Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JMZhIZNXXMsd4E8c5cCtmBdAENM.roa
File: JMZhIZNXXMsd4E8c5cCtmBdAENM.roa (raw, json)
Hash identifier: xFZKY6lWz4/LYE6/jQEEgZmIPiOreXGPFSmAhR15Xn4=
Subject key identifier: 24:C6:61:21:93:57:5C:CB:1D:E0:4F:1C:E5:C0:AD:98:17:40:10:D3
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0187FF0F5C3DD84912EE22944BC02BD96B26
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JMZhIZNXXMsd4E8c5cCtmBdAENM.roa
Signing time: Tue 09 May 2023 05:50:09 +0000
ROA not before: Tue 09 May 2023 05:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.32.0/22 maxlen: 24
46.162.49.0/24 maxlen: 24
46.162.57.0/24 maxlen: 24
46.162.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 09:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:0f:5c:3d:d8:49:12:ee:22:94:4b:c0:2b:d9:6b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: May 9 05:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24c6612193575ccb1de04f1ce5c0ad98174010d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:b9:4c:ea:75:d8:36:78:17:e4:9f:e8:c8:
3f:ef:e2:87:96:6a:7c:df:c9:fd:03:3e:c7:24:d5:
9c:14:b6:37:9c:e1:b3:38:11:4b:e2:52:c8:d7:62:
0d:1e:c0:af:fa:c2:26:26:3e:e8:a0:28:a2:59:e3:
ab:2b:b2:c1:c8:a1:20:a3:3c:f8:bc:70:14:13:48:
32:6b:30:70:4a:ee:e7:45:f4:87:3b:6c:cb:17:45:
e8:36:02:f8:b6:28:db:f6:c9:6e:30:cf:55:f8:85:
3b:0f:c9:9a:1d:c3:6f:2a:9d:2b:6e:71:31:0a:1a:
e1:a0:f0:c5:8e:0f:2e:58:a7:4e:6d:61:33:d0:5b:
c6:03:48:a3:c5:9e:e9:0f:84:9c:06:16:5f:5b:29:
22:c5:b9:08:2e:48:c6:2c:23:c5:61:9f:d9:36:2a:
3e:07:b2:6b:fc:1c:66:61:8b:1f:a9:04:51:15:d5:
cf:82:7a:16:87:18:ce:f3:d4:6e:f0:68:57:76:aa:
56:30:97:62:18:b6:cd:45:82:93:aa:a6:07:98:ab:
5d:78:7d:a8:75:45:73:f4:10:a8:d4:50:52:88:3a:
a0:26:a7:a1:2a:2e:e7:a4:86:33:a0:77:b4:e7:a9:
f6:56:48:f9:68:54:7c:b8:07:2f:14:5d:f9:3f:00:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:61:21:93:57:5C:CB:1D:E0:4F:1C:E5:C0:AD:98:17:40:10:D3
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JMZhIZNXXMsd4E8c5cCtmBdAENM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0/22
46.162.49.0/24
46.162.56.0/23
Signature Algorithm: sha256WithRSAEncryption
44:98:c8:ed:e0:f2:26:78:9c:03:38:56:5d:08:43:31:e4:ad:
6d:21:b5:86:0c:e0:e9:ed:55:46:7b:8a:46:38:91:e7:c4:3b:
54:60:c2:38:af:f0:2f:25:84:bb:bb:ec:93:81:b7:1f:cb:0a:
6b:c1:a8:b1:78:a3:61:27:48:50:00:8b:f9:28:68:96:75:f8:
5f:95:ed:53:95:bf:7b:fa:b0:5e:ef:42:c3:d4:d7:1f:bc:28:
3c:9f:ff:f8:af:a9:80:37:e3:bf:ac:24:20:19:23:36:ff:f8:
47:cc:f5:03:d8:0c:1e:9d:78:4e:ed:a0:fd:7c:8f:dd:20:2c:
6d:a0:68:e2:5c:2e:91:7e:88:a5:3c:55:ee:ba:ea:31:e1:65:
0e:39:b6:0a:f7:9d:6f:b0:e3:e9:a5:f4:44:70:24:b6:76:a6:
b4:8a:55:6a:d2:c0:99:71:dd:ee:71:8a:5a:76:b7:76:b3:fd:
5b:de:55:9d:04:23:6b:5f:f5:7c:b4:11:eb:56:b2:e7:e6:29:
49:da:c8:89:2b:ff:82:f9:87:7b:e1:1b:31:0a:cc:4f:08:5e:
04:36:53:e0:84:7f:f3:6f:cb:e5:36:fc:49:de:32:f8:16:23:
16:6c:db:b0:7e:73:5f:76:d3:a2:f6:a3:60:ed:50:88:fa:b5:
30:9c:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org