Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/JmMwi-Ps_7kU_WRhN3Q9skwKNFg.roa
File: JmMwi-Ps_7kU_WRhN3Q9skwKNFg.roa (raw, json)
Hash identifier: VTQuwIKtMCOwM/ZVGYGZYgaTzBnYIKx10W5jos/Q8cs=
Subject key identifier: 26:63:30:8B:E3:EC:FF:B9:14:FD:64:61:37:74:3D:B2:4C:0A:34:58
Certificate issuer: /CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Certificate serial: 0186B89DE47E34901388E9343DE452E48235
Authority key identifier: 1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/JmMwi-Ps_7kU_WRhN3Q9skwKNFg.roa
Signing time: Mon 06 Mar 2023 20:30:00 +0000
ROA not before: Mon 06 Mar 2023 20:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 212.46.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:9d:e4:7e:34:90:13:88:e9:34:3d:e4:52:e4:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2fbb037b2d98c474b62a60ec88da0cd2e37c61
Validity
Not Before: Mar 6 20:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2663308be3ecffb914fd646137743db24c0a3458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:59:43:ef:99:e6:34:9a:30:69:91:2d:a9:f1:
af:aa:e7:6d:4f:66:1b:99:f0:a8:ba:dc:11:e2:c4:
c7:8b:6b:d9:eb:e8:f6:27:f0:f6:c3:3c:13:0e:38:
b1:c6:89:68:e8:29:5c:8d:c4:b2:45:9e:f2:7b:29:
17:56:99:e8:7d:9b:bf:32:1e:58:9c:e5:91:2a:55:
cf:38:38:42:1a:fd:07:7e:85:4b:f6:39:ea:b7:af:
6b:a8:dd:cd:da:48:0a:d6:2a:34:56:62:8e:e1:b3:
9e:13:01:71:1f:2a:81:ed:47:b2:90:6b:17:75:4f:
f8:13:61:0a:b5:e5:30:b2:d1:a2:b0:34:24:80:9b:
7f:77:8d:e7:4f:b1:55:2a:85:c7:1f:2c:00:2d:32:
0b:f2:d4:62:e6:36:c0:9a:52:e3:0c:ea:f8:ea:e4:
be:ce:1e:b7:30:34:01:fe:95:07:b3:8b:c7:00:c0:
db:b1:e7:66:49:0f:17:af:7f:7d:23:d9:90:c8:3b:
57:e3:3e:d0:23:7e:04:2e:bf:2b:37:5c:c3:75:c5:
7b:6d:ae:0b:ef:7a:00:3d:f4:71:9f:b4:47:2f:88:
0b:c6:a4:99:12:fd:80:d3:a8:68:cb:0b:40:10:42:
11:53:bd:5a:89:0a:1f:24:e4:c2:3d:e4:05:80:7c:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:63:30:8B:E3:EC:FF:B9:14:FD:64:61:37:74:3D:B2:4C:0A:34:58
X509v3 Authority Key Identifier:
keyid:1F:2F:BB:03:7B:2D:98:C4:74:B6:2A:60:EC:88:DA:0C:D2:E3:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hy-7A3stmMR0tipg7IjaDNLjfGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/JmMwi-Ps_7kU_WRhN3Q9skwKNFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e9c797-eb37-4ac2-9593-c44e9ae5f239/1/Hy-7A3stmMR0tipg7IjaDNLjfGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:35:81:2b:fc:e0:e4:58:b2:98:46:0d:15:eb:10:68:bb:b9:
1d:bd:1c:86:4a:85:a3:93:e7:4f:9c:ec:d4:54:2b:50:59:87:
a5:ad:2b:f9:66:28:1d:1f:82:0a:a7:4b:36:81:fd:f1:a1:01:
3a:b6:24:7d:cc:09:8c:94:b0:26:a8:f8:65:09:72:c1:f6:f5:
3d:8e:12:b3:c8:27:70:c5:9c:84:07:55:10:59:79:a3:16:bc:
57:01:9c:cc:4c:36:11:90:0b:fb:20:6d:2b:5b:6b:a8:08:ba:
9f:0d:a4:a6:0d:a9:1a:9f:8e:10:1d:db:b7:15:71:8d:f7:23:
e0:44:68:e6:d1:20:56:fa:c5:eb:77:07:21:a1:1b:37:e5:f0:
4a:4a:14:84:eb:31:96:be:67:87:18:c5:a7:be:b8:4f:57:a2:
8d:12:7e:c0:b0:55:5a:ca:27:04:a9:27:4a:bf:3d:15:40:90:
80:07:c1:5f:87:a7:df:29:c2:3d:a7:72:1e:f0:66:63:1e:4a:
2b:01:aa:d9:30:d0:02:fd:ed:bf:47:42:44:3d:32:60:9c:d5:
00:08:0a:86:9e:df:b3:28:51:90:5a:7b:6c:35:cf:52:28:d4:
a5:a8:f4:56:d3:78:b3:cb:f1:4e:03:a7:cb:f2:cf:dd:cb:be:
26:23:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:35 2024 by rpki-client on console-fra.rpki-client.org