Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa
File: JpjgLm5LX2GuJwiUY-QED7_5stI.roa (raw, json)
Hash identifier: 76F8eBUNTG9l10ZR1VKmCo0wEgAvOAipGKBsDasoYis=
Subject key identifier: 26:98:E0:2E:6E:4B:5F:61:AE:27:08:94:63:E4:04:0F:BF:F9:B2:D2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B44987EB52DF5DA039375AB4A140837B9
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa
Signing time: Wed 18 Oct 2023 21:02:06 +0000
ROA not before: Wed 18 Oct 2023 21:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:98:7e:b5:2d:f5:da:03:93:75:ab:4a:14:08:37:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 18 21:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2698e02e6e4b5f61ae27089463e4040fbff9b2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dc:2e:a8:d4:27:43:7f:e5:31:e5:3b:03:fa:
79:f7:b8:58:a2:6c:3d:ab:1a:7a:61:69:32:cf:65:
63:c3:3d:9b:41:80:ca:21:5e:dd:8b:97:35:c1:ab:
ef:fd:e0:3e:f4:42:39:82:c8:a8:d7:b0:dd:40:eb:
cc:ff:32:73:3a:8e:a0:b2:c0:20:f8:9f:6f:e7:91:
e9:e8:50:51:b2:40:b2:9d:04:43:18:0a:18:8f:61:
89:50:e1:6f:5a:60:7c:ab:24:20:6e:3b:3a:d3:c5:
1f:af:a4:5e:ed:32:ed:de:da:23:e1:06:2b:b2:25:
4c:1f:b5:9c:55:5f:49:21:d7:fc:88:4e:2e:b5:f3:
d5:33:fb:2f:c1:73:9a:bf:6e:6f:5e:51:2b:c5:61:
b1:9a:4e:a4:c0:78:e6:a0:c7:e8:31:f3:17:cf:59:
c2:b3:79:cb:9a:f8:b1:58:87:d4:59:35:fc:d2:d1:
63:85:ff:5d:94:c2:97:78:15:2b:c8:96:8a:f4:19:
63:79:7e:11:68:0b:37:18:b1:0f:13:6e:7a:47:78:
e4:53:12:a9:64:55:1f:7e:91:70:15:d4:ae:22:c1:
a0:6d:a3:20:09:19:2f:69:1c:c9:01:01:42:f5:f3:
ff:21:05:5a:91:6a:2c:1c:35:fe:3e:a3:0f:14:60:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:98:E0:2E:6E:4B:5F:61:AE:27:08:94:63:E4:04:0F:BF:F9:B2:D2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/JpjgLm5LX2GuJwiUY-QED7_5stI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
07:b1:7e:7f:6d:19:a9:19:32:48:a6:81:d1:1f:30:d9:a5:9c:
68:20:e4:a0:00:05:9d:5a:9a:91:29:62:f9:17:92:61:06:bb:
c3:bc:5d:56:c1:c3:08:cf:b6:53:cb:60:8f:88:7c:27:54:a7:
68:9e:bc:77:ae:2f:60:21:5a:85:a7:61:56:7f:f5:8c:70:24:
08:8b:92:67:d4:f4:93:90:99:dc:43:18:c7:2f:ba:d6:32:16:
3a:b9:bf:87:ab:98:db:0e:ad:90:ba:26:f4:4b:6a:c4:9b:a2:
85:3b:1a:2a:cc:b6:79:85:db:e4:00:cb:c8:09:f5:de:45:24:
36:f6:95:fa:32:78:70:57:cf:37:87:25:db:a2:3a:14:ea:67:
2a:79:c2:29:79:0f:76:b7:50:1f:f6:24:f7:82:39:e2:25:bd:
66:65:0d:68:b7:9f:99:9f:aa:6a:97:c3:7d:6b:da:15:60:d6:
f3:5f:41:c2:9b:5a:fb:f8:a8:86:5b:c1:f5:3e:91:32:4b:e4:
82:76:71:b7:50:5b:ed:19:22:59:e8:3b:7f:45:6d:c3:34:c2:
31:f5:25:d4:a1:a1:8a:78:5b:fe:c1:80:13:73:94:ae:3d:ad:
f4:76:09:04:5d:e3:90:84:38:b0:f0:24:54:3a:31:71:24:51:
4c:5d:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:07 2024 by rpki-client on console-ams.rpki-client.org