Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/9jvKqnh2aLr6V32N6oi2hy7fSRM.roa
File: 9jvKqnh2aLr6V32N6oi2hy7fSRM.roa (raw, json)
Hash identifier: uRoTWlK7qZAkibClFP6Bh9N7V9RMMppg41ZTQ/87dog=
Subject key identifier: F6:3B:CA:AA:78:76:68:BA:FA:57:7D:8D:EA:88:B6:87:2E:DF:49:13
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 0186369D3ADD9125ABFD8D408D4D538784FE
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/9jvKqnh2aLr6V32N6oi2hy7fSRM.roa
Signing time: Thu 09 Feb 2023 14:38:39 +0000
ROA not before: Thu 09 Feb 2023 14:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197240
IP address blocks: 46.30.104.0/23 maxlen: 24
46.30.108.0/24 maxlen: 24
46.30.110.0/23 maxlen: 24
46.30.106.0/23 maxlen: 24
46.30.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:9d:3a:dd:91:25:ab:fd:8d:40:8d:4d:53:87:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Feb 9 14:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f63bcaaa787668bafa577d8dea88b6872edf4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:a6:f3:8c:e6:2c:4e:af:32:8a:55:d8:a3:
26:a4:49:d9:f7:ea:85:db:d1:85:0d:45:06:4b:1a:
0f:f7:38:c3:4e:7f:0a:64:66:eb:10:3a:18:4a:b4:
8b:0a:52:9a:ba:92:82:1c:be:15:00:ea:c3:85:86:
cf:24:a6:a2:b5:cf:32:ef:53:e5:f3:21:fa:7f:aa:
01:72:5f:ab:06:13:6d:53:42:90:7c:d5:d0:ee:6a:
32:8c:cf:5d:24:a5:61:1c:e4:21:2a:81:4b:74:ba:
da:10:d0:d1:30:ec:cf:22:8d:20:53:dd:cb:cc:98:
b2:2f:8b:2b:6d:db:72:92:9f:fa:8d:e4:d0:df:b6:
a1:90:ec:13:83:ce:3d:34:fd:29:67:57:c4:74:d6:
15:a2:6b:6e:14:f6:63:b3:49:32:83:8a:88:19:0e:
dd:c6:a8:ab:2c:ae:6b:c5:31:04:ab:88:16:26:82:
43:86:65:c8:4f:22:8b:27:fd:c5:bb:bd:91:1a:e8:
95:f9:15:3a:1f:55:53:ad:b9:b5:01:32:03:cd:00:
38:8e:dd:9d:65:88:ce:97:34:68:f1:69:16:eb:8e:
a0:4b:4a:90:e6:f4:65:34:0f:c0:59:0a:d2:97:19:
57:1b:ac:3e:3e:87:0f:c9:87:10:29:4e:6d:b9:fb:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3B:CA:AA:78:76:68:BA:FA:57:7D:8D:EA:88:B6:87:2E:DF:49:13
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/9jvKqnh2aLr6V32N6oi2hy7fSRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.104.0/21
Signature Algorithm: sha256WithRSAEncryption
13:33:3a:6d:53:a5:bb:1f:a7:09:b3:2a:ff:ff:d0:a1:a8:59:
ea:d6:d6:52:d4:eb:ed:8e:d1:ca:f0:83:83:f4:6d:a4:96:63:
47:b2:8d:44:df:9c:ad:8b:fc:d4:5b:1d:4f:a5:04:50:df:3b:
60:c9:be:2e:bf:6d:84:7b:49:5d:92:bb:5c:1a:0e:52:3c:16:
f1:30:d8:7d:98:96:1c:9d:de:2c:2f:1b:c8:7c:db:61:95:c2:
80:67:04:32:a5:2e:14:81:8a:17:46:d9:cc:1a:7c:98:38:12:
c6:92:69:d0:3e:a6:41:e1:a7:e2:45:dd:cf:3b:4b:d1:8b:70:
f9:d2:ba:dd:92:a6:98:0e:b1:14:40:be:fb:19:3a:f5:7e:34:
37:04:88:a9:4f:24:9f:74:64:0d:97:ed:b8:84:3e:a3:1d:95:
2b:7f:f1:86:82:52:9e:a6:e3:b2:af:3c:42:a1:4b:ac:50:6a:
a9:69:40:0b:64:22:57:24:08:69:54:81:0b:dc:0e:b3:bb:62:
b7:e8:3b:bd:6e:04:46:8d:f8:a3:04:1a:f9:d1:6c:ca:b9:bc:
3e:68:51:72:47:32:b3:00:56:57:1d:e0:15:bf:2a:8b:ae:4d:
00:38:f7:a5:a7:cc:c8:d1:16:9e:0a:23:63:aa:81:49:54:ce:
50:87:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:31 2024 by rpki-client on console-ams.rpki-client.org