Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SkoqkAEoALxQIhxz6dkriHnUjOw.roa
File: SkoqkAEoALxQIhxz6dkriHnUjOw.roa (raw, json)
Hash identifier: lZirprYgxxNeHCkPTAO7woI4W5KIzuL3o4BhSUZSq5g=
Subject key identifier: 4A:4A:2A:90:01:28:00:BC:50:22:1C:73:E9:D9:2B:88:79:D4:8C:EC
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018895B33E7C4E4DADC0778772322C2DFDE5
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SkoqkAEoALxQIhxz6dkriHnUjOw.roa
Signing time: Wed 07 Jun 2023 11:52:12 +0000
ROA not before: Wed 07 Jun 2023 11:52:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/23 maxlen: 24
46.228.128.0/24 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 07 Jun 2023 14:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:b3:3e:7c:4e:4d:ad:c0:77:87:72:32:2c:2d:fd:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 7 11:52:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4a2a90012800bc50221c73e9d92b8879d48cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:67:45:d6:02:d5:1c:95:4f:36:59:ab:10:
82:1c:5f:f2:5c:6e:37:62:5a:42:f2:1b:81:ed:87:
18:76:32:4d:61:7b:b3:4b:64:7a:3d:3c:ce:61:a1:
29:36:13:55:05:ea:3e:e8:eb:13:0b:4c:2a:28:ab:
05:ab:2d:29:74:43:dd:0c:2c:c0:72:82:c4:38:90:
b1:b2:93:cf:55:6e:dd:c2:77:e8:8a:e8:7c:92:4f:
f0:50:6b:7b:b2:af:d0:0a:06:83:9b:de:d8:53:e3:
f8:6b:76:a1:bd:e4:55:81:c5:3e:a1:03:bb:4b:c2:
f5:5b:b7:99:93:20:98:5c:25:e4:48:e8:8a:5b:09:
d0:cb:6d:24:e6:79:f5:48:8c:b2:0d:ca:06:71:3e:
b1:b8:42:2b:44:a9:9e:22:da:e8:90:47:69:b6:56:
d6:d3:e3:21:44:a9:06:69:b6:aa:4c:09:b9:6b:77:
3a:c0:3e:b4:1b:df:3c:a4:2f:82:5e:56:6c:a3:0e:
9a:ff:5a:7e:54:44:ee:f2:1b:a3:f8:8c:26:4e:6c:
07:bf:af:be:39:01:20:a3:3d:3a:9b:64:67:b0:1c:
dd:09:b2:6e:60:83:f9:51:fa:73:85:58:e2:5d:bc:
ed:0d:40:78:da:76:5a:2a:c4:0f:c9:ec:24:9d:45:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4A:2A:90:01:28:00:BC:50:22:1C:73:E9:D9:2B:88:79:D4:8C:EC
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/SkoqkAEoALxQIhxz6dkriHnUjOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:6f:47:d9:12:3e:87:e9:ce:f0:70:14:2b:16:dc:d3:2f:4e:
17:72:dd:15:ce:92:9a:76:4d:09:b3:b0:41:d1:df:08:b4:9d:
fa:a6:57:18:56:44:e7:dc:01:1c:91:8c:d6:94:d5:88:23:17:
54:bb:62:f6:1d:c6:00:a5:b6:fa:9d:ff:9d:d0:50:04:00:39:
3b:e7:da:37:b6:11:ec:37:9b:cd:94:f2:a7:f6:7b:43:a2:85:
d7:6f:5c:50:59:95:f0:93:8d:ed:14:20:ad:6e:a9:ef:2b:25:
0b:14:68:bb:3a:90:32:c2:5d:01:ed:db:cf:6f:9c:d2:5b:ae:
31:86:18:53:c4:af:78:e4:20:b8:4a:4f:aa:80:f0:e8:9d:8f:
bf:4b:03:e3:0f:30:c7:f2:22:31:75:5e:c6:b2:2f:f7:e5:d1:
20:9c:54:29:22:fd:35:c2:1a:7a:81:c0:ce:d9:48:f6:0b:bf:
66:8e:93:17:fb:a6:ce:c2:ea:6d:ba:2e:f3:66:f9:4c:4c:49:
b6:bf:b5:bd:cb:0b:54:d5:28:8b:fc:cc:a6:39:39:bf:80:70:
0f:b0:4f:d1:be:6f:f0:71:17:76:63:b5:5f:c7:e3:56:71:28:
07:5a:62:8c:60:39:06:61:a0:e5:bc:e2:97:50:68:88:d1:7e:
17:6c:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:17 2024 by rpki-client on console-ams.rpki-client.org