Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/jjzimVVwHGqUxalIp3skUNWyjC8.roa
File: jjzimVVwHGqUxalIp3skUNWyjC8.roa (raw, json)
Hash identifier: wshBYykxKYNmmoH1IhYUlAzxANb9t7UlBTIcteMDWt4=
Subject key identifier: 8E:3C:E2:99:55:70:1C:6A:94:C5:A9:48:A7:7B:24:50:D5:B2:8C:2F
Certificate issuer: /CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Certificate serial: 0186BC0CCB4F70447B704816A7F50EF82FD0
Authority key identifier: 2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/jjzimVVwHGqUxalIp3skUNWyjC8.roa
Signing time: Tue 07 Mar 2023 12:30:00 +0000
ROA not before: Tue 07 Mar 2023 12:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 185.46.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:0c:cb:4f:70:44:7b:70:48:16:a7:f5:0e:f8:2f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Validity
Not Before: Mar 7 12:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e3ce29955701c6a94c5a948a77b2450d5b28c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:b2:67:4f:0d:ac:1c:a9:37:3e:43:ff:9f:
09:02:22:a0:c2:e5:1c:18:06:3b:d8:1e:f9:47:33:
50:19:aa:c3:bc:96:b3:c1:36:11:f8:84:ca:c5:ec:
4c:a4:1c:69:09:01:79:4a:15:02:8d:84:f3:f7:69:
0d:6d:f7:dd:8d:01:7b:b2:64:11:84:5c:fb:3e:0e:
9d:ff:d7:b2:c3:a6:94:f7:6b:18:4b:09:d8:7f:96:
79:c3:c5:d9:dc:41:fb:55:2d:92:d7:49:83:6a:71:
0a:0f:c4:6e:5e:30:82:6e:31:10:09:5f:c3:47:c6:
44:b5:8f:30:95:57:3c:81:fd:bf:91:7b:4f:92:4b:
a7:24:ce:f7:f9:e9:7f:fb:be:d7:aa:0c:3e:11:fb:
7b:fd:2e:64:c1:a2:cd:fa:d0:c3:ab:31:e4:27:b7:
cd:ba:3f:a8:fb:61:7f:91:03:5d:27:c7:ff:4e:c2:
23:ff:57:dd:a1:d1:d9:79:fb:ef:f6:f5:c8:6d:e4:
8b:40:74:c2:1d:75:12:30:28:8f:d7:27:a2:e3:c8:
37:98:cb:6a:41:8a:23:bf:9d:11:53:be:e9:fb:2e:
27:8c:8e:a9:d0:90:8e:9e:35:ad:ae:56:47:85:58:
9f:1f:ac:a4:2c:55:40:16:19:76:51:9c:87:4b:b4:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3C:E2:99:55:70:1C:6A:94:C5:A9:48:A7:7B:24:50:D5:B2:8C:2F
X509v3 Authority Key Identifier:
keyid:2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/jjzimVVwHGqUxalIp3skUNWyjC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.70.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f5:17:19:49:bd:2d:a9:e4:37:81:06:89:a7:87:49:e1:db:
c2:6e:fd:18:7f:0d:b8:a8:34:5d:cd:7b:9d:07:32:97:ba:2a:
a8:af:25:36:62:54:37:59:10:a7:67:4e:43:39:46:b0:b7:01:
a2:00:6f:30:5e:75:d5:e8:d3:5a:51:03:9e:1c:67:d1:63:5e:
a4:24:3c:af:bb:2b:d0:ec:74:e1:6f:fb:2c:fd:7e:4d:0a:34:
d1:36:e0:86:b1:7d:45:01:51:0c:24:93:c5:13:b1:1a:33:1d:
43:17:52:c7:b7:b3:05:e6:b3:73:67:33:1e:e4:09:48:cb:a5:
5f:48:83:d0:a5:e6:cf:80:21:6c:eb:62:ee:a8:da:2d:b5:c8:
f7:d1:6f:f8:4b:b4:56:89:a6:0c:09:60:02:3d:be:cd:a2:22:
6f:dc:ee:f9:ed:5a:af:f7:0d:1d:67:0c:05:6e:fc:69:2f:55:
09:a4:f2:62:ca:ec:e6:c3:2a:66:e1:51:9f:90:fa:89:39:28:
de:ca:84:1d:d0:05:64:e0:47:4a:95:7a:54:f6:b2:74:d9:96:
40:9a:45:46:61:60:7b:5f:f8:7e:c9:4a:67:98:71:a4:1b:83:
63:f2:8c:fb:5a:fc:b2:72:67:4e:ca:41:d0:33:f7:76:a2:01:
b7:fb:5f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:20 2024 by rpki-client on console-fra.rpki-client.org