Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/NMMJ6QuRQsVE2txdtHfvh_7_ffk.roa
File: NMMJ6QuRQsVE2txdtHfvh_7_ffk.roa (raw, json)
Hash identifier: Cz9Tqf7gVK1Ez5UDXx2q/wm/oykJR1XeiL04PWrnarQ=
Subject key identifier: 34:C3:09:E9:0B:91:42:C5:44:DA:DC:5D:B4:77:EF:87:FE:FF:7D:F9
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01856ECB68D69D4415508117F1A021D2F2D0
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/NMMJ6QuRQsVE2txdtHfvh_7_ffk.roa
Signing time: Sun 01 Jan 2023 19:25:02 +0000
ROA not before: Sun 01 Jan 2023 19:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 46.148.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:68:d6:9d:44:15:50:81:17:f1:a0:21:d2:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 19:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c309e90b9142c544dadc5db477ef87feff7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:8f:08:db:fc:b4:d1:4a:17:b6:84:fb:41:
34:f4:8c:7f:b5:25:86:32:14:ca:ba:61:04:c1:ba:
4b:ad:f9:04:cd:16:3b:6f:09:ba:8e:ed:ea:6f:e1:
e9:f1:9c:2d:ed:b7:e7:11:89:cf:4d:32:f8:0c:21:
da:9c:96:40:75:6c:e5:20:f8:08:ea:48:4e:28:26:
c9:fe:d3:06:f0:73:06:b8:96:dd:69:76:a9:24:b3:
d7:34:a4:34:dd:3d:9a:93:bc:3e:0a:d2:94:0e:01:
2f:56:14:ab:40:e6:12:4f:4b:68:4e:84:5e:1c:9d:
af:e4:2c:c4:59:c3:28:f4:ae:7e:54:47:53:50:77:
05:c1:84:48:72:54:76:d4:3b:b7:c4:b5:64:b3:ea:
8d:3c:16:e3:54:c5:b4:82:60:76:c7:c5:37:f0:cd:
53:62:6d:48:6c:c9:aa:20:14:46:0d:a2:de:11:fd:
af:57:22:b5:a2:22:ea:30:71:33:80:67:11:b0:8d:
29:67:91:9d:c3:b8:15:29:8c:56:97:1a:85:86:9c:
6d:0c:91:a4:f2:6a:ca:31:98:d3:1e:aa:35:f1:c3:
7d:cb:e0:7a:64:97:45:6f:ea:3c:77:95:66:f0:e2:
c3:5f:95:7f:6c:ed:86:49:15:ee:a8:a9:fc:46:d5:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:09:E9:0B:91:42:C5:44:DA:DC:5D:B4:77:EF:87:FE:FF:7D:F9
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/NMMJ6QuRQsVE2txdtHfvh_7_ffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.39.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:39:7b:d6:f0:5a:62:ed:76:3a:04:c4:ce:33:84:75:49:55:
a3:1b:9d:d9:b9:a0:38:ba:e2:a9:a6:77:53:6e:bc:8a:cb:b0:
37:15:35:f3:af:90:6c:4b:1e:52:92:21:c0:f5:98:c9:98:13:
43:67:22:d8:64:02:7d:3f:45:e4:83:40:08:f3:a9:e6:21:c1:
d8:1b:83:c7:ee:d0:30:e2:8e:0d:a2:08:41:85:79:9f:10:f7:
9f:2d:dc:38:dd:91:d3:88:b2:15:03:f1:04:1d:ea:bf:2a:f7:
5c:b3:89:58:f8:5a:6e:a7:a3:3b:97:cb:ab:86:87:43:d0:fb:
b3:63:4e:06:e8:bc:71:62:14:74:69:b1:5f:a9:0a:25:bc:31:
87:2b:3d:27:e5:10:c1:cb:25:98:cd:bf:41:44:29:3a:24:bf:
5e:90:4c:d7:ed:93:4f:87:86:b7:86:c5:4f:2f:a3:05:c6:62:
e3:42:9e:fc:fd:4f:44:fb:8b:03:0c:f1:29:d6:de:f8:c5:b1:
22:22:1e:a2:c6:82:fb:94:f0:4e:20:b1:a5:51:32:31:f2:91:
c3:97:53:69:3f:14:c6:b2:12:9f:48:1a:8e:9f:6d:d8:92:8b:
7b:5c:e2:4a:42:96:e3:23:cd:6d:ab:de:69:33:49:2e:89:e2:
e0:8e:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:21 2024 by rpki-client on console-fra.rpki-client.org