Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7J1hHX-nd2EVWq-1UO7KXPJ37EA.roa
File: 7J1hHX-nd2EVWq-1UO7KXPJ37EA.roa (raw, json)
Hash identifier: urKTySyrZZp+5qIJOlGhXjAcBx28ubTUYVaFovTizP0=
Subject key identifier: EC:9D:61:1D:7F:A7:77:61:15:5A:AF:B5:50:EE:CA:5C:F2:77:EC:40
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 01856F14CF34C1BB3DB4E5F032824388261E
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7J1hHX-nd2EVWq-1UO7KXPJ37EA.roa
Signing time: Sun 01 Jan 2023 20:45:12 +0000
ROA not before: Sun 01 Jan 2023 20:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59580
IP address blocks: 147.78.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:cf:34:c1:bb:3d:b4:e5:f0:32:82:43:88:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 1 20:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9d611d7fa77761155aafb550eeca5cf277ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:9d:81:43:d8:7e:fd:20:01:3d:69:fb:c9:
72:63:34:9a:2e:b2:dc:e6:e9:ad:a8:f3:ee:c9:73:
61:d7:93:ff:55:a0:35:dd:3e:dc:d2:27:64:81:72:
79:0a:e9:f9:6c:8c:c1:a2:65:09:4d:4e:7d:82:5e:
8a:bf:8b:5f:62:b5:79:1b:8e:90:03:6f:8b:b3:80:
f1:e3:aa:5c:13:69:f8:41:52:76:cb:84:4c:73:f6:
7d:34:73:b0:3a:54:46:3e:d9:31:a5:ca:3e:2a:e7:
07:ab:7d:01:ea:70:f9:96:06:ef:33:2a:ca:90:0f:
9d:2e:26:93:79:bd:42:16:92:5f:b4:e3:5d:ba:20:
04:30:16:8c:11:8b:8f:06:6a:6b:80:da:3f:ce:00:
2a:45:2e:cc:aa:f8:ea:f7:40:e6:be:81:36:51:3e:
bc:04:52:4d:a8:4d:d2:19:8e:d1:04:67:0f:4d:88:
df:43:47:93:4e:20:e2:10:03:16:09:f9:d2:37:d1:
b9:90:a3:2f:06:24:09:fe:6e:e0:db:81:f3:c4:41:
60:b1:74:71:37:82:37:f6:6e:d0:74:67:4c:5b:25:
b0:89:c9:56:81:7f:ff:c1:89:a7:3e:d8:3d:c3:f6:
10:1b:a3:2f:b8:99:52:96:bb:dc:a8:ea:77:2c:b9:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:61:1D:7F:A7:77:61:15:5A:AF:B5:50:EE:CA:5C:F2:77:EC:40
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/7J1hHX-nd2EVWq-1UO7KXPJ37EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.46.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d1:8f:1d:03:65:2f:5b:c6:cb:2c:ee:61:6e:f7:f2:32:ed:
68:9c:cf:cc:71:41:74:56:7c:90:1c:38:2f:7a:90:4a:f5:7a:
f4:1b:45:b5:cf:45:53:3e:ff:9a:28:54:dd:78:0b:ea:6f:28:
3d:23:ef:67:48:7e:01:e6:a3:a3:62:b4:bc:69:10:0a:6a:29:
c5:ec:fa:5d:80:7b:30:11:b8:38:99:86:d2:65:98:1e:d6:e0:
fd:1f:cc:89:22:f3:06:5e:8c:d5:56:58:92:93:50:17:ff:07:
98:3c:da:10:6d:a3:ad:7a:57:15:e0:e2:eb:20:8f:76:48:b8:
d3:9e:97:69:37:76:5e:63:95:22:7b:9d:16:7e:15:bc:d3:e2:
bd:38:0b:7d:36:55:f4:1f:45:7d:b2:d7:59:68:d9:30:3f:5d:
4d:85:f0:bd:e4:d3:ba:8c:18:6d:6f:ce:73:76:ff:11:8f:4a:
3b:ec:ee:10:6f:c2:4c:56:01:9f:3d:45:5c:b0:3e:02:01:aa:
22:61:fe:96:9b:33:c7:c1:6c:70:c7:5f:56:33:c0:41:87:af:
e4:7d:39:bc:85:b3:d2:63:6b:91:e2:82:d5:f5:bb:22:96:78:
00:0c:c5:11:1a:70:75:82:50:c5:5d:58:4e:25:ec:31:ff:83:
b5:8c:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org