Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/hvavdM1M13l5fW2Sec55XEbALKI.roa
File: hvavdM1M13l5fW2Sec55XEbALKI.roa (raw, json)
Hash identifier: o9itwSUDrj+w+h90kHToAAVwrrCOcB/Dk/uhPA62N/w=
Subject key identifier: 86:F6:AF:74:CD:4C:D7:79:79:7D:6D:92:79:CE:79:5C:46:C0:2C:A2
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018C6C9B9BFDF8A6D11AAAC9D6A10CB2E5FD
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/hvavdM1M13l5fW2Sec55XEbALKI.roa
Signing time: Fri 15 Dec 2023 08:33:06 +0000
ROA not before: Fri 15 Dec 2023 08:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:9b:9b:fd:f8:a6:d1:1a:aa:c9:d6:a1:0c:b2:e5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Dec 15 08:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86f6af74cd4cd779797d6d9279ce795c46c02ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:24:f8:74:b2:9d:3f:2a:69:ab:f0:97:33:
c6:bb:9a:14:dd:23:11:4c:b9:06:71:f6:bf:17:d9:
ca:de:93:7f:a6:46:8b:bd:70:39:79:6c:3a:a4:18:
4e:6d:ea:d8:8f:26:5f:1e:a5:3e:9b:17:3d:70:ad:
93:e8:fe:01:cc:25:40:0a:c7:9e:93:9e:0f:3a:4d:
e9:d9:a9:8e:d3:16:81:ad:f9:6d:7d:09:8b:98:5e:
38:38:5c:8a:fb:95:f7:e2:4d:da:9a:de:ba:d1:7a:
f9:be:27:2b:fc:ed:c3:df:a6:48:a5:2b:35:9d:6f:
5f:63:02:c2:dc:07:56:84:b9:71:31:2c:e6:f3:a1:
6e:bb:f6:2e:5c:03:57:81:d4:e4:8e:df:9f:8a:af:
22:ff:95:35:bb:ae:26:ab:6b:65:40:0b:bc:03:c6:
46:03:a2:5b:b3:ab:d6:8e:93:50:d5:ea:d2:b9:40:
ca:c2:f4:89:ce:05:34:6e:70:48:38:90:e7:59:d3:
9a:64:fc:87:9b:da:62:d6:58:29:c7:d2:82:a0:d6:
c1:02:d1:78:61:a4:76:73:32:79:f3:91:5e:09:8e:
bf:7a:bb:06:49:a0:31:ad:97:22:5f:11:f7:01:f1:
35:ca:6e:22:85:21:1b:4b:7f:09:28:df:ee:79:21:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:AF:74:CD:4C:D7:79:79:7D:6D:92:79:CE:79:5C:46:C0:2C:A2
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/hvavdM1M13l5fW2Sec55XEbALKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
Signature Algorithm: sha256WithRSAEncryption
54:be:ee:a1:1d:8e:92:a6:b4:7a:31:04:2c:19:fc:01:89:c0:
e4:ad:d8:10:7c:38:d3:b2:c3:37:ee:d1:82:6e:2f:54:01:37:
bf:1a:f4:9e:d4:b5:75:fa:ca:d6:7e:ac:28:97:04:1c:55:25:
0d:e0:76:9c:16:46:5f:4a:1b:de:3c:a7:fb:b8:65:63:6a:1f:
73:ae:46:b1:ac:b8:f7:4e:9d:97:a2:b4:8c:31:2f:2a:8b:44:
38:3e:27:62:f8:53:53:fb:00:c4:fa:e4:c7:b6:a9:32:64:cb:
72:09:d7:de:be:8c:1e:8a:21:34:57:35:07:b7:14:4b:a9:9d:
48:f9:8b:58:53:93:13:0c:29:68:f4:a2:9b:b2:d4:17:2b:c9:
52:3a:fb:64:f8:40:ff:b0:5e:0f:90:81:50:59:9a:35:b1:62:
84:2d:55:ac:03:cd:47:7e:c2:87:26:ae:e7:a1:3a:6a:29:6a:
d2:0d:96:da:f8:2d:27:14:94:0d:e3:a4:23:62:49:8e:f4:d7:
34:1c:8d:ca:a7:32:c7:31:29:51:89:cc:6e:0d:5b:ac:93:42:
be:62:57:4e:77:4b:b5:75:0c:bb:da:9b:7a:6a:33:51:26:6d:
e5:e8:99:8f:7e:41:c7:e8:c0:fd:34:45:cd:ee:00:50:ac:c9:
d1:df:5f:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxsm5v9+KbRGqrJ1qEMsuX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjMxMjE1MDgzMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmY2YWY3NGNkNGNkNzc5Nzk3ZDZkOTI3OWNlNzk1YzQ2YzAyY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Ek+HSynT8qaavwlzPGu5oU3SMR
TLkGcfa/F9nK3pN/pkaLvXA5eWw6pBhOberYjyZfHqU+mxc9cK2T6P4BzCVACsee
k54POk3p2amO0xaBrfltfQmLmF44OFyK+5X34k3amt660Xr5vicr/O3D36ZIpSs1
nW9fYwLC3AdWhLlxMSzm86Fuu/YuXANXgdTkjt+fiq8i/5U1u64mq2tlQAu8A8ZG
A6Jbs6vWjpNQ1erSuUDKwvSJzgU0bnBIOJDnWdOaZPyHm9pi1lgpx9KCoNbBAtF4
YaR2czJ585FeCY6/ersGSaAxrZciXxH3AfE1ym4ihSEbS38JKN/ueSFCqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIb2r3TNTNd5eX1tknnOeVxGwCyiMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvaHZhdmRNMU0xM2w1ZlcyU2VjNTVYRWJBTEtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNbMA0G
CSqGSIb3DQEBCwUAA4IBAQBUvu6hHY6SprR6MQQsGfwBicDkrdgQfDjTssM37tGC
bi9UATe/GvSe1LV1+srWfqwolwQcVSUN4HacFkZfShvePKf7uGVjah9zrkaxrLj3
Tp2XorSMMS8qi0Q4Pidi+FNT+wDE+uTHtqkyZMtyCdfevoweiiE0VzUHtxRLqZ1I
+YtYU5MTDClo9KKbstQXK8lSOvtk+ED/sF4PkIFQWZo1sWKELVWsA81HfsKHJq7n
oTpqKWrSDZba+C0nFJQN46QjYkmO9Nc0HI3KpzLHMSlRicxuDVusk0K+YldOd0u1
dQy72pt6ajNRJm3l6JmPfkHH6MD9NEXN7gBQrMnR318+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org