Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/JhnHQZ29QAtiDdyFOCahzIsv0oI.roa
File: JhnHQZ29QAtiDdyFOCahzIsv0oI.roa (raw, json)
Hash identifier: zsByg2TSh9YY3wjiusWsMt/jgEld6fv+3MmQPeLicSY=
Subject key identifier: 26:19:C7:41:9D:BD:40:0B:62:0D:DC:85:38:26:A1:CC:8B:2F:D2:82
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C776ED72D4614150B6904C3533D05
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/JhnHQZ29QAtiDdyFOCahzIsv0oI.roa
Signing time: Mon 02 Jan 2023 12:54:46 +0000
ROA not before: Mon 02 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61242
IP address blocks: 46.22.161.0/24 maxlen: 24
46.22.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:77:6e:d7:2d:46:14:15:0b:69:04:c3:53:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2619c7419dbd400b620ddc853826a1cc8b2fd282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:10:e2:98:ff:19:fd:83:c8:96:fb:15:1a:
b8:71:82:78:c4:10:05:d1:31:f8:9e:80:00:bb:bb:
07:9d:11:55:e8:05:b3:fa:77:94:72:ff:b4:a7:73:
fa:70:e4:5e:54:b0:73:56:1c:b5:96:82:5f:e9:45:
08:49:bb:1e:3e:a1:38:1f:ea:88:20:f6:36:0b:0b:
7d:61:ba:af:ab:b0:a0:76:b5:49:0d:b8:cc:a8:c3:
da:97:fa:0b:86:dc:9d:54:28:f6:29:b3:c5:c8:a3:
30:7d:58:3c:9c:98:4a:3a:ec:8f:6c:c5:bf:03:71:
a4:39:81:a6:61:a2:45:e0:a6:3e:65:de:ea:47:82:
81:9b:d7:a9:8d:aa:90:f2:b4:59:3d:ee:f1:a2:c4:
7a:c7:15:b2:1a:9e:42:d9:64:81:ea:f8:5d:a1:0f:
b5:55:a7:44:a7:8b:dc:71:7d:45:6f:d6:97:88:e2:
55:9c:e6:5b:ac:3b:0a:b3:84:54:a8:d1:49:d7:01:
6c:88:3b:3b:b6:bd:49:5d:85:6d:b6:7c:cd:36:31:
41:b8:0a:5d:13:f9:54:d4:3d:29:60:1b:5e:ed:d8:
9d:83:6c:38:a6:86:dd:5d:fc:00:89:90:c6:f7:75:
df:cd:b2:44:30:bb:1b:da:84:17:e1:6c:24:32:81:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:C7:41:9D:BD:40:0B:62:0D:DC:85:38:26:A1:CC:8B:2F:D2:82
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/JhnHQZ29QAtiDdyFOCahzIsv0oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.161.0/24
46.22.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:07:a3:a2:f0:f2:1f:1d:e8:be:8e:01:8c:c8:26:c1:9f:0a:
87:4c:8f:2e:04:6d:c0:68:30:97:19:a5:94:18:c7:b4:84:dd:
3b:d9:51:88:9e:cb:24:75:6b:c5:f6:33:91:1d:e3:1d:4c:04:
f0:f9:3d:39:c2:e3:24:52:09:6a:5a:2e:cc:a0:b6:d2:d5:98:
d8:38:3a:29:3d:1e:e7:cb:7f:42:66:6b:4d:6b:4f:15:88:1f:
d5:d2:73:38:23:31:d8:d6:07:01:6a:ea:83:bc:2b:84:fe:3c:
db:38:c6:dc:10:4c:57:4b:0e:ef:b7:73:bb:36:84:fa:e7:f7:
92:bc:c9:d9:98:04:e1:c0:04:30:43:c7:01:2e:22:14:c3:57:
01:0f:14:57:2a:6e:18:93:47:96:ed:b5:6c:1b:55:4e:f1:da:
8e:5a:35:e0:80:31:5e:e2:4e:ef:3d:28:c9:dc:8f:b1:04:fc:
e4:8c:b8:f5:6d:2a:d7:aa:c3:3a:7b:05:ac:6d:3f:d4:e9:14:
4d:b2:94:f8:c1:01:17:af:3b:f8:3b:ee:fa:f2:18:a4:85:a9:
0c:ec:5b:61:53:d6:91:3f:7b:bd:4a:73:16:bf:2f:a6:07:4d:
e5:c4:f3:25:c6:fa:17:48:e6:59:27:97:d3:9e:b7:51:6a:4d:
8c:20:4d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:47 2024 by rpki-client on console-ams.rpki-client.org