Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/JVJN_DZGBud0WC-tlRYysH42998.roa
File: JVJN_DZGBud0WC-tlRYysH42998.roa (raw, json)
Hash identifier: eJVyM+sPedd2sAx9XrdKWq0vAiByWO1AWg+wviczf7g=
Subject key identifier: 25:52:4D:FC:36:46:06:E7:74:58:2F:AD:95:16:32:B0:7E:36:F7:DF
Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Certificate serial: 0185730C9FA3AF2EB1672965BEAEBFCF2EE5
Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/JVJN_DZGBud0WC-tlRYysH42998.roa
Signing time: Mon 02 Jan 2023 15:14:45 +0000
ROA not before: Mon 02 Jan 2023 15:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211882
IP address blocks: 46.231.240.0/23 maxlen: 24
2a0c:e303::/32 maxlen: 32
2a0c:e300:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:9f:a3:af:2e:b1:67:29:65:be:ae:bf:cf:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461
Validity
Not Before: Jan 2 15:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25524dfc364606e774582fad951632b07e36f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fc:df:dd:81:91:57:f6:b6:ac:11:dc:ee:0c:
7e:7d:2c:76:ae:82:f2:5b:66:33:9d:88:6c:44:97:
63:ea:34:c8:d2:3f:b9:33:a2:5a:63:b1:bd:19:9e:
2f:85:c9:29:48:d2:c0:1c:24:d4:f3:80:1a:c2:c0:
c0:ee:99:b0:60:96:16:8d:08:27:42:f2:fd:c0:92:
48:05:6e:d6:fd:d3:43:e9:c5:0c:95:70:5a:de:86:
cc:20:96:b6:c2:e6:7a:4d:b7:99:bc:3c:ec:8b:60:
f8:a7:91:a2:b5:78:fc:5a:e6:01:b6:e4:16:be:1e:
91:3f:a2:14:5d:20:a8:b3:44:85:1f:eb:5e:b0:65:
88:55:0b:69:ca:89:d6:34:16:7d:6e:eb:bb:b2:2b:
51:b2:2f:7a:6e:07:e4:a7:08:29:b8:e4:48:46:cd:
97:ae:9c:0b:2f:66:0e:04:1c:c3:40:31:52:2f:36:
f3:b9:6d:7a:61:11:b1:35:d5:7c:0a:ac:ba:04:7c:
2a:cc:ff:b9:1b:75:1d:80:e4:3b:6c:9d:76:df:0f:
de:fc:38:2a:f1:e6:ce:1e:0a:aa:fa:a4:9a:18:dd:
0e:34:e2:0f:7b:af:dd:06:35:2e:de:a7:2a:bc:6f:
7f:48:d8:90:e0:3b:73:29:0a:71:97:a2:30:47:20:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:52:4D:FC:36:46:06:E7:74:58:2F:AD:95:16:32:B0:7E:36:F7:DF
X509v3 Authority Key Identifier:
keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/JVJN_DZGBud0WC-tlRYysH42998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.240.0/23
IPv6:
2a0c:e300:12::/48
2a0c:e303::/32
Signature Algorithm: sha256WithRSAEncryption
8c:21:48:a9:64:87:ae:9a:89:a3:86:c0:e5:f7:ba:92:21:1f:
9e:60:c7:58:d2:8c:da:ca:46:a7:75:f7:b0:1b:84:f4:9c:53:
0b:6a:73:c3:59:8f:6b:65:e4:b1:ae:3e:9c:e1:dc:b4:51:6a:
41:ca:f5:c0:34:8c:2b:c4:2b:2d:3d:18:c8:73:9a:4e:03:24:
a5:55:a6:47:3b:d2:a7:c2:ca:3f:33:ea:a2:d7:02:2c:f2:d7:
c1:4e:e9:a5:93:f2:87:26:0d:0d:5b:08:3b:2d:85:82:61:4e:
0b:08:7d:db:00:af:1e:75:ef:05:ba:99:29:5d:53:0e:0d:c7:
a7:18:d3:38:2b:7e:4d:7b:4f:bc:10:8c:7d:58:ba:ee:bd:78:
a3:e1:44:f4:44:8f:38:60:eb:ac:c0:fc:26:53:31:4a:6e:b2:
fd:4d:9c:08:34:ba:30:5d:f5:92:d6:bc:c1:a0:fe:bc:17:29:
cf:8a:dd:32:ff:51:d4:3b:64:86:ae:ee:65:d3:f7:af:1f:cc:
68:84:0e:5e:af:fc:7a:b6:06:7e:0f:d7:76:1a:5d:15:91:2f:
7f:c3:1c:18:82:03:6a:57:ae:df:f7:6f:39:fc:37:8b:03:5e:
93:2e:1f:4b:aa:d8:5d:cb:cc:c4:71:28:04:54:bd:79:e2:81:
ae:40:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:09 2024 by rpki-client on console-ams.rpki-client.org