Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jyQK029bS6n22tp3jL2GTtRjkeg.roa
File: jyQK029bS6n22tp3jL2GTtRjkeg.roa (raw, json)
Hash identifier: nVHls+O5EZbQymFDOxD7XI4dKGexojPd5z6igiCnCNM=
Subject key identifier: 8F:24:0A:D3:6F:5B:4B:A9:F6:DA:DA:77:8C:BD:86:4E:D4:63:91:E8
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 0189EDA7B68677D8DE0FAA4DC5F38D52BF72
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jyQK029bS6n22tp3jL2GTtRjkeg.roa
Signing time: Sun 13 Aug 2023 06:48:58 +0000
ROA not before: Sun 13 Aug 2023 06:48:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 46.148.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 13:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:a7:b6:86:77:d8:de:0f:aa:4d:c5:f3:8d:52:bf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Aug 13 06:48:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f240ad36f5b4ba9f6dada778cbd864ed46391e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:81:af:8d:49:97:80:2f:e7:10:26:ef:fa:
1b:d5:e2:ff:36:5a:18:31:c8:ab:0d:ef:cd:bf:8f:
a4:1a:04:5d:34:76:5b:a0:1a:a6:6d:9b:80:20:09:
ce:c4:d5:13:60:d0:18:37:90:ea:47:46:09:29:c4:
fa:45:69:ca:11:3c:af:2e:da:7b:0b:ac:18:83:d8:
74:d6:ba:08:77:a6:fe:1a:87:6a:89:d2:57:c4:67:
c9:05:8e:b1:1b:6d:b9:65:55:64:33:e6:5b:8e:1a:
e5:3d:05:85:a3:b6:74:92:aa:f2:b6:a2:9a:57:a9:
27:16:74:05:61:ba:fb:37:22:54:5e:10:4c:31:15:
fb:0e:af:e3:7a:8f:94:35:50:d9:54:f0:16:3f:63:
1e:72:2c:6a:92:dd:ee:f5:ab:d2:0d:d1:18:dd:cb:
50:a4:a5:8f:03:98:c1:ca:0a:15:ff:4b:41:1d:c3:
5e:4b:21:a5:df:bb:f1:fc:64:b8:7e:86:fd:b1:35:
ef:51:68:18:1d:6e:a9:47:43:db:fa:33:5b:33:a7:
f1:88:3b:5d:d2:17:ac:a9:59:28:de:bf:c3:ae:79:
b8:f6:0b:d4:2b:9d:b1:f5:de:53:f8:e8:72:c6:b0:
1c:ac:73:41:55:da:01:d8:71:e0:b7:9c:a6:3d:cb:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:0A:D3:6F:5B:4B:A9:F6:DA:DA:77:8C:BD:86:4E:D4:63:91:E8
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jyQK029bS6n22tp3jL2GTtRjkeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:15:f3:9f:b1:cc:ff:98:28:7a:53:63:ae:c4:b9:eb:02:ff:
fe:44:89:29:8e:c7:9e:d7:cd:27:71:30:74:8c:fd:6d:5d:5a:
b0:fd:14:81:32:20:37:9b:c0:e6:7d:3c:4a:0c:79:4e:fd:d0:
5a:c4:99:36:b8:f5:82:80:c3:b0:51:a5:12:5a:77:60:15:3a:
af:d0:ff:53:c6:53:e0:8b:e6:5c:6b:bc:d9:fb:c3:b5:88:b3:
8f:70:68:d1:77:af:b3:9e:a7:a8:9a:64:57:94:35:b8:a3:cd:
03:d1:79:0f:81:95:b9:d7:ac:fc:1b:4f:c3:00:33:f9:23:1a:
94:97:d1:b5:eb:75:a0:5a:7e:73:d8:a1:3d:c9:c3:2d:5e:f6:
f2:5c:4c:3f:3f:25:a8:f5:2f:a5:18:1a:b3:67:0c:8d:36:75:
a1:41:a7:69:a3:78:f6:57:3d:f2:36:22:75:76:b6:27:26:87:
32:63:8a:2c:aa:91:2b:38:11:3b:60:40:c1:cc:a3:e9:c6:be:
56:57:62:40:97:17:6b:5c:f8:a8:e3:7a:3d:e2:b0:40:d6:8e:
6d:63:3b:43:81:50:2c:c1:62:96:d9:d4:96:d5:f6:89:dc:e4:
5e:8e:0c:aa:f4:59:ef:f9:73:ed:d1:16:80:0e:37:60:81:76:
7f:78:c7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org