Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/JRTG636iRjS0AL2GdO8xruhiZDM.roa
File: JRTG636iRjS0AL2GdO8xruhiZDM.roa (raw, json)
Hash identifier: NS9jiAaht/k/4uVLRUyct8qWG9MAxaIjPNa4Z54lYbg=
Subject key identifier: 25:14:C6:EB:7E:A2:46:34:B4:00:BD:86:74:EF:31:AE:E8:62:64:33
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018D45AB213C86D39CB56550B51DAE0A0A07
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/JRTG636iRjS0AL2GdO8xruhiZDM.roa
Signing time: Fri 26 Jan 2024 12:07:39 +0000
ROA not before: Fri 26 Jan 2024 12:07:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 46.235.15.0/24 maxlen: 32
2a00:9940::/29 maxlen: 128
2a04:e880::/29 maxlen: 128
2a06:8540::/29 maxlen: 128
2a09:2340::/29 maxlen: 128
2a14:2b80::/29 maxlen: 128
2a14:5c80::/29 maxlen: 128
2a14:6580::/29 maxlen: 128
2a14:7080::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 31 Jan 2024 19:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:ab:21:3c:86:d3:9c:b5:65:50:b5:1d:ae:0a:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 26 12:07:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2514c6eb7ea24634b400bd8674ef31aee8626433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:6a:13:f6:5a:a4:cc:bc:b7:cc:6b:05:5c:
97:55:78:68:4e:d3:77:cd:46:43:27:c2:b9:4a:68:
e5:e1:ce:84:c5:c0:b0:fa:d1:28:b2:bf:9f:00:65:
a9:b2:bd:22:fc:25:1b:d6:41:17:ae:29:01:3a:da:
f6:dc:db:85:3c:35:b6:2b:af:cd:2f:db:ba:3f:1a:
8f:d0:57:ae:bd:b1:cf:27:57:e3:ad:c0:03:bb:29:
1c:70:91:32:53:ea:09:59:a9:41:86:07:b7:c6:28:
a9:48:61:84:ef:62:eb:7d:17:60:97:cb:7c:29:8d:
2f:9c:16:3a:13:81:45:bf:ae:c2:7f:02:4c:48:5d:
9f:d0:30:aa:29:98:0a:d4:f4:06:7f:e4:49:ba:d1:
98:05:c5:39:97:38:c8:ee:92:4d:80:ea:b1:21:10:
46:a5:a9:17:35:45:0b:0e:a3:fc:0a:c6:9d:08:b5:
4c:9e:7c:ee:99:5a:e2:2e:15:bc:4f:3f:27:2e:51:
47:ba:88:d9:af:8a:87:f7:fd:bc:db:93:1b:f5:a5:
43:34:3f:d4:aa:38:49:c4:a8:bd:c8:45:cc:ec:b9:
85:79:72:26:a0:5d:36:11:cd:86:4d:f5:19:64:91:
e5:2a:dd:4b:41:02:84:b0:59:df:b3:16:ac:de:e2:
ff:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:14:C6:EB:7E:A2:46:34:B4:00:BD:86:74:EF:31:AE:E8:62:64:33
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/JRTG636iRjS0AL2GdO8xruhiZDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.235.15.0/24
IPv6:
2a00:9940::/29
2a04:e880::/29
2a06:8540::/29
2a09:2340::/29
2a14:2b80::/29
2a14:5c80::/29
2a14:6580::/29
2a14:7080::/29
Signature Algorithm: sha256WithRSAEncryption
8d:e2:a8:1b:16:1d:4a:df:74:c7:68:c6:1e:ca:c9:e2:7e:ac:
37:c6:d1:c2:69:9e:8b:e7:e9:eb:50:ee:f0:36:93:16:f6:ce:
f2:90:54:f3:bc:aa:e8:58:83:f0:86:cd:85:59:e8:a6:e6:ff:
2f:9b:9c:b5:ee:8d:95:34:88:88:cb:e7:0c:09:b9:4d:ef:97:
fb:ec:87:2f:a5:63:dd:f4:a8:30:ce:18:b7:5b:d5:8c:14:6e:
12:e7:2f:ed:6e:7a:5c:a0:97:71:73:c0:92:62:a8:d7:4d:59:
fd:37:9e:bb:5c:d7:ac:f7:10:5e:37:63:42:1b:8a:17:61:8f:
7b:64:d5:d4:0a:4a:dd:98:01:62:a9:b2:98:e4:97:30:63:e0:
39:4d:b4:01:ef:83:96:8e:35:d7:7b:30:34:93:7c:54:fe:d9:
e5:58:06:b3:3e:c6:f4:79:96:2b:54:6c:ee:91:80:85:f2:5f:
26:d2:c3:fa:7a:fb:c2:11:75:bb:4c:c0:5e:5a:40:d9:85:26:
53:1a:f0:d0:76:a1:2d:61:d7:be:6f:6f:6c:9b:cd:40:58:b7:
1a:ef:fb:41:5d:84:52:1f:cb:d4:92:53:39:b6:73:e9:28:43:
88:81:2f:0c:f9:a8:b9:a6:ad:76:b5:1f:4a:a3:bf:b6:8e:1d:
c8:8d:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:23 2024 by rpki-client on console-ams.rpki-client.org