Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/g0KY8_VzVQk9DCXSyRfXry0lYFA.roa
File: g0KY8_VzVQk9DCXSyRfXry0lYFA.roa (raw, json)
Hash identifier: ZXlyYbPAmcu2L9gVqSDXNKmuhycAAJWJ+iiWAb5lXMw=
Subject key identifier: 83:42:98:F3:F5:73:55:09:3D:0C:25:D2:C9:17:D7:AF:2D:25:60:50
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018BD36BC537A71D5DCAF1CA025486735DC7
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/g0KY8_VzVQk9DCXSyRfXry0lYFA.roa
Signing time: Wed 15 Nov 2023 14:38:57 +0000
ROA not before: Wed 15 Nov 2023 14:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142299
IP address blocks: 146.19.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:6b:c5:37:a7:1d:5d:ca:f1:ca:02:54:86:73:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Nov 15 14:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834298f3f57355093d0c25d2c917d7af2d256050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:0d:94:36:da:34:46:a5:c4:d4:1a:28:cb:
e6:1b:98:ea:c2:fb:b0:19:7c:f7:d9:36:42:fb:d8:
5e:86:3d:55:ac:b5:48:2b:9b:ab:32:ad:a6:78:ae:
65:81:34:ae:7b:68:7f:a4:14:a7:32:79:61:c1:a9:
dc:66:ec:de:aa:28:84:7f:95:7e:0d:ed:dc:64:65:
84:d3:30:f7:fc:27:a6:d4:85:d7:75:83:c1:8c:70:
c4:42:14:87:cf:fb:16:54:9f:bd:4f:34:8c:67:c1:
e1:d4:27:5d:6d:a3:2b:57:05:55:93:3d:03:28:f5:
8e:13:df:89:13:c4:94:49:0a:51:32:fa:a8:dc:a9:
17:a6:bf:5e:78:4c:25:a0:2e:8a:ac:5d:b8:7d:e8:
e4:b9:df:60:3d:de:e4:fc:b0:24:43:91:d8:bd:cc:
6d:fc:c6:78:ca:39:85:99:86:3e:81:61:17:99:f1:
7a:d4:ef:84:dd:e4:66:0d:fd:a4:98:cf:7b:63:da:
cd:6a:76:70:78:8c:a1:f1:af:45:78:dd:82:f3:5c:
0d:b5:0b:81:d1:bd:4e:58:b7:3f:99:a6:12:37:8d:
c5:3f:66:27:f5:21:df:7d:4f:b8:d0:72:50:69:9a:
2b:68:39:46:cd:d7:fc:c4:6c:b8:74:40:fd:0b:69:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:42:98:F3:F5:73:55:09:3D:0C:25:D2:C9:17:D7:AF:2D:25:60:50
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/g0KY8_VzVQk9DCXSyRfXry0lYFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a7:41:ed:55:e7:63:e7:4a:a6:9d:37:8f:7b:42:e2:7f:32:
e3:c0:72:72:0b:fd:23:f5:94:b1:a1:99:8f:98:a7:df:1d:42:
cc:e9:38:eb:b7:9f:60:23:48:67:1e:7d:6f:2a:8e:83:5a:07:
2b:65:35:a6:5d:e4:d9:01:3a:a7:04:31:06:ed:17:f0:cb:e1:
b5:27:0d:5e:4c:14:12:50:63:aa:58:75:cd:00:02:98:2d:d6:
84:a1:47:3c:5b:1e:55:43:e4:e7:14:61:91:9e:e3:91:45:34:
8b:01:ae:ea:e2:27:36:82:de:51:92:a7:95:73:b3:a7:75:4f:
4e:f8:b8:0f:67:cc:a3:4e:05:d8:41:12:ac:5f:c4:6c:e8:f6:
cc:fa:f2:8d:c4:43:5d:59:2a:5a:b4:e3:23:15:1f:f6:f1:1c:
c8:87:91:18:59:12:b9:52:2a:6f:98:2a:a8:10:5a:89:ea:32:
38:e6:73:c7:ed:6e:80:fb:1d:71:93:3c:e6:fc:87:ff:21:95:
f3:11:fb:2d:e3:ab:45:5f:d3:2d:54:cd:70:b7:be:cb:6a:38:
cd:d6:c4:10:36:7d:3f:13:7c:40:86:96:ba:1d:63:4f:2d:08:
da:48:e4:ee:27:32:40:6c:10:93:ac:74:10:3d:6a:ca:30:31:
60:9a:fd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:21 2024 by rpki-client on console-fra.rpki-client.org