Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Jcwg7gbWNmbzYFyjKluRXHxMATU.roa
File: Jcwg7gbWNmbzYFyjKluRXHxMATU.roa (raw, json)
Hash identifier: j5Vovw1aRm676WghPasMdzRL6Bh/Ud6i2hNmEuQKTeY=
Subject key identifier: 25:CC:20:EE:06:D6:36:66:F3:60:5C:A3:2A:5B:91:5C:7C:4C:01:35
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01862C8BCED828DB38E01150D62690A22E56
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Jcwg7gbWNmbzYFyjKluRXHxMATU.roa
Signing time: Tue 07 Feb 2023 15:43:25 +0000
ROA not before: Tue 07 Feb 2023 15:43:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 46.162.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:8b:ce:d8:28:db:38:e0:11:50:d6:26:90:a2:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 7 15:43:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cc20ee06d63666f3605ca32a5b915c7c4c0135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:09:61:da:e5:c1:55:df:bd:07:f5:8c:1d:
d5:86:19:8f:e2:68:e7:58:cd:54:fa:d0:c2:16:8c:
56:8b:e5:dc:bb:69:c1:d5:e8:94:d3:5e:f8:6e:f7:
d9:ea:d3:6a:ea:49:d6:b7:03:d0:7b:95:5a:44:14:
25:af:8e:eb:9d:4f:b7:3f:4d:66:7d:38:f0:7e:d4:
5c:23:ce:4c:af:66:99:c5:25:26:cf:e8:38:be:76:
be:19:d2:0f:87:d9:6f:86:17:89:ac:f2:9c:bb:b4:
02:1d:d6:04:6c:9a:98:88:cf:be:de:fa:1a:4f:5c:
c0:62:43:62:a2:1c:70:22:53:b9:c0:a0:38:73:f6:
a8:05:b2:f4:d1:89:80:b9:60:40:93:5f:22:00:2d:
8e:e2:91:f6:cf:eb:2a:9f:53:5a:b1:27:15:3a:0e:
0d:85:e9:15:c7:07:fb:b4:ab:54:81:d1:25:c3:5f:
56:16:29:b6:00:0a:3d:f9:71:13:fc:ad:db:d0:39:
31:69:02:a9:46:e6:85:dd:63:4b:6c:5a:42:ff:de:
bf:5b:0d:df:43:5c:03:a5:78:c0:ff:4b:9d:15:39:
bb:eb:8e:26:63:61:d7:b0:2c:e1:03:f5:7f:5a:a5:
02:2f:b4:0b:a1:76:1d:7c:53:1d:51:65:b3:d4:9c:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CC:20:EE:06:D6:36:66:F3:60:5C:A3:2A:5B:91:5C:7C:4C:01:35
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/Jcwg7gbWNmbzYFyjKluRXHxMATU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:05:45:1d:84:65:6f:f6:bc:55:43:f3:66:a3:85:61:7e:f5:
9f:63:d3:62:77:7c:70:aa:ae:b8:30:76:23:7d:93:0c:e4:03:
c9:0d:d4:1b:3c:47:8f:b0:e9:41:63:fe:a1:95:ee:9f:03:ab:
bf:84:03:f2:65:7d:81:1e:e4:aa:ab:86:62:5a:fd:a3:f0:26:
c9:56:f4:20:62:a2:ec:6e:e3:8f:33:f1:94:11:28:02:9b:fa:
74:2e:7c:4a:4d:58:92:be:8f:00:4d:f6:7a:4b:9b:8f:82:66:
db:60:9f:0c:7d:77:90:83:46:da:7a:11:89:65:99:86:e9:01:
f9:80:3c:d6:49:c4:e2:01:12:61:3e:cc:a1:49:96:05:c6:d7:
6d:32:d3:41:d9:db:f8:7d:f2:24:ee:12:c1:6b:92:f8:cd:1b:
b3:c7:23:0d:01:b5:e2:50:b5:92:49:da:36:e6:0e:4a:44:a1:
fa:bf:b0:cd:6f:39:dc:83:af:c3:ab:31:e0:32:54:ab:4a:76:
a7:1c:ad:a7:3c:6c:35:c3:2f:35:df:46:32:d7:21:7c:d7:f1:
46:fd:e2:f9:7e:52:d7:f5:8c:24:89:46:94:d1:41:10:ec:62:
c1:af:9e:e4:b1:5e:7d:97:0d:8f:b9:b9:b5:a5:2a:d8:b8:b3:
7e:33:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org