Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/jM9_C3sdYiZqdMXFvH8VDQ1NAxs.roa
File: jM9_C3sdYiZqdMXFvH8VDQ1NAxs.roa (raw, json)
Hash identifier: v2I8pvTrGtoG6V2mzObhBminS6816qrrtMFf7xS74fc=
Subject key identifier: 8C:CF:7F:0B:7B:1D:62:26:6A:74:C5:C5:BC:7F:15:0D:0D:4D:03:1B
Certificate issuer: /CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Certificate serial: 018DB844056922A1755D735F65BB00B66FA8
Authority key identifier: D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/jM9_C3sdYiZqdMXFvH8VDQ1NAxs.roa
Signing time: Sat 17 Feb 2024 18:11:21 +0000
ROA not before: Sat 17 Feb 2024 18:11:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 46.36.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Mar 2024 05:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:44:05:69:22:a1:75:5d:73:5f:65:bb:00:b6:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d662dcc6fe3b81ef3de2fca3cfcedc11ebaa43
Validity
Not Before: Feb 17 18:11:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ccf7f0b7b1d62266a74c5c5bc7f150d0d4d031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3d:1e:56:f1:5c:6f:82:ab:6e:bb:39:85:1f:
87:47:1e:16:a4:f9:b7:11:ad:95:5b:39:4f:66:c5:
06:e1:01:22:18:ea:bb:d7:b7:90:12:ba:ba:7c:e3:
31:a5:fa:ee:f9:86:05:3f:65:77:4f:a3:37:e1:c9:
8f:b5:8f:7b:b8:c4:fb:07:c2:1a:b7:ff:69:17:51:
b2:7d:ad:4d:a3:12:88:f7:79:3d:c1:26:cb:c8:28:
76:49:77:2d:21:ad:4e:32:ca:a2:d8:46:ab:c1:50:
f7:cd:e6:99:93:da:ee:ab:0c:7b:f5:ea:53:91:2e:
1a:9f:b9:c1:31:27:95:65:4f:3c:1e:88:81:41:17:
6a:3e:b9:21:66:52:4d:3c:20:83:94:f4:29:f7:de:
60:4d:47:0e:d7:1a:df:8c:4e:d2:a5:c2:4a:35:41:
c3:a4:93:76:1c:0c:c6:f6:55:75:72:f0:25:ca:88:
5a:bd:ee:bd:ec:5f:c3:0a:dd:4d:06:5b:fb:32:7b:
65:df:e3:3b:54:0d:fc:b1:1a:ef:24:d1:a1:04:60:
fa:e7:36:d6:1d:1f:00:a3:73:f6:ed:fe:6e:c4:aa:
83:38:5e:ff:b5:ad:5f:3c:05:fd:a0:02:6f:70:aa:
50:e0:e6:98:bf:9d:80:aa:9b:3b:c6:1f:25:9e:13:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:7F:0B:7B:1D:62:26:6A:74:C5:C5:BC:7F:15:0D:0D:4D:03:1B
X509v3 Authority Key Identifier:
keyid:D8:D6:62:DC:C6:FE:3B:81:EF:3D:E2:FC:A3:CF:CE:DC:11:EB:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/jM9_C3sdYiZqdMXFvH8VDQ1NAxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88fff5-dfd9-4008-95b7-785e5883644d/1/2NZi3Mb-O4HvPeL8o8_O3BHrqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:9d:84:fb:0e:0a:6f:31:7a:f5:6f:b6:c1:38:e9:84:ce:7c:
cf:ab:01:8c:e6:f5:cf:f3:90:3d:f7:5b:c3:bc:18:29:54:2c:
c4:a7:22:8b:ab:42:31:4a:cf:31:fe:f9:7a:8f:07:77:53:14:
f3:89:d8:cd:47:24:60:c2:54:c8:02:bd:9e:a3:1a:63:85:0b:
b9:38:62:22:e4:b7:97:e3:de:77:83:e9:bc:f9:05:f7:5f:75:
10:b1:1f:7f:9a:52:d2:ed:c7:95:47:64:b9:8e:25:48:c1:63:
86:d0:0c:04:ef:96:42:52:58:23:98:0f:41:82:fa:d5:4c:d1:
b1:52:40:51:8d:a4:3a:b3:ef:ce:07:2d:d5:c4:12:9a:5a:01:
3b:ff:82:5c:23:ca:2c:9f:22:e9:44:97:77:e8:93:6d:1d:59:
6f:ee:97:4f:2b:47:85:00:20:00:29:46:ea:34:13:8d:c4:48:
f2:38:54:9a:d3:4c:ff:56:23:8b:19:28:06:2e:d4:ab:00:b3:
3c:e2:31:2a:e5:cd:df:bf:67:d8:b9:aa:e5:e6:6a:0f:5f:4f:
d4:86:a6:90:b9:b3:16:91:2f:74:46:98:0d:50:f7:22:08:57:
75:9d:d7:9e:84:99:92:ac:49:32:3b:f3:dd:f5:8e:62:3d:28:
cc:1e:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org