Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/JFnh7IYNkmf12RhQR_49m7nCd4M.roa
File: JFnh7IYNkmf12RhQR_49m7nCd4M.roa (raw, json)
Hash identifier: ik5FVeknLBSQbZhwdYAa5TjGjkLD1BdoOWEacDKFtYw=
Subject key identifier: 24:59:E1:EC:86:0D:92:67:F5:D9:18:50:47:FE:3D:9B:B9:C2:77:83
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF71F81D58BCCCA913481F6A8EB077
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/JFnh7IYNkmf12RhQR_49m7nCd4M.roa
Signing time: Sun 01 Jan 2023 15:24:46 +0000
ROA not before: Sun 01 Jan 2023 15:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196802
IP address blocks: 148.81.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:71:f8:1d:58:bc:cc:a9:13:48:1f:6a:8e:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2459e1ec860d9267f5d9185047fe3d9bb9c27783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:25:5c:52:27:63:c3:61:e0:05:b8:db:53:
76:bc:dc:cc:02:16:63:54:bb:80:58:c2:4a:22:3f:
35:0d:ab:00:ec:9c:f3:84:e5:df:eb:56:90:76:a2:
b3:74:7f:d4:e3:d9:48:3b:a2:d1:38:72:8b:77:2f:
56:fa:cb:3a:e6:4d:a3:3c:e9:d2:98:67:0f:e8:fd:
3d:0c:8d:5d:52:be:ba:e9:26:24:72:21:25:cd:84:
ae:6d:2d:19:aa:0b:8b:45:d4:17:ac:97:b3:c9:0e:
e8:30:d3:51:ae:29:81:9b:2b:15:76:74:db:52:8e:
ee:ca:e5:93:d5:5d:c9:7e:cb:ef:18:3e:bb:e0:d4:
ee:2b:af:f0:4d:ff:d8:f1:ec:e2:ce:b1:10:f8:c8:
c6:13:37:e4:b2:7a:74:a5:37:14:0a:9f:58:91:e6:
ec:47:a3:b9:71:b4:69:38:e8:bb:6a:aa:fa:31:0f:
9e:88:f2:50:29:cd:ce:d3:f4:ae:fc:eb:8d:71:4f:
7b:08:2e:d9:2a:92:65:d6:5d:3e:c2:15:58:91:bf:
6c:45:5f:bc:4c:c3:73:1c:ee:42:f6:fc:00:9c:84:
93:99:c7:32:54:bc:e6:a1:1f:9d:92:c3:5c:d1:81:
4d:ce:1e:f1:e6:f3:31:14:a8:dc:31:ac:cb:22:24:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:59:E1:EC:86:0D:92:67:F5:D9:18:50:47:FE:3D:9B:B9:C2:77:83
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/JFnh7IYNkmf12RhQR_49m7nCd4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
19:83:0d:8c:c0:d9:a7:d4:d5:e0:2f:9e:2a:bb:de:6b:60:22:
1e:d9:e9:22:47:b1:f4:33:39:05:dc:cf:85:fe:86:19:18:f7:
a5:25:5c:d3:66:75:5b:9b:6a:e9:f2:13:79:9c:4e:53:a0:b3:
5e:32:55:e1:60:1b:b8:15:26:5c:25:db:e1:cb:55:c0:94:3f:
6b:7b:d2:92:a2:84:01:cd:32:66:b0:06:20:b8:2e:84:88:ec:
fd:c0:9f:0a:06:d2:ee:ca:ce:57:30:6c:bc:23:30:ad:c4:ca:
27:fe:7f:d2:bf:bd:c3:94:f4:42:70:94:fb:54:3c:49:ca:1f:
ec:0f:39:7f:a3:41:62:15:97:58:68:25:7a:34:d9:f6:7d:9b:
9b:47:4d:3a:3c:2d:b0:58:e7:82:95:b7:e4:a7:2e:b9:5d:e5:
c7:d2:4d:6b:29:c9:ae:93:55:86:83:0b:b1:1c:a2:5e:86:ba:
16:66:52:02:49:3d:62:f6:ea:e7:63:8b:57:15:0a:72:54:c9:
db:33:05:6e:4f:f2:12:0c:04:ea:1b:00:30:a1:b2:71:4e:09:
72:06:cd:0f:fb:ea:84:cd:6e:ab:80:a7:f9:f7:32:c5:5c:c3:
c5:9b:15:4a:4b:c1:72:df:44:9d:58:06:1a:9b:f2:5c:f6:f2:
a3:9f:0c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org