Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/CTzL0rbgTG_fJPKgRVEKpm75FSg.roa
File: CTzL0rbgTG_fJPKgRVEKpm75FSg.roa (raw, json)
Hash identifier: q5ijKs3aT3npoR70IX03PWkYT4XGfk94vRTqu2NideA=
Subject key identifier: 09:3C:CB:D2:B6:E0:4C:6F:DF:24:F2:A0:45:51:0A:A6:6E:F9:15:28
Certificate issuer: /CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Certificate serial: 01857315D2507F7B5C273F969003D458C27D
Authority key identifier: 2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/CTzL0rbgTG_fJPKgRVEKpm75FSg.roa
Signing time: Mon 02 Jan 2023 15:24:47 +0000
ROA not before: Mon 02 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44019
IP address blocks: 146.19.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:d2:50:7f:7b:5c:27:3f:96:90:03:d4:58:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d4c93ae051ce26cfbc87efe08e109e4b2cee0b2
Validity
Not Before: Jan 2 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=093ccbd2b6e04c6fdf24f2a045510aa66ef91528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f1:59:6e:24:79:4e:34:d6:ff:78:28:86:0d:
c1:71:1f:1d:6a:f6:11:4f:6e:d1:d4:ac:45:8d:80:
b6:11:c7:a5:6c:ac:92:62:a4:52:3c:8b:e4:a3:d1:
21:44:b3:81:54:c3:fb:10:da:00:b4:8b:62:b8:10:
27:69:ef:8d:5e:62:30:67:f7:17:dc:4b:b6:c1:3d:
21:b5:1e:43:ad:5d:b3:0f:81:2e:9f:fa:69:96:32:
7a:11:0d:47:a2:da:70:37:e4:8e:9a:db:09:73:28:
67:b7:c1:86:02:4e:0c:cd:2f:4a:00:b6:99:63:7f:
5e:66:d5:36:c7:3f:56:08:d4:06:ef:2b:75:cc:1e:
ee:d1:1c:21:7e:e5:80:71:21:4a:46:71:bb:d1:b3:
19:86:4c:42:71:ac:81:24:6c:b1:94:a5:18:f6:f4:
0b:4a:ed:a9:3d:2a:b8:13:38:98:58:0b:71:fc:a1:
41:72:9f:8f:a6:f9:41:fa:9b:ad:cd:98:41:3a:fe:
73:12:66:b6:d1:41:6f:17:a7:15:c9:c3:5e:b3:37:
28:91:3a:6a:90:67:c4:fc:8f:0e:7d:a3:e7:a9:33:
cb:39:d5:6b:6d:9c:8e:58:1f:ec:20:a3:2a:fa:fc:
f1:3e:1e:4e:98:68:cf:e3:5e:08:0c:78:61:6d:d1:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3C:CB:D2:B6:E0:4C:6F:DF:24:F2:A0:45:51:0A:A6:6E:F9:15:28
X509v3 Authority Key Identifier:
keyid:2D:4C:93:AE:05:1C:E2:6C:FB:C8:7E:FE:08:E1:09:E4:B2:CE:E0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUyTrgUc4mz7yH7-COEJ5LLO4LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/CTzL0rbgTG_fJPKgRVEKpm75FSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee8c1a-e501-4f31-99e9-3a6640360993/1/LUyTrgUc4mz7yH7-COEJ5LLO4LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7d:e4:f0:41:15:68:23:ea:ea:5d:e9:9f:e8:e1:61:22:39:
4a:67:61:86:a3:a2:16:dd:83:1b:be:9f:65:ee:3a:b9:42:25:
1e:f8:27:d0:c3:ff:d1:d9:c8:2f:02:52:6e:f8:46:85:19:19:
7a:82:f5:32:54:f2:a9:07:e2:d7:62:10:86:e0:72:5c:c8:4c:
02:e9:5e:e4:fe:32:72:24:b8:7d:ff:e4:eb:25:e9:b4:55:dd:
28:d0:05:ac:92:ab:05:d3:72:fd:9d:01:97:e3:61:64:71:38:
58:9d:62:b0:b6:58:77:5b:37:a8:c8:34:45:6f:b5:c4:1c:24:
2a:e5:c8:6e:36:02:d6:ce:78:56:83:69:9b:01:82:0a:c8:7b:
d7:65:20:86:e2:77:2b:ce:24:6d:4f:d8:86:4b:79:3d:a7:00:
74:b1:a2:69:82:35:37:93:10:04:be:93:17:6f:a2:a6:b7:a5:
77:40:88:73:d5:01:54:d7:bd:54:15:08:34:91:57:98:3e:e8:
92:07:54:51:52:83:00:f0:b9:15:cc:b6:53:f0:37:bf:bd:26:
99:82:18:cd:c2:08:c0:b8:60:3c:ac:eb:73:06:b7:a5:69:ac:
db:c2:bd:92:60:9a:70:64:e0:82:c0:27:62:5a:6c:1c:0c:25:
1f:d3:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:50 2024 by rpki-client on console-fra.rpki-client.org