Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/z6TJlLrIYSfVP9S-6NAzMJmcyzk.roa
File: z6TJlLrIYSfVP9S-6NAzMJmcyzk.roa (raw, json)
Hash identifier: 4qbsVIzqQiz4zx9kD+8Aby5ktxhsp/1iCFPEQ4sP44s=
Subject key identifier: CF:A4:C9:94:BA:C8:61:27:D5:3F:D4:BE:E8:D0:33:30:99:9C:CB:39
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188917398E9950117D2D8BC3FA724F4B2FC
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/z6TJlLrIYSfVP9S-6NAzMJmcyzk.roa
Signing time: Tue 06 Jun 2023 16:04:12 +0000
ROA not before: Tue 06 Jun 2023 16:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/24 maxlen: 24
46.34.40.0/24 maxlen: 24
46.34.45.0/24 maxlen: 24
46.34.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 00:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:73:98:e9:95:01:17:d2:d8:bc:3f:a7:24:f4:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 6 16:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfa4c994bac86127d53fd4bee8d03330999ccb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:dd:2f:a9:a7:b7:6f:af:90:c3:f7:ea:e6:
09:96:9c:23:78:7a:ce:cf:21:12:7c:13:3c:b7:30:
4f:54:e9:fb:2c:cf:10:da:6f:7a:4d:65:e3:f7:e0:
84:7e:a9:e5:c7:7b:ee:5e:fb:95:7a:49:30:1d:6f:
16:85:20:00:e5:27:c2:bd:59:97:53:06:39:52:23:
20:ed:0c:60:83:3f:90:ca:10:ef:5b:d7:a1:ee:d9:
13:1d:9a:7c:f1:04:21:a8:1f:dd:08:73:71:d7:e6:
2c:e6:fa:64:4a:e3:f3:2f:2b:4e:2d:68:5c:b2:75:
ec:17:a7:8a:25:df:cc:db:ab:46:8f:db:bf:db:97:
c6:d5:63:d2:1c:49:77:46:ec:b9:04:65:31:d9:b9:
35:ed:21:b5:ee:e3:2c:7a:e3:55:a9:c6:2b:a8:6d:
8b:2c:47:47:f0:4a:1c:1a:7b:da:0d:ee:ea:24:d7:
fb:76:69:36:a2:bb:ca:66:ea:7d:e7:28:3b:f9:0d:
dd:d5:b0:ba:e8:6c:d4:b2:05:2d:71:33:f9:8b:95:
ab:df:c2:c3:33:15:78:d8:69:7c:97:ea:88:f7:60:
4c:61:b7:b6:bf:71:59:b5:24:ae:36:d5:45:da:c3:
a4:cf:90:ed:ec:a1:32:e8:20:c4:e7:e6:aa:d6:b0:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:C9:94:BA:C8:61:27:D5:3F:D4:BE:E8:D0:33:30:99:9C:CB:39
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/z6TJlLrIYSfVP9S-6NAzMJmcyzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.36.255
46.34.40.0/24
46.34.45.0/24
46.34.63.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ca:e5:21:b4:68:ad:54:c2:84:28:1d:bb:83:87:98:bf:9a:
60:30:ad:d4:3f:b2:37:85:b0:a8:77:0b:e5:01:ef:b2:2c:d5:
18:95:a0:52:9a:58:4c:fb:9e:ac:1c:ce:ec:06:1b:66:d8:7f:
c3:6f:16:48:ea:00:56:88:da:55:4e:18:22:fe:95:c8:54:0a:
74:88:95:c0:43:6c:4d:4a:24:ea:36:40:85:6c:68:b5:c9:c4:
68:39:98:bd:fd:57:4d:ce:dc:3e:d6:d6:1d:5f:6d:90:8f:18:
77:01:b3:94:be:34:8e:9e:70:35:64:68:bf:07:55:ac:81:20:
0b:4e:3f:ac:bc:b0:d1:64:e7:57:39:e0:8e:f0:8c:05:17:f7:
e1:eb:63:c0:0d:bb:8a:1e:21:f2:9b:8b:68:e0:4a:09:09:8d:
95:f0:5d:eb:cd:90:c3:a5:32:39:79:38:5f:b3:43:55:e4:3f:
54:42:10:c0:72:6f:21:b7:bb:0c:ea:97:3b:7a:16:30:c7:61:
3e:d5:01:c2:6d:fa:c2:06:7a:5c:91:8a:ef:e4:91:5a:6c:fe:
30:07:1c:de:d9:29:85:ea:c5:bb:4a:a3:07:8b:b9:18:b5:9b:
3b:a0:53:9d:eb:27:d9:cd:23:6f:24:a5:72:e4:28:6b:4b:7a:
be:0a:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org