Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JDCn4PSpIIeVSynCLnCLtrjvkGY.roa
File: JDCn4PSpIIeVSynCLnCLtrjvkGY.roa (raw, json)
Hash identifier: IGhJuIpxfbb/H7fQYl65UPaLE7vRU/XYQP77Js/4lyA=
Subject key identifier: 24:30:A7:E0:F4:A9:20:87:95:4B:29:C2:2E:70:8B:B6:B8:EF:90:66
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0186D621EDE888F3205F6A0442CBDA068A7E
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JDCn4PSpIIeVSynCLnCLtrjvkGY.roa
Signing time: Sun 12 Mar 2023 14:03:13 +0000
ROA not before: Sun 12 Mar 2023 14:03:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197100
IP address blocks: 46.34.32.0/22 maxlen: 22
46.34.36.0/23 maxlen: 23
46.34.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d6:21:ed:e8:88:f3:20:5f:6a:04:42:cb:da:06:8a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Mar 12 14:03:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2430a7e0f4a92087954b29c22e708bb6b8ef9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:14:1b:59:6e:72:1c:d7:a9:61:95:24:85:1a:
4e:64:00:70:6f:c4:14:0c:a6:2b:75:b7:e2:d0:a0:
e5:48:28:64:46:9e:a1:5a:65:71:3b:88:11:3b:24:
ae:21:7a:78:1f:40:b2:4c:9c:88:10:3d:bb:29:23:
7a:84:91:b7:fc:d8:1a:6b:e6:98:43:2a:92:64:57:
fd:bb:43:35:74:02:8a:64:5c:b9:55:fb:65:43:1f:
f5:8c:14:46:11:a0:40:50:4b:f0:f7:f5:6f:77:1f:
58:c4:f1:9b:0e:5e:2e:c9:f4:58:54:96:3f:75:a4:
08:de:f3:3f:19:57:af:df:cb:5f:97:ce:82:2a:c0:
44:35:4e:c7:de:be:a6:21:f4:da:82:dd:53:99:c2:
2e:1c:b8:41:86:8a:de:94:21:ac:31:31:cf:65:5b:
fb:d7:d6:33:77:82:d0:bf:cf:cb:8d:8e:d2:ce:3d:
70:7f:73:22:2d:c7:e7:27:98:52:46:a0:57:74:a6:
e3:f9:fc:1d:dd:45:3e:59:cd:9a:25:35:1b:c3:31:
82:e1:b3:1a:28:66:b0:db:65:e9:89:da:d3:5b:d6:
80:f9:35:d2:14:6c:fa:fb:7a:f3:1d:80:47:24:38:
b5:aa:7a:da:90:c5:ac:94:31:ad:00:ef:86:df:03:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:A7:E0:F4:A9:20:87:95:4B:29:C2:2E:70:8B:B6:B8:EF:90:66
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/JDCn4PSpIIeVSynCLnCLtrjvkGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.32.0-46.34.37.255
46.34.60.0/22
Signature Algorithm: sha256WithRSAEncryption
28:76:89:ce:7d:1b:5f:f1:08:f7:a3:90:33:55:bb:cc:9d:46:
89:8a:a6:7f:f5:cb:6a:b6:c7:44:a6:e1:2a:74:a1:f9:d1:c5:
53:06:c9:06:fb:f9:33:db:57:69:ef:cf:39:7d:18:a8:4c:40:
43:03:b0:37:89:b7:19:e8:47:ed:1f:8b:d2:e8:3f:84:77:1b:
75:19:8e:b8:5c:61:5a:f6:63:36:2a:ae:10:98:2d:83:0a:14:
ca:b2:55:c6:70:59:0f:eb:b4:f7:f0:40:c3:6c:4d:68:7c:4e:
15:ee:af:8f:32:26:c3:74:92:1a:06:47:9f:23:1f:92:d5:32:
47:ae:bd:2e:0f:9c:58:9d:c3:a6:99:9a:c7:d2:2b:b4:b9:4a:
c9:87:7b:6e:05:7f:d9:e4:ec:fa:84:26:e0:55:a7:d0:8c:d8:
c1:a4:f5:06:46:c6:f4:2a:0d:a9:c2:6a:cf:16:0e:a4:a8:df:
75:d4:fd:0b:c5:27:ae:cf:33:2a:2b:2f:d2:11:ec:69:8e:77:
0f:16:bb:10:91:7f:fb:82:92:aa:b0:72:52:41:07:f0:9c:7e:
40:36:6e:60:d3:87:06:35:2a:ef:67:28:f3:5d:53:29:0b:f5:
1d:af:06:bc:c2:4b:55:f6:2b:bf:be:34:db:ea:ea:36:4a:7b:
4c:6b:09:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:58 2023 by rpki-client on console-fra.rpki-client.org