Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Jt4yWLiqAl23BunLw9YYRkicGfI.roa
File: Jt4yWLiqAl23BunLw9YYRkicGfI.roa (raw, json)
Hash identifier: 679i+FJhVxYxdWKRX8PRbrCHYM5ezWlZRvDQvsNuSaA=
Subject key identifier: 26:DE:32:58:B8:AA:02:5D:B7:06:E9:CB:C3:D6:18:46:48:9C:19:F2
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 018978529CD173F0D535E85B203585C31FF0
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Jt4yWLiqAl23BunLw9YYRkicGfI.roa
Signing time: Fri 21 Jul 2023 12:00:27 +0000
ROA not before: Fri 21 Jul 2023 12:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12389
IP address blocks: 46.243.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:52:9c:d1:73:f0:d5:35:e8:5b:20:35:85:c3:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jul 21 12:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26de3258b8aa025db706e9cbc3d61846489c19f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:86:e8:4f:81:3c:33:2a:11:b9:18:77:8a:
1f:1d:3e:0d:94:09:d3:3f:84:4e:d8:fe:df:2a:04:
9b:69:64:ff:44:2b:ae:82:f8:81:55:7d:d3:8e:fd:
72:20:08:4c:fd:15:27:c2:78:35:b4:68:d9:c7:cf:
f7:64:8a:44:90:d3:ec:94:30:c6:23:27:12:c2:f0:
de:9e:53:e2:46:c7:71:a0:4b:59:ac:3f:8f:3d:84:
4e:61:0c:60:e8:e3:0a:ea:b2:05:77:8d:5b:63:db:
a7:23:fe:05:d3:77:9a:32:2f:fb:06:a4:5b:25:54:
71:7a:51:fd:40:8e:50:ee:94:7e:8e:0c:ee:43:59:
7d:bc:d4:9f:33:64:3e:02:23:c7:da:fb:e1:0c:a1:
64:8e:a4:b2:c8:d6:c8:ad:4a:85:54:a7:8f:08:9e:
99:0b:60:19:c0:2c:21:da:da:39:f4:ce:9a:03:74:
7c:5d:99:54:71:c2:e7:be:3f:c5:d7:ad:c1:68:f6:
60:0f:06:84:9f:35:29:fd:1c:cd:af:bb:78:e3:36:
64:eb:e0:96:a4:34:e1:0a:f3:c0:0a:25:d5:a3:35:
08:67:8a:1e:38:8b:f2:cb:c8:0b:a9:78:f9:4e:16:
01:1c:24:2b:cc:2f:f4:7d:3d:e1:f9:ad:11:b1:b1:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DE:32:58:B8:AA:02:5D:B7:06:E9:CB:C3:D6:18:46:48:9C:19:F2
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Jt4yWLiqAl23BunLw9YYRkicGfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ff:8c:ee:b4:66:6b:9b:8f:a2:57:00:51:dd:60:bc:b5:f7:
86:95:75:d9:74:e3:06:44:6f:0b:ef:f0:a2:d0:a2:3c:d4:7e:
9d:a1:d3:cb:83:fb:38:c8:73:f0:25:33:9e:e3:7f:0a:a7:0c:
f7:47:33:13:93:24:2d:a2:18:c3:19:48:b5:fa:82:d1:9d:16:
72:8d:56:54:0a:fb:83:ea:76:da:23:a5:a3:83:64:a6:a5:c9:
9a:e1:5f:e9:a6:3e:66:4d:27:76:6e:26:81:50:85:6d:fa:3e:
7d:7b:1e:26:49:f4:de:e7:6e:ed:87:46:ef:32:d6:06:ae:db:
ae:15:86:a7:9f:4a:51:14:70:0a:85:a3:7a:11:a7:5c:76:c2:
dc:4e:c7:fb:3d:e8:85:0e:2e:4b:71:72:42:aa:8c:0c:35:4d:
54:2f:c7:fe:e0:59:c7:a3:a3:d9:ee:d0:59:c4:8c:ec:e0:32:
a1:7f:3b:34:d5:a0:54:39:36:07:a5:d5:bb:29:ac:e6:05:69:
b5:16:87:8a:70:c5:59:c9:a7:7d:b1:20:be:7e:16:11:42:0b:
be:3f:ab:0a:b6:78:e1:9a:18:b7:c2:d2:28:63:a9:fa:9c:bf:
4e:69:16:30:c3:a7:11:b1:c4:bf:57:e6:66:9b:d4:1d:02:d4:
ee:14:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 16:42:51 2023 by rpki-client on console-fra.rpki-client.org