Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jf2bbkxiv7iJGLwFSqqbzGAiGwM.roa
File: Jf2bbkxiv7iJGLwFSqqbzGAiGwM.roa (raw, json)
Hash identifier: qEom/0nV4Mso9d+sjvSx+O2vpncXNQVhpmG7JLgeRjk=
Subject key identifier: 25:FD:9B:6E:4C:62:BF:B8:89:18:BC:05:4A:AA:9B:CC:60:22:1B:03
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0185724703A45E01019DA7E9849FED9AF33A
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jf2bbkxiv7iJGLwFSqqbzGAiGwM.roa
Signing time: Mon 02 Jan 2023 11:38:54 +0000
ROA not before: Mon 02 Jan 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 37.139.48.0/24 maxlen: 24
46.161.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:03:a4:5e:01:01:9d:a7:e9:84:9f:ed:9a:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25fd9b6e4c62bfb88918bc054aaa9bcc60221b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:c0:c6:8e:6c:31:17:0f:ab:96:27:f8:6a:
a3:cf:3b:d8:2b:32:d9:bb:08:5c:47:c7:fe:82:c6:
e6:c7:a5:8a:85:49:94:15:b5:5a:ba:36:64:65:77:
4d:42:59:46:2d:c2:7e:92:ef:5a:79:25:86:cd:4d:
20:5e:22:e5:fe:b0:fe:81:c1:70:ec:fd:ed:e8:b8:
d3:77:3c:a5:a8:69:06:cf:72:4b:24:77:c4:cf:84:
98:44:6e:7d:d7:b6:98:f9:ae:21:d6:8f:be:c1:fc:
27:35:fb:07:e3:99:b2:a5:68:02:d0:f7:ba:90:2b:
e7:bd:f5:4f:84:83:75:08:0f:2d:c6:bd:43:46:cd:
ce:fd:62:70:26:10:56:73:7b:c8:63:7e:2f:83:69:
e3:94:0c:ef:e1:2d:b3:03:50:dc:3e:3a:7a:0f:10:
6f:b7:11:b1:cc:86:ed:37:df:26:5f:8a:88:46:72:
24:d9:ba:d9:e0:29:02:79:c6:b6:71:06:d7:4e:37:
75:25:fd:c2:a1:fa:ba:94:3f:ee:79:c2:4b:25:da:
55:06:70:09:2b:b1:9d:49:dc:0c:a9:5e:46:36:f0:
8d:36:6d:b9:4d:1e:e1:9e:78:3f:9e:ba:a7:1c:a0:
8a:bd:e6:5c:8d:9a:a3:02:56:2d:4d:83:b5:bf:16:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FD:9B:6E:4C:62:BF:B8:89:18:BC:05:4A:AA:9B:CC:60:22:1B:03
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Jf2bbkxiv7iJGLwFSqqbzGAiGwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.48.0/24
46.161.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c1:de:dc:87:12:69:6a:64:5f:d3:ab:74:c5:e8:18:1a:da:
91:09:7a:be:77:b7:ea:d7:cd:5c:52:c3:17:3a:e5:9e:9a:7a:
56:ae:bd:67:8d:56:72:28:8d:d7:dc:d8:22:ea:53:4b:78:3d:
2f:57:37:2d:50:c5:2e:94:5e:23:11:72:df:33:1c:13:25:1c:
4d:04:8c:cf:6f:41:84:6b:14:85:2e:bd:b0:c5:bb:53:fc:f6:
7c:31:8f:d1:66:1c:31:05:a2:6a:1e:c3:c7:ef:e1:b0:ee:66:
e9:4e:74:55:4b:32:77:ae:18:d0:d2:5b:27:62:5a:d4:f4:eb:
bb:e3:3c:e5:55:59:0d:aa:9e:99:13:d4:9a:3a:29:ba:61:47:
85:9e:34:63:79:97:fb:16:3a:48:e3:1d:57:07:62:7d:75:aa:
33:17:7e:a4:32:45:94:73:06:f7:76:5f:01:78:bb:04:1e:98:
81:7a:4e:e6:f4:60:43:ca:10:87:6b:6b:4d:1e:c8:78:66:fa:
fa:48:52:74:e0:36:80:cd:68:d9:1a:5b:08:2f:39:1c:17:9d:
86:f7:a7:6f:af:ff:8c:3b:6b:67:dc:cb:e1:2c:b9:aa:ab:04:
75:8f:40:eb:c7:9d:1b:e9:37:91:dc:eb:bf:b9:01:09:4b:ce:
d7:bb:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org