Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/JkwHkZWlfi2tdV2niSXRI0Cjj64.roa
File: JkwHkZWlfi2tdV2niSXRI0Cjj64.roa (raw, json)
Hash identifier: LAebnwefQ00lJSQzCnP/Ikgcv+CnI9eC9ZlVqcNeJEU=
Subject key identifier: 26:4C:07:91:95:A5:7E:2D:AD:75:5D:A7:89:25:D1:23:40:A3:8F:AE
Certificate issuer: /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial: 0185718C1604B50ECAA8216B7D6C77E24CAB
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/JkwHkZWlfi2tdV2niSXRI0Cjj64.roa
Signing time: Mon 02 Jan 2023 08:14:44 +0000
ROA not before: Mon 02 Jan 2023 08:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197441
IP address blocks: 46.23.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 09:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:16:04:b5:0e:ca:a8:21:6b:7d:6c:77:e2:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Validity
Not Before: Jan 2 08:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264c079195a57e2dad755da78925d12340a38fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a1:ab:57:60:89:97:5f:03:64:0f:78:13:5e:
23:0d:b2:35:ba:6b:84:69:29:7b:3c:75:bd:c1:0b:
e5:7e:76:cb:11:86:e9:8f:78:61:fe:45:13:f5:bf:
9c:ff:1b:2c:1b:6d:31:7b:f8:48:2a:2c:0e:f6:85:
0c:1f:ee:62:d3:29:e1:96:32:ee:59:c9:7d:74:9b:
bd:fc:17:4e:8a:71:6e:18:e7:37:13:78:d1:b1:3d:
38:b4:06:29:e9:1f:cb:19:51:02:da:6d:39:1a:dd:
7a:19:65:a1:be:d8:45:d8:a3:d9:ba:ad:c1:dd:35:
1b:0a:54:1c:7d:b3:31:78:78:a6:41:d7:6e:3c:ce:
bb:8a:df:e4:13:33:82:8c:31:6d:a7:4e:af:e2:cc:
5f:e7:55:05:7f:bb:76:45:ca:78:c2:0a:47:fb:42:
99:89:4b:af:1b:55:3e:17:bb:e6:b7:f9:2b:f0:26:
9d:e6:d3:0e:5d:10:8a:df:ab:60:45:3f:43:95:05:
c9:5e:b9:6f:8c:88:d8:fc:ca:7f:cd:d1:f0:68:de:
41:d9:15:87:40:77:88:ba:dc:e4:4d:a4:67:2c:9b:
da:ff:08:30:3b:66:ae:09:1d:a4:ae:91:af:e7:f0:
24:b2:dc:55:40:5d:02:54:0e:12:d5:19:5b:d8:71:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:07:91:95:A5:7E:2D:AD:75:5D:A7:89:25:D1:23:40:A3:8F:AE
X509v3 Authority Key Identifier:
keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/JkwHkZWlfi2tdV2niSXRI0Cjj64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:af:3a:7b:34:d0:d9:1d:04:93:ec:f2:73:48:25:2f:12:79:
60:af:f2:d7:67:07:96:67:46:82:10:63:b3:43:78:1b:a6:21:
17:99:89:6e:ef:85:6d:0e:d7:01:4e:f6:a3:37:fb:52:13:d1:
ee:0d:12:6d:06:0c:25:68:a6:df:4a:f6:64:0e:59:7a:42:d6:
28:6a:2e:2a:fc:73:34:2b:8c:9c:7a:fc:3c:e6:13:53:f7:00:
70:83:e9:7e:73:57:be:64:de:26:f5:eb:53:d6:78:7b:68:e1:
dc:89:27:bd:78:55:4c:3e:ea:70:d2:39:51:bf:ad:b5:71:43:
9d:b2:db:80:1d:80:aa:ab:fb:14:9f:e9:b7:ca:77:f4:c5:1e:
86:89:7b:d5:df:f4:47:87:72:19:65:e9:3e:c5:21:3f:c4:e9:
c2:b6:60:cd:72:c3:28:7b:7a:99:64:27:b4:c5:3a:0e:28:17:
e6:f7:4f:eb:ac:d9:4c:e6:08:00:b7:3a:2f:d7:27:31:2a:d6:
b2:18:21:3e:aa:44:04:98:8a:90:32:2a:e6:74:55:8d:1c:4c:
6c:67:1c:39:c4:d0:ec:31:80:44:f7:07:ce:73:67:3c:71:ab:
bd:e5:2a:0a:84:a1:b1:eb:42:13:0b:28:38:9e:0a:7f:e9:94:
23:47:7d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:38 2024 by rpki-client on console-ams.rpki-client.org