Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zCf4WmKe5CtnaOhwxNWf6uusv_M.roa
File: zCf4WmKe5CtnaOhwxNWf6uusv_M.roa (raw, json)
Hash identifier: JXKVi0ZwmLAvgghCqHFPsFRcW8PxibZYs8QYM7Nu0Rc=
Subject key identifier: CC:27:F8:5A:62:9E:E4:2B:67:68:E8:70:C4:D5:9F:EA:EB:AC:BF:F3
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0188C3F74C51009E6B64B25DA946F8868885
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zCf4WmKe5CtnaOhwxNWf6uusv_M.roa
Signing time: Fri 16 Jun 2023 11:29:03 +0000
ROA not before: Fri 16 Jun 2023 11:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 46.34.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 08:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:f7:4c:51:00:9e:6b:64:b2:5d:a9:46:f8:86:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jun 16 11:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc27f85a629ee42b6768e870c4d59feaebacbff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:23:74:90:08:86:d0:71:45:b3:67:df:f5:a1:
ec:91:6b:36:93:d7:3a:d1:19:69:8d:45:ea:97:cd:
c3:5d:dc:c1:c4:35:87:09:40:71:79:69:c9:e5:55:
15:19:6a:9f:d1:f2:ea:a4:85:a9:b9:48:62:98:28:
97:cb:c6:11:3a:67:36:a4:1d:01:b2:dd:62:62:dc:
b4:d0:46:2d:0a:6c:72:5a:67:0e:30:ad:c2:39:86:
dd:0c:88:6d:a3:1f:a4:56:35:ca:6c:03:83:65:89:
f0:11:d3:68:b2:f5:99:48:4d:86:d8:57:af:d0:77:
38:1e:03:c1:87:29:6c:75:a0:de:22:8b:57:38:65:
9e:c0:f4:5d:4a:5c:42:36:8a:8b:ad:3e:bd:73:7f:
52:33:3f:ab:06:f6:0c:26:35:a3:43:a2:ef:38:ed:
5e:58:81:aa:a7:cd:c6:2e:bd:15:8b:63:55:b6:3c:
d2:7a:7c:05:ef:2b:fa:2e:c5:33:05:41:83:6b:8c:
f4:9c:47:bd:07:73:01:2c:4c:00:43:d9:2c:15:2d:
63:d5:8c:9b:db:d1:60:db:ee:7d:99:d2:cc:e2:96:
53:fa:53:0f:70:d7:bb:d5:4d:cd:7a:3f:c7:d6:b8:
7a:90:8f:f5:31:c0:28:c7:ea:45:96:8f:dd:61:7d:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:27:F8:5A:62:9E:E4:2B:67:68:E8:70:C4:D5:9F:EA:EB:AC:BF:F3
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zCf4WmKe5CtnaOhwxNWf6uusv_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.37.0/24
Signature Algorithm: sha256WithRSAEncryption
59:84:de:f5:c5:01:59:ac:20:f2:c9:65:0d:44:df:32:20:39:
e9:40:f0:8f:8e:b9:e5:68:4a:81:55:53:79:07:ee:48:07:11:
b5:26:af:b9:1a:20:d9:69:73:d3:85:36:32:9f:a3:e7:7b:8a:
da:18:aa:43:97:ae:8b:f7:50:ef:84:7c:69:53:be:0c:c7:c2:
82:47:c6:0d:09:09:fb:fd:bb:50:0a:95:6b:f5:6e:66:22:1a:
48:c2:01:16:5e:d1:d7:65:e4:be:69:a9:ff:26:ae:a6:67:72:
00:3d:27:76:3a:e7:c5:91:bc:0e:30:a9:07:1d:22:67:a1:53:
4f:2d:11:75:d5:cd:94:88:d4:de:b2:9e:e6:83:74:da:10:98:
a0:6c:2f:b3:ce:36:3d:b6:eb:5f:2f:c7:a9:b5:0a:92:2a:0d:
93:cd:93:58:ce:87:8c:86:be:be:21:21:61:0d:b7:56:ba:be:
9d:eb:13:be:5b:9d:f4:fb:e3:c7:77:76:44:91:30:40:b1:12:
a6:09:f3:11:b3:64:fc:31:58:d1:dd:3b:f3:d5:53:8e:ea:88:
90:12:b1:f7:8c:1b:90:18:cb:d0:7c:35:76:4c:a8:ba:86:be:
5c:f6:7e:b1:d0:c2:aa:84:74:88:df:58:cd:da:07:d3:c6:2d:
b8:82:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org