Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JjvBWFWOsdMtcG3osyUTTcADdjs.roa
File: JjvBWFWOsdMtcG3osyUTTcADdjs.roa (raw, json)
Hash identifier: FbocF+NmoDS4kt0t4sUNV1oJH7JByStBN4xQONhcvOU=
Subject key identifier: 26:3B:C1:58:55:8E:B1:D3:2D:70:6D:E8:B3:25:13:4D:C0:03:76:3B
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 018D5A7083CCFC24E463054AB7CE69E07DEB
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JjvBWFWOsdMtcG3osyUTTcADdjs.roa
Signing time: Tue 30 Jan 2024 12:55:39 +0000
ROA not before: Tue 30 Jan 2024 12:55:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215620
IP address blocks: 46.34.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:70:83:cc:fc:24:e4:63:05:4a:b7:ce:69:e0:7d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jan 30 12:55:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=263bc158558eb1d32d706de8b325134dc003763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:72:a1:14:1a:81:6c:fe:b3:b8:77:58:45:
e2:4b:56:c5:5c:dd:43:41:6f:16:3a:0d:e3:01:84:
26:6c:fc:2a:e1:cd:f4:6b:1d:0a:5e:11:c5:f6:f6:
dc:1a:1f:a0:94:84:ce:b8:fa:ff:a2:bf:dc:62:ee:
6e:4b:f6:54:57:a0:30:e1:db:e0:88:a5:5a:15:e6:
ee:59:a3:0c:29:83:2c:84:c8:7e:f0:44:95:73:25:
2a:ed:a1:9b:52:fe:51:23:2a:0a:05:ea:87:62:23:
bd:f3:52:5f:b9:71:72:ae:11:f4:7b:e1:ae:60:28:
44:61:12:02:81:3a:47:b5:d2:c1:7f:33:4a:bc:53:
f1:b8:c9:13:34:07:5b:45:cd:08:42:ea:5b:58:c4:
7b:bc:ac:f5:83:a8:8c:e3:ec:40:ad:99:e9:1d:45:
80:4b:29:b3:d4:e5:10:c0:31:ed:12:cd:a5:70:d2:
22:e0:a3:c5:40:64:7c:b5:e9:9e:6e:a8:60:2e:2e:
de:c4:4d:3b:fe:b8:b7:44:48:f4:10:33:7e:40:6a:
80:38:43:00:43:9f:8f:a3:5d:bc:ca:06:cc:48:88:
04:6a:e1:13:e4:3b:e6:8c:d5:d6:75:b6:f3:c0:f4:
54:db:b5:d2:43:80:ea:32:9b:b8:46:b4:50:61:e5:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:C1:58:55:8E:B1:D3:2D:70:6D:E8:B3:25:13:4D:C0:03:76:3B
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JjvBWFWOsdMtcG3osyUTTcADdjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.41.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b2:9e:5f:30:3e:1e:fb:5c:b4:be:15:5b:8e:33:db:d4:57:
24:f3:1d:ee:f5:25:f8:1f:ba:23:49:ef:5c:cb:ed:28:18:2b:
a1:c2:c9:73:16:83:29:e0:7d:ee:00:fe:4e:bb:63:ad:e1:d3:
15:47:70:fd:df:7b:17:02:7c:26:01:b0:04:f7:7b:0d:00:b6:
f4:12:8e:1a:ce:d8:d1:7a:11:59:29:6a:8f:f1:fc:be:22:a8:
17:1c:b8:02:4f:dd:e6:75:b3:d0:a5:b1:5c:cb:d1:44:65:50:
92:54:d4:76:0f:04:1c:63:5e:97:3a:51:85:4d:d9:47:b3:92:
e8:a8:f9:7f:a5:90:4a:a6:fd:5e:23:37:12:cb:3d:ac:32:3c:
1e:03:a6:c4:54:10:22:6d:82:37:60:da:81:30:45:9c:fe:3e:
2e:4e:56:af:df:e5:90:6c:c0:c6:7e:71:2c:0c:92:ef:7b:5c:
8f:3f:f9:e2:83:bc:f1:46:1d:48:36:48:71:13:d8:46:c4:5b:
11:ae:55:ba:2e:49:8f:fb:84:04:cf:55:15:f8:62:a9:14:98:
2a:58:2a:e3:72:f0:e1:f7:77:f7:20:06:e4:bd:79:19:6d:d2:
82:f3:e6:12:48:8c:1f:4d:aa:e7:87:88:ba:9c:e9:e6:cf:5d:
d7:d2:12:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:02 2024 by rpki-client on console-fra.rpki-client.org