Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/JtmUQbn0tS6zfYPN7mLhopsOgxM.roa
File: JtmUQbn0tS6zfYPN7mLhopsOgxM.roa (raw, json)
Hash identifier: UpLx1mr1LNsFQJgAcbwFQhSCdcumhSbGX4pa/Tnizes=
Subject key identifier: 26:D9:94:41:B9:F4:B5:2E:B3:7D:83:CD:EE:62:E1:A2:9B:0E:83:13
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 018ACAFE499303AFDEA82DADE02D2B38FCDB
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/JtmUQbn0tS6zfYPN7mLhopsOgxM.roa
Signing time: Mon 25 Sep 2023 06:19:37 +0000
ROA not before: Mon 25 Sep 2023 06:19:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201512
IP address blocks: 176.101.92.0/24 maxlen: 24
185.62.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ca:fe:49:93:03:af:de:a8:2d:ad:e0:2d:2b:38:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Sep 25 06:19:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26d99441b9f4b52eb37d83cdee62e1a29b0e8313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:d0:36:1e:9b:a4:2b:35:f5:86:5a:93:7c:
f1:21:75:5a:64:81:e8:4a:59:3e:2f:3c:85:ec:90:
c8:ec:a9:8b:9f:d2:f6:92:7d:e0:f2:07:f1:dc:ac:
bf:9e:8b:95:fc:62:29:fa:c8:05:02:37:1c:56:65:
52:9e:5c:4d:f5:7a:4d:64:26:5a:f7:fc:46:da:91:
4f:1c:4d:6c:4f:6f:c4:7e:f4:18:b5:db:bd:b6:34:
ad:35:43:fc:94:30:1f:4e:73:8a:f3:40:58:89:c7:
8c:c7:9e:55:06:09:f2:ec:e2:6f:e0:c7:36:b0:eb:
73:0d:67:86:cc:96:c4:05:ea:f7:ab:a4:03:cf:0c:
8b:71:2a:7e:cf:98:3b:e0:22:09:44:61:9f:22:fd:
0d:02:d7:1b:d1:c8:66:48:c6:13:09:fa:1f:8e:6d:
d0:b7:23:16:b3:81:f4:a8:9e:eb:c1:24:af:89:5b:
63:07:de:3b:04:5a:47:69:36:07:3b:d3:d8:a8:53:
07:00:6b:14:ef:13:44:86:b6:e4:a5:03:54:b2:39:
07:24:2b:85:b7:31:7e:2f:07:fe:3c:d1:74:a5:e2:
dd:3a:fe:f4:0a:d6:d3:8f:a1:cd:c9:73:ec:16:73:
b5:05:88:60:92:f0:94:42:60:5f:3c:5e:d6:90:03:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D9:94:41:B9:F4:B5:2E:B3:7D:83:CD:EE:62:E1:A2:9B:0E:83:13
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/JtmUQbn0tS6zfYPN7mLhopsOgxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.92.0/24
185.62.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e8:42:b8:6d:fe:e9:c5:7e:a3:8f:33:7e:50:38:65:91:bc:
fb:59:3b:ca:88:73:e8:ee:37:e7:e9:dc:8a:e3:10:3a:10:91:
9f:0c:9a:47:ec:31:b9:3b:92:a5:67:da:c5:2a:49:09:39:1e:
34:9f:cb:a8:dd:11:2b:d4:aa:76:a5:08:14:4e:30:4f:15:79:
2d:4a:d0:db:9b:6e:5f:38:bc:77:6e:39:b7:f5:0b:a1:cc:e4:
50:74:ee:ac:e2:46:e8:8a:14:0c:80:16:5c:98:c4:af:13:fa:
06:7a:f6:0c:0c:6f:ac:b0:94:9d:00:0c:74:24:3b:72:05:08:
67:27:9b:b0:9f:39:16:57:5b:f6:c7:e8:f2:c6:91:a0:e2:42:
7e:be:b0:37:f4:fe:7f:d3:c9:d5:ce:b8:d5:71:e2:56:8d:6f:
35:8d:49:e8:c8:77:88:c1:aa:83:61:a9:ab:46:d0:c2:73:be:
d3:58:23:32:96:7e:09:58:17:db:cb:06:ac:2c:3c:34:0a:6e:
a1:5b:3b:f0:6a:22:e6:6a:8c:6a:17:06:d4:70:f4:33:c2:20:
be:33:e9:a8:ee:78:af:77:f6:b4:25:2c:c7:fb:4e:98:2d:98:
8c:8a:67:ef:48:43:55:31:d1:3f:d8:9e:26:49:b7:27:ac:80:
d7:09:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:32 2024 by rpki-client on console-fra.rpki-client.org