Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JG97z2K9BOV1DA2WRLXiETCLg6Y.roa
File: JG97z2K9BOV1DA2WRLXiETCLg6Y.roa (raw, json)
Hash identifier: Vw7pjnqM0chjLCq27CrvrM+rBue0wwYNBIxnL+znpu4=
Subject key identifier: 24:6F:7B:CF:62:BD:04:E5:75:0C:0D:96:44:B5:E2:11:30:8B:83:A6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095879EFD2F2EC7DDC504DD39E61DCA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JG97z2K9BOV1DA2WRLXiETCLg6Y.roa
Signing time: Mon 02 Jan 2023 03:45:25 +0000
ROA not before: Mon 02 Jan 2023 03:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64461
IP address blocks: 146.120.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:87:9e:fd:2f:2e:c7:dd:c5:04:dd:39:e6:1d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=246f7bcf62bd04e5750c0d9644b5e211308b83a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e7:37:04:70:58:92:86:bf:50:39:1a:45:bc:
62:b0:3e:bb:71:a0:9c:d6:ea:c1:0b:db:cd:79:15:
ac:69:b4:09:35:0f:8e:bd:54:2d:32:9f:8f:0d:c6:
35:f9:bd:8b:32:5d:d6:f2:0d:cc:f3:31:5e:f4:7d:
5c:ac:14:89:85:63:ef:4a:df:9a:81:78:2e:d0:a1:
bd:a9:cd:a2:a5:12:65:aa:cb:48:da:17:98:6f:dc:
a9:b2:35:a0:bd:47:ec:6b:e9:a7:dd:b2:3c:4f:a1:
e0:23:f9:94:75:58:1e:81:2e:f2:bb:d9:78:d1:08:
8c:90:39:b7:28:ca:b5:07:52:b5:99:34:00:16:4f:
ba:80:14:32:c9:95:e2:01:be:ff:11:f5:88:98:78:
c1:a1:87:0a:19:b7:d9:b6:8a:42:d2:9f:be:f2:53:
be:c0:ad:bf:b2:14:86:e9:30:f6:18:eb:c4:c2:f6:
fb:6c:d9:1c:5b:12:7b:c1:d9:60:29:27:f5:76:a8:
82:13:31:65:84:2c:c2:d6:88:a1:0c:d6:d2:3f:45:
67:2f:32:09:3e:74:57:bc:a0:28:0a:a7:a6:e6:f2:
78:a9:52:2c:f6:90:ae:78:a5:35:41:14:b1:bc:40:
3b:4a:3e:97:d2:30:33:de:2c:6e:5c:f7:56:ff:3b:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:7B:CF:62:BD:04:E5:75:0C:0D:96:44:B5:E2:11:30:8B:83:A6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JG97z2K9BOV1DA2WRLXiETCLg6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.94.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d3:1e:39:f5:8e:9a:7e:43:d7:88:b8:57:c8:c2:b4:d6:64:
73:76:8a:36:e8:f8:52:8f:67:5c:00:4e:72:10:b6:24:c6:a4:
ab:d7:85:09:e6:83:2f:64:24:42:16:1d:44:04:91:72:f9:f4:
c4:c3:73:f7:0a:a8:51:ca:56:26:ed:53:1f:4b:31:68:be:69:
95:60:d7:10:3a:a7:dc:d6:5d:4a:2a:e9:10:53:f6:c7:5d:75:
42:5e:62:f0:5c:c1:c6:dc:13:09:8c:ac:c2:b0:c3:7d:56:45:
77:bc:22:94:be:c0:6b:d8:c4:3c:0f:5c:a1:b9:fd:b0:4a:55:
77:1f:f6:6e:95:c1:b3:a7:69:d6:bf:a5:97:48:69:6b:1b:d4:
c0:d8:38:c4:e4:b7:81:de:1b:83:19:dd:cd:4f:69:fa:94:1b:
80:d5:9f:72:14:36:e8:e8:9c:1c:c6:ac:23:66:02:68:23:86:
f2:f6:07:84:75:d3:03:5c:d4:22:bb:04:eb:63:92:05:c6:1c:
10:ca:74:7c:be:90:01:b8:29:ca:2a:cf:12:46:e3:3e:1e:5a:
98:71:62:d9:39:39:bb:56:a1:9d:f2:69:63:f2:e0:ce:98:fc:
3c:fc:4d:f0:d7:a7:d7:71:4f:d6:57:ba:01:63:ee:45:4d:3f:
14:0a:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:31 2024 by rpki-client on console-fra.rpki-client.org