Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/jQz8be7HciS3Rw3RX2qmnDEpWvw.roa
File: jQz8be7HciS3Rw3RX2qmnDEpWvw.roa (raw, json)
Hash identifier: jPZYNw9bzkBEXGE0irU534sbBHa226azvoOR/DF4ySk=
Subject key identifier: 8D:0C:FC:6D:EE:C7:72:24:B7:47:0D:D1:5F:6A:A6:9C:31:29:5A:FC
Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial: 018572B4322DBE1AA734D33BB29F8B3D2157
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/jQz8be7HciS3Rw3RX2qmnDEpWvw.roa
Signing time: Mon 02 Jan 2023 13:38:09 +0000
ROA not before: Mon 02 Jan 2023 13:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51539
IP address blocks: 46.30.226.0/23 maxlen: 23
46.30.224.0/21 maxlen: 21
46.30.228.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:32:2d:be:1a:a7:34:d3:3b:b2:9f:8b:3d:21:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Validity
Not Before: Jan 2 13:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d0cfc6deec77224b7470dd15f6aa69c31295afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:3c:3d:f0:5c:f3:67:9f:3a:ca:96:70:78:
4b:52:b6:47:58:43:c3:03:8c:67:f3:29:7d:15:8e:
d0:e8:d9:1d:3a:a4:09:07:8c:9e:a7:6c:e5:f8:5d:
22:27:7c:9a:7a:1d:42:14:90:9b:fd:13:ac:f2:93:
bf:cf:27:7f:a9:ed:c7:83:ed:4e:c0:8d:59:72:fc:
ad:a3:f1:0b:69:54:2e:b1:01:09:38:54:1e:e8:7d:
2e:cc:2c:c8:27:c6:a5:99:fb:67:ba:04:a0:f2:65:
8c:4f:79:7e:3e:a8:65:98:b4:aa:c5:69:24:4d:fc:
6c:ed:d2:1b:8e:1b:01:91:54:74:ae:22:de:29:e7:
37:ce:6e:a6:ee:af:e0:84:8d:e3:f8:d5:70:c0:8a:
73:d3:c2:39:2d:c7:ea:bc:4e:4f:f1:ef:52:dc:ff:
32:f0:f0:b1:3d:2b:e3:26:38:ee:0c:2e:db:a4:07:
08:e5:b3:c0:3c:f0:b8:6e:59:e2:8f:ad:32:89:e5:
5b:40:47:34:0a:f9:fc:e6:24:d1:76:9c:af:83:94:
f2:8e:a2:fc:6f:a9:28:72:79:28:c1:c8:c4:12:3a:
e0:a6:28:02:44:ac:8c:ee:f4:17:39:f2:fb:95:5d:
e9:7b:98:3b:f8:db:15:44:5b:3e:e5:4f:06:30:bc:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0C:FC:6D:EE:C7:72:24:B7:47:0D:D1:5F:6A:A6:9C:31:29:5A:FC
X509v3 Authority Key Identifier:
keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/jQz8be7HciS3Rw3RX2qmnDEpWvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:b8:fd:31:a2:40:0f:ed:ef:a8:fe:96:0f:48:5a:ac:16:af:
e8:37:83:7b:4f:6a:16:26:64:29:41:0b:fe:fe:1c:9f:7c:99:
b1:7e:99:35:26:18:e5:6f:16:7e:67:53:01:45:54:1a:71:9d:
8f:25:79:f3:50:a3:1d:1b:85:95:0e:cc:71:b8:f0:b3:b0:ae:
23:9c:3e:c4:ea:12:6d:ca:f9:46:3e:de:f1:83:5a:5a:43:73:
47:45:07:4d:56:15:e2:5a:37:b2:c3:28:49:d4:1a:c8:dc:03:
9f:2e:bc:12:61:23:1d:7c:c9:86:ff:ca:fd:e6:c3:62:d4:b1:
27:67:44:7c:f2:82:95:84:05:32:7e:3a:1c:42:b1:fc:51:30:
b4:b6:6f:da:b9:ae:09:b9:cc:55:9c:db:57:be:98:71:23:3d:
90:be:f9:33:97:e7:d4:28:23:9a:a9:2b:87:fa:b0:3b:05:78:
ab:16:49:29:74:95:8f:9e:5a:1f:7c:32:bd:a2:49:f4:f4:e6:
01:e9:b0:60:17:af:5c:05:a0:52:6a:57:03:ac:1c:f9:ef:a8:
ae:55:45:61:f1:91:29:2c:51:0d:e9:ad:97:3f:5f:ca:bd:01:
9b:45:50:15:e4:4c:e1:98:5a:7b:fe:f2:32:1f:8e:1e:28:c3:
2b:82:57:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:10 2024 by rpki-client on console-ams.rpki-client.org