Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J9hVTA9sOurJOmmyu6Q9pNB3Z4U.roa
File: J9hVTA9sOurJOmmyu6Q9pNB3Z4U.roa (raw, json)
Hash identifier: 86+IEX+oVJG+DR016TRjSzvFSE4K0V/HPIFmvEwVX48=
Subject key identifier: 27:D8:55:4C:0F:6C:3A:EA:C9:3A:69:B2:BB:A4:3D:A4:D0:77:67:85
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E027462D16709EC6775716559B7F0
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J9hVTA9sOurJOmmyu6Q9pNB3Z4U.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 46.161.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 13:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:02:74:62:d1:67:09:ec:67:75:71:65:59:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27d8554c0f6c3aeac93a69b2bba43da4d0776785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:bc:d6:1b:57:45:c2:40:2c:4d:11:49:1e:
0e:e4:82:0a:fa:9c:13:ec:96:dd:f7:65:02:17:70:
37:de:21:3b:48:3e:d5:5e:f1:ef:06:de:ab:e3:a6:
58:0f:5e:fe:9b:88:65:ca:72:c4:5f:6d:51:7e:03:
56:97:97:5b:cd:ce:65:16:a2:f1:50:8a:29:a6:f0:
1a:c7:38:ef:10:17:1f:93:42:1a:6a:17:87:83:ad:
a1:e4:b0:a8:82:9e:60:28:d3:dd:c1:f2:b4:26:f8:
88:f0:63:fb:58:eb:39:e1:4a:62:78:31:4a:1d:ae:
2f:4c:92:57:bc:91:b9:bd:31:bd:03:26:9b:8d:b5:
5f:e0:d8:50:51:22:5d:f3:c9:ae:5b:55:33:a0:33:
41:ca:66:71:6c:20:5c:42:d6:b7:5d:0e:b5:5c:64:
a5:c8:4d:09:d5:7d:ad:6f:c9:1d:e2:5d:2c:45:ca:
64:0e:73:66:3e:c4:48:ab:7d:5f:ea:81:d5:26:c0:
c6:89:9b:3d:a9:45:50:1d:f8:e9:68:d9:fc:1c:f4:
3f:ad:6e:d6:0b:c6:79:86:0e:a3:e0:5f:b2:3f:bc:
77:e3:5e:5d:e6:53:3d:23:46:0a:3f:08:8e:06:c2:
dd:5e:25:78:a0:57:50:2e:5b:ac:d4:72:c7:6e:36:
fd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D8:55:4C:0F:6C:3A:EA:C9:3A:69:B2:BB:A4:3D:A4:D0:77:67:85
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/J9hVTA9sOurJOmmyu6Q9pNB3Z4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.161.11.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2f:86:82:e8:56:0c:8e:20:bb:df:90:5a:07:56:38:70:63:
c3:c3:fb:33:1e:88:6a:dd:f4:62:88:2d:66:9d:d8:c1:76:94:
3f:23:39:b8:43:d2:c5:be:61:62:41:5e:b7:22:b4:0c:10:a5:
f6:32:5f:48:92:ef:23:56:fe:5f:74:0b:86:d7:c7:45:d1:26:
3b:5a:07:10:5c:e4:2a:43:5c:71:a3:2f:22:04:34:da:4e:65:
9e:7c:55:9c:c7:86:8c:06:0e:c9:79:a8:5a:6d:61:81:a4:11:
87:a4:49:5b:39:e2:f7:7a:91:b7:64:70:0b:72:fe:31:ca:a1:
c3:90:4d:69:0e:75:14:42:37:09:64:11:8b:ad:b4:33:06:13:
6a:7d:f9:a1:24:88:50:99:1e:fe:f6:29:5f:5b:f4:3d:27:b7:
c5:26:0c:1a:ce:d7:63:d0:29:e1:fd:b1:84:52:fc:da:fb:89:
12:ea:cb:36:11:58:4a:d0:0f:6d:94:cb:26:e3:8b:30:17:55:
eb:16:14:8e:7f:15:16:e8:f6:0d:96:cb:54:64:ca:53:33:71:
ff:d2:0d:5b:8e:fd:af:c5:de:3a:18:48:5a:26:06:eb:23:72:
c7:18:0b:5a:01:14:e2:92:9f:c3:48:05:2a:1b:63:9c:34:ba:
33:ff:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:45 2024 by rpki-client on console-ams.rpki-client.org