Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jJjEUt4UewBU9pieOSX1CmktLTg.roa
File: jJjEUt4UewBU9pieOSX1CmktLTg.roa (raw, json)
Hash identifier: lbHaL1a98aWV8juBNxJQ2u8tTcbUTWvEyjTAm4ljIUQ=
Subject key identifier: 8C:98:C4:52:DE:14:7B:00:54:F6:98:9E:39:25:F5:0A:69:2D:2D:38
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 01856ECB682D11729993606AE05DE3B116F6
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jJjEUt4UewBU9pieOSX1CmktLTg.roa
Signing time: Sun 01 Jan 2023 19:25:02 +0000
ROA not before: Sun 01 Jan 2023 19:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43395
IP address blocks: 46.148.35.0/24 maxlen: 24
46.148.36.0/24 maxlen: 24
46.148.38.0/24 maxlen: 24
46.148.43.0/24 maxlen: 24
46.148.44.0/24 maxlen: 24
46.148.41.0/24 maxlen: 24
46.148.45.0/24 maxlen: 24
46.148.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 13:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:68:2d:11:72:99:93:60:6a:e0:5d:e3:b1:16:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jan 1 19:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c98c452de147b0054f6989e3925f50a692d2d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:de:62:66:cc:13:4a:80:ec:74:5a:f4:d2:
21:8d:05:4e:ca:74:c5:5d:d7:53:99:be:87:1f:ec:
e5:cf:c2:c2:4d:b5:0c:00:7a:82:38:ac:a9:c9:03:
4a:98:33:03:bc:ea:52:ed:d8:71:ed:05:12:f5:c0:
f1:8d:1b:ee:ed:8b:1e:2f:bb:9b:0f:ee:c5:33:88:
89:5d:b7:c9:63:d0:15:28:9b:5b:7e:5d:ef:a1:21:
3b:10:db:94:fc:98:45:05:00:a2:d0:06:e9:78:02:
9a:7f:2f:1f:b5:be:96:84:e9:31:02:63:aa:67:07:
4e:58:92:38:67:c2:b2:d8:b9:66:79:6c:26:25:ba:
eb:0b:b0:31:d9:0d:08:d1:50:82:60:d9:2a:8d:dc:
26:39:ed:3f:88:34:5f:ad:0c:95:36:52:2f:a8:27:
13:8a:f5:c9:c9:06:c1:16:c6:81:eb:d1:59:ff:e1:
5a:3a:41:7b:53:a1:d1:ee:a1:86:95:cc:89:15:63:
46:b9:6e:52:e1:25:c7:b0:d0:52:39:63:c7:e7:7f:
93:9b:4e:f3:15:4f:ab:cc:df:6e:ba:d6:3b:2b:10:
1d:a5:3e:2c:20:d2:6e:3d:16:d7:f3:b6:a8:18:65:
10:2b:9b:79:8d:a2:d5:df:2a:9b:bb:73:e3:73:eb:
d5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:98:C4:52:DE:14:7B:00:54:F6:98:9E:39:25:F5:0A:69:2D:2D:38
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/jJjEUt4UewBU9pieOSX1CmktLTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.35.0-46.148.36.255
46.148.38.0/24
46.148.41.0/24
46.148.43.0-46.148.46.255
Signature Algorithm: sha256WithRSAEncryption
0a:8c:d5:97:9b:cc:35:49:c7:f4:03:51:f3:a6:d7:ea:09:59:
0c:3b:d5:4d:db:42:1b:23:96:83:5c:13:84:9b:16:c1:b6:dd:
45:ba:bb:c9:25:68:5f:c4:ed:97:3b:b8:69:08:5b:0d:e9:fd:
af:d7:55:b8:5d:69:d7:ac:2e:4d:4d:4f:fe:71:7e:86:0e:81:
31:b5:2d:f9:70:a2:2e:e9:40:4d:3e:56:31:eb:16:ae:62:08:
7e:b2:69:6f:79:5d:aa:34:12:28:f4:5a:fa:3c:8c:54:09:50:
21:1e:fa:80:1e:c6:69:41:9a:a5:bf:93:32:ea:3e:e2:8a:1b:
02:a2:86:db:6c:59:62:7e:49:bd:db:d9:f7:d1:34:9a:c6:a7:
17:8a:50:24:a1:92:6f:2d:a5:f2:bb:a4:94:30:71:ea:84:a4:
4d:59:00:1d:91:c2:05:29:f9:cd:d9:24:d4:b2:66:38:1f:b8:
60:5f:a5:49:c8:4f:76:7d:04:07:2b:a9:07:15:fa:8d:04:f3:
b7:0b:1d:22:68:83:fa:86:0e:94:11:4b:be:3a:ba:4e:14:22:
a3:02:d2:7f:33:51:e7:53:1c:8a:8f:b9:ee:44:b4:e9:2c:10:
96:94:01:3a:dd:38:e4:6d:63:fe:a2:4f:3e:53:e5:94:6a:83:
a0:e2:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:47 2024 by rpki-client on console-ams.rpki-client.org