc:6a:55:d1:c5:f9:13:45:88:06:a9:1f:50:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:AC:49:DD:03:20:AE:E3:E8:57:6F:CE:67:BB:29:D5:B3:86:91
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yxWsSd0DIK7j6Fdvzme7KdWzhpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0/21
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
66:eb:7f:22:22:46:e6:ee:f1:aa:d5:7d:62:c4:d7:75:31:af:
49:12:ef:e3:45:ec:52:71:a2:9c:ee:9e:14:c4:dd:27:20:c8:
46:8e:be:87:b4:0f:bb:77:2a:4e:35:83:78:9b:5c:3d:9c:03:
e1:9a:a5:72:b0:22:59:0f:08:7c:d3:db:88:37:51:80:0a:b2:
b9:a8:16:cb:00:5c:7b:fa:7e:ad:5f:68:52:09:ed:cc:04:60:
95:57:fd:53:7a:5b:6e:fb:7f:48:7a:5b:6c:ba:e2:9d:70:b1:
bd:79:c3:ad:9e:ad:d1:97:74:1f:19:09:82:36:4e:d6:63:76:
b4:ae:10:09:71:b5:07:d9:a3:4f:cf:52:5d:09:3a:b1:b0:fa:
77:1a:2b:bc:27:9a:b8:d1:40:f9:5b:af:71:c6:4d:a3:e1:fb:
36:97:73:24:73:c9:a1:92:45:6c:c3:05:af:f5:62:e0:5f:02:
19:1c:96:c5:48:02:68:2b:23:d9:96:74:22:87:d0:f8:6c:ba:
1c:71:e4:91:82:d5:3b:09:ea:bb:84:88:5d:c3:77:13:58:7a:
da:22:c2:d7:d9:00:2d:43:39:b5:75:ed:11:79:d8:9e:e0:39:
70:ed:ba:ce:38:09:79:ce:ba:8e:7b:8f:79:9d:30:5b:91:c8:
65:74:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:51 2023 by rpki-client on console-ams.rpki-client.org