Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lWypkBusb0rsyBFntu_8lAvNcZk.roa
File: lWypkBusb0rsyBFntu_8lAvNcZk.roa (raw, json)
Hash identifier: mFWbrQLSOoyE+ay9k2BhIXS16vteIpJd7nrCFX7O0/o=
Subject key identifier: 95:6C:A9:90:1B:AC:6F:4A:EC:C8:11:67:B6:EF:FC:94:0B:CD:71:99
Certificate issuer: /CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Certificate serial: 018570304F86619BBF8FA8FCD778F1F892A5
Authority key identifier: 0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lWypkBusb0rsyBFntu_8lAvNcZk.roa
Signing time: Mon 02 Jan 2023 01:54:52 +0000
ROA not before: Mon 02 Jan 2023 01:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 146.19.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4f:86:61:9b:bf:8f:a8:fc:d7:78:f1:f8:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Validity
Not Before: Jan 2 01:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=956ca9901bac6f4aecc81167b6effc940bcd7199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:6e:fc:e0:1f:80:97:86:b2:21:b3:0b:3f:
3e:1c:c1:b7:a7:b9:50:a5:80:55:4b:43:81:b8:30:
0d:0c:68:b0:28:8e:a1:7d:bc:30:90:89:ae:ac:a9:
48:8f:20:c4:80:30:c3:30:16:e1:32:b1:57:c4:5d:
d8:5f:8e:b3:98:86:2f:98:92:56:04:f1:38:14:06:
a4:87:a0:fd:a4:59:60:9d:9f:ab:6e:38:7c:8c:2d:
68:81:17:3c:ce:ab:53:68:38:4e:90:a6:de:a7:f1:
01:48:9c:8b:a9:6d:97:a5:6e:30:17:6c:ad:1e:46:
8f:c0:c6:1c:01:8d:00:15:40:c9:cd:a1:2e:b9:1d:
4f:27:47:05:cd:c7:de:1f:6b:d0:7a:2d:d6:05:78:
47:ee:20:89:a3:a9:b4:01:16:66:a6:c1:4e:c8:1a:
d2:65:5b:6d:9a:1d:f3:7a:fc:c2:25:24:e3:bc:23:
5e:4c:f0:f1:ba:8c:13:38:ff:d9:24:dc:01:41:3a:
cc:9b:19:8d:a0:8f:3b:27:da:1c:dd:48:06:9a:72:
e1:24:a4:f4:e8:01:95:d8:ed:a7:e5:8f:43:2d:cb:
6a:93:17:68:6e:a7:78:05:11:57:e2:a4:94:29:ce:
2a:d9:af:17:18:0f:a3:e1:01:8c:a1:8d:b5:ed:b7:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:A9:90:1B:AC:6F:4A:EC:C8:11:67:B6:EF:FC:94:0B:CD:71:99
X509v3 Authority Key Identifier:
keyid:0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lWypkBusb0rsyBFntu_8lAvNcZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.254.0/24
Signature Algorithm: sha256WithRSAEncryption
09:03:d7:e9:a0:6b:e8:15:86:fc:51:6f:af:4c:3c:d0:77:6e:
05:32:d4:66:a7:e7:79:d4:7a:af:87:20:3d:ce:b5:51:67:f5:
51:08:9e:30:6c:92:72:3e:5b:ad:ea:a5:5b:f4:3f:91:14:25:
48:e1:55:25:dd:23:7e:ea:13:59:b6:91:94:d2:bc:68:f5:11:
f9:a4:41:6c:08:2f:b3:e5:33:74:b7:a2:e0:2a:60:d8:ba:7e:
ad:9b:56:69:b9:23:32:64:bb:bb:fc:d5:8e:a5:13:e8:f0:c6:
25:a5:a4:c1:6e:46:63:85:67:1e:77:69:65:d6:2a:87:92:32:
3a:46:f8:42:7b:09:5e:46:2d:79:39:48:98:e7:4b:b8:6c:1f:
6b:21:29:ca:85:ad:ed:aa:f2:b9:4b:3e:53:b0:05:cf:61:2e:
30:7d:f1:15:f1:c4:b5:0b:7b:fd:cf:9a:43:4d:64:c6:e0:47:
ec:f9:2a:ba:68:c8:ed:8a:87:3e:8d:80:80:ad:30:d7:ad:cb:
b4:57:05:a8:56:7c:35:6d:cb:77:8f:a6:3d:c2:ce:33:f3:3b:
99:2b:70:49:1e:71:19:db:44:e9:21:4a:5a:02:96:eb:47:86:
d6:7b:25:8d:31:57:ac:e8:73:06:b4:a7:d4:4b:57:dc:b1:51:
51:8c:a7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 16:51:13 2023 by rpki-client on console-ams.rpki-client.org