Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2z1_890ntGUIlMFR2T2g8J7dAE.roa
File: k2z1_890ntGUIlMFR2T2g8J7dAE.roa (raw, json)
Hash identifier: DAnz64agb3r9TQq1fQwP5Z7Mxg6aQyelJHCUOj5ejhw=
Subject key identifier: 93:6C:F5:FF:CF:74:9E:D1:94:22:53:05:47:64:F6:83:C2:7B:74:01
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018C96028DA1E8E2D6DCD889216F4B1F156C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2z1_890ntGUIlMFR2T2g8J7dAE.roa
Signing time: Sat 23 Dec 2023 09:29:58 +0000
ROA not before: Sat 23 Dec 2023 09:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 146.19.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:02:8d:a1:e8:e2:d6:dc:d8:89:21:6f:4b:1f:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Dec 23 09:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=936cf5ffcf749ed1942253054764f683c27b7401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:88:53:26:e7:a2:66:d0:e9:f3:e7:81:94:
51:d5:55:c0:75:d2:4d:4a:a3:49:46:3a:98:5b:66:
e0:12:3c:dc:0f:ad:7f:fc:cb:73:e8:5d:a5:0c:f6:
0d:71:4a:ea:2c:cd:ae:05:8c:59:f3:66:a2:16:10:
8f:ec:b0:87:cf:d4:8a:95:af:e9:14:ec:90:0c:63:
4e:19:b5:31:d1:3c:6b:78:af:ec:89:18:bf:74:50:
f6:3d:38:99:1a:b8:d9:1f:b9:b5:08:07:ca:ee:4f:
e4:3c:b0:b0:55:0a:da:eb:9f:63:2a:78:14:ec:99:
c7:59:23:36:8f:55:9c:ce:eb:c6:60:c9:aa:90:68:
3b:88:82:4f:3b:37:9b:0a:6f:aa:88:d5:84:5c:a7:
db:ed:66:9b:04:14:d0:74:9d:c3:05:f4:61:95:b1:
6f:fd:59:8b:67:c3:e1:c0:91:f7:4c:d0:c0:0a:49:
52:4a:d1:59:56:a9:f1:2d:0f:07:1c:a3:1f:2a:9d:
c8:76:1e:39:79:c9:5a:69:31:eb:5e:03:9a:65:8a:
11:05:c5:cc:69:69:57:4d:b0:2e:95:76:0e:ab:aa:
e1:7f:1d:cb:1a:df:3e:15:03:d6:13:a1:b6:bf:79:
2a:c6:34:32:1b:59:c8:91:8b:43:af:64:5a:5b:e1:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:F5:FF:CF:74:9E:D1:94:22:53:05:47:64:F6:83:C2:7B:74:01
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2z1_890ntGUIlMFR2T2g8J7dAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.205.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8d:22:8c:b3:fa:51:fd:81:c8:14:ad:55:b3:77:6a:3f:74:
e3:80:5c:19:cc:ce:51:44:7b:a4:7c:0a:89:64:0b:fa:b4:6a:
79:0d:5f:3c:24:f7:a1:60:ac:28:e3:da:2c:ea:34:73:a7:a0:
98:b9:7e:3f:29:6a:bb:7d:ba:38:05:69:ed:09:21:ca:6a:26:
ef:7c:f2:8a:e8:57:b6:ee:99:90:12:51:71:ce:46:6a:5a:e8:
38:d3:01:85:32:42:65:04:3a:f8:d1:8e:03:d6:7f:2b:12:cc:
f0:54:dc:8a:0f:92:80:74:39:ff:f6:0c:47:06:09:17:79:95:
0f:0e:f9:cb:58:a8:4e:ef:f1:9c:01:66:a5:4b:35:45:b4:b6:
20:b5:54:7f:a4:19:82:7e:d6:40:ce:1d:ea:68:73:25:39:d9:
e4:ea:d6:ad:dc:bd:e8:d9:1e:ef:d0:24:77:7e:61:50:53:f1:
d7:7e:e5:ad:7e:8c:19:1c:29:83:74:f3:b1:34:70:83:06:af:
bc:fe:cd:18:92:b1:86:34:78:40:12:27:24:87:20:7c:53:76:
73:ac:99:0b:cd:d7:0d:9a:b8:c6:e9:11:73:37:7d:42:2e:87:
83:20:d8:a7:60:9e:9f:c7:f3:d7:60:8b:73:38:a8:d4:67:fb:
2d:4a:f2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org