Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JkXs6t19aVeCtTS-qFqtmQYKV54.roa
File: JkXs6t19aVeCtTS-qFqtmQYKV54.roa (raw, json)
Hash identifier: Vcbs0YgdwGQTaP/0DAwKM4LMeItqyzBtHd7hShDr60Q=
Subject key identifier: 26:45:EC:EA:DD:7D:69:57:82:B5:34:BE:A8:5A:AD:99:06:0A:57:9E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 01879D4A3FE89B07266334F39850664F28A7
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JkXs6t19aVeCtTS-qFqtmQYKV54.roa
Signing time: Thu 20 Apr 2023 06:11:41 +0000
ROA not before: Thu 20 Apr 2023 06:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.27.0/24 maxlen: 24
46.162.50.0/24 maxlen: 24
46.162.48.0/24 maxlen: 24
46.162.54.0/24 maxlen: 24
46.162.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:4a:3f:e8:9b:07:26:63:34:f3:98:50:66:4f:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Apr 20 06:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2645eceadd7d695782b534bea85aad99060a579e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:f6:b7:02:58:39:e7:1a:c0:ad:c8:0d:29:
b8:69:33:05:93:3b:b6:fe:24:5a:5c:31:c6:bb:c7:
bb:42:b9:d7:7b:1c:65:aa:42:fa:a7:fb:73:58:23:
f2:3f:6f:0e:44:c9:66:6d:0c:20:7b:ed:23:5d:e8:
6d:94:27:2f:9b:f3:9b:14:c3:be:22:2a:39:05:fc:
bf:f5:54:fc:dc:13:90:80:b1:34:0a:9c:40:a1:08:
4b:af:82:d8:66:3c:87:a3:01:e7:13:cf:2f:cc:cf:
c7:5e:4e:56:05:3e:20:71:e8:91:9c:f4:44:81:b4:
e4:41:23:22:18:f3:82:7d:8b:d8:b2:20:51:9a:76:
48:34:e9:b6:2b:37:16:c9:1a:dd:b5:0d:c0:c4:b1:
37:4d:5c:af:25:6c:cd:e4:fe:24:79:83:b1:06:5c:
02:24:f9:e9:03:ae:83:2d:51:0d:e4:29:ac:d9:36:
9b:d0:f3:27:c5:21:16:6f:74:7f:84:91:50:f8:fc:
89:bb:21:0a:32:28:d9:02:05:b2:17:5c:a2:02:db:
a1:58:0e:8c:ef:f0:b5:ae:18:c7:e3:98:e1:a4:79:
42:52:9b:4e:a2:66:18:1a:0f:c7:96:95:72:eb:aa:
38:ce:ff:91:fb:dd:03:85:18:9f:e6:e6:c1:f6:28:
6e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:EC:EA:DD:7D:69:57:82:B5:34:BE:A8:5A:AD:99:06:0A:57:9E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/JkXs6t19aVeCtTS-qFqtmQYKV54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.27.0/24
46.162.48.0/24
46.162.50.0/24
46.162.54.0/24
46.162.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1c:85:59:0e:23:f8:13:ee:c9:6d:7b:c2:21:cb:30:48:7d:
79:eb:ed:b3:ee:82:0b:56:2e:30:cb:f3:b6:89:43:8f:76:08:
93:eb:a0:df:12:16:61:1a:4b:86:d5:90:83:a0:21:3f:ab:ea:
2b:ba:1f:c6:bf:ec:5e:a0:90:26:2f:17:0c:ab:c5:69:09:6a:
2b:ff:c6:28:5b:38:6e:75:78:40:21:ad:e4:1a:20:33:bb:95:
42:71:5f:62:ea:f9:6c:37:84:fd:9d:02:1f:5b:e0:9b:4d:c5:
00:70:56:a4:46:6e:5d:c6:ff:9d:85:df:65:2d:c0:9d:84:63:
2e:df:29:37:86:00:c7:1c:e8:57:1d:f0:4b:d0:b1:4c:91:49:
a0:ab:68:df:fd:07:3c:27:b6:70:92:d5:35:6c:47:78:ac:61:
8b:03:1b:ed:7f:69:5a:d1:76:0c:b7:1e:75:7b:e7:f9:b5:9a:
ad:f6:49:5b:a5:79:71:95:94:82:95:ad:57:01:7d:73:4a:32:
dd:74:d7:67:33:58:f5:36:09:8e:be:76:08:09:c2:b7:a3:56:
6a:1f:06:76:a5:c8:0b:41:dd:4c:6e:11:11:e0:45:57:d3:b4:
3d:d8:4f:31:77:6b:0f:9e:7e:11:2e:06:95:0b:eb:a2:34:49:
c1:34:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:30 2023 by rpki-client on console-fra.rpki-client.org