Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zJetNBoVovyfqnZMsze_8ias3CE.roa
File: zJetNBoVovyfqnZMsze_8ias3CE.roa (raw, json)
Hash identifier: ItKernxKjMxShYI/6SyDX8L1lSaRmVG5m5PX0kKQLa0=
Subject key identifier: CC:97:AD:34:1A:15:A2:FC:9F:AA:76:4C:B3:37:BF:F2:26:AC:DC:21
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019058A359E7D83142B2337429C96CF809EC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zJetNBoVovyfqnZMsze_8ias3CE.roa
Signing time: Thu 27 Jun 2024 07:40:18 +0000
ROA not before: Thu 27 Jun 2024 07:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 46.8.58.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 03 Oct 2024 08:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:a3:59:e7:d8:31:42:b2:33:74:29:c9:6c:f8:09:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 27 07:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc97ad341a15a2fc9faa764cb337bff226acdc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:73:43:9e:22:8f:75:7a:34:b3:92:60:12:
ba:db:5c:f0:f0:46:70:bf:cd:69:e5:55:44:81:9d:
8b:9e:86:24:19:37:68:13:95:e8:32:2f:c4:07:e0:
32:cd:1c:87:8d:8f:24:c2:f7:f3:17:e8:eb:e9:49:
7f:b2:bf:ec:b3:03:9c:1b:a2:a9:17:0e:eb:e9:06:
75:c2:77:42:bf:cc:30:42:a6:66:2b:f3:ff:3c:3f:
77:27:9e:41:a3:b9:60:c1:9d:ad:c9:94:69:22:ad:
9c:a1:7e:f3:4b:31:47:46:2c:38:35:de:a3:45:cd:
ca:1e:a5:6d:0e:2d:0d:58:01:97:a0:47:db:a7:ab:
5c:90:1d:42:b6:7a:98:cf:9f:67:69:14:69:41:cf:
11:52:2d:e2:bd:04:96:be:bf:75:99:52:b2:16:98:
d7:c8:60:e5:b7:43:9a:0a:a8:52:0d:fd:fa:81:c2:
df:29:c0:e8:b6:b1:b0:fa:2a:c8:00:0b:a4:ab:e5:
54:fd:7a:2d:6e:0c:8e:61:79:47:ce:66:76:e1:b9:
93:57:dc:6b:76:b6:38:a5:7e:af:37:78:53:76:d8:
e6:08:21:1a:cd:e3:9c:6d:17:63:2b:75:6c:0c:c8:
4e:ea:69:2a:f2:f8:53:99:a3:b9:7d:6f:02:61:61:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:AD:34:1A:15:A2:FC:9F:AA:76:4C:B3:37:BF:F2:26:AC:DC:21
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zJetNBoVovyfqnZMsze_8ias3CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.58.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:70:7d:49:25:61:17:f4:70:42:04:5d:be:ec:50:26:1a:70:
06:f2:cf:9c:04:17:9b:ce:71:3b:30:a9:4d:e9:22:3d:06:68:
cd:4b:b6:da:f1:ef:1d:7d:06:24:8c:0b:cf:5d:c9:b3:d3:da:
2d:e8:01:53:d6:44:91:11:b4:1e:b5:ec:0a:6b:cc:9b:13:e8:
b8:21:d8:4e:01:1a:32:9c:ec:29:6e:61:4f:c8:ad:3c:75:46:
35:a9:3d:70:6f:d7:f3:ee:f3:02:a1:77:a2:bc:a0:6b:37:ee:
55:56:7e:56:72:4a:b8:c6:d9:5f:73:e5:24:a1:d6:68:e0:9e:
14:16:0d:ab:c5:4b:d9:e8:09:e6:d6:3f:1e:74:c6:33:34:3d:
4e:a3:3c:df:f2:a0:02:4d:7d:08:50:ef:0f:a5:f5:b0:03:d4:
14:b1:d2:c8:33:bc:c4:06:b9:10:d4:7d:d5:d6:82:3e:7b:af:
6a:19:af:04:11:e3:a2:2a:ab:ac:2c:95:ab:ac:ff:81:1a:60:
19:19:60:2d:c0:2b:69:82:46:e4:7b:ad:51:e2:02:8c:9a:e7:
13:15:20:a6:2b:f0:ee:c1:52:3f:18:ce:90:f5:da:a0:ba:2a:
49:09:ea:c1:9d:45:5f:7b:c4:8f:ed:8e:86:c0:10:34:90:b2:
72:3b:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 10:49:53 2024 by rpki-client on console-fra.rpki-client.org