Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GxOHPTZgxYBPDHZ0H8zdFu-Bbrg.roa
File: GxOHPTZgxYBPDHZ0H8zdFu-Bbrg.roa (raw, json)
Hash identifier: MsspdwzyHvgFjvzTLhWoxpoCgcVT7q1j5RPP/Lnnr2s=
Subject key identifier: 1B:13:87:3D:36:60:C5:80:4F:0C:76:74:1F:CC:DD:16:EF:81:6E:B8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BFD9F5CAB97768E4BA8FDB122AC5296FA
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GxOHPTZgxYBPDHZ0H8zdFu-Bbrg.roa
Signing time: Thu 23 Nov 2023 19:19:21 +0000
ROA not before: Thu 23 Nov 2023 19:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 146.19.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:9f:5c:ab:97:76:8e:4b:a8:fd:b1:22:ac:52:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 23 19:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b13873d3660c5804f0c76741fccdd16ef816eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:13:b0:05:00:6f:f7:e0:3a:f5:bb:bc:cc:0c:
1b:fe:22:10:63:ea:62:73:3c:cf:69:67:55:c6:df:
1d:a0:2b:23:08:33:65:ad:8a:32:15:67:49:21:94:
9d:bc:7a:1d:8e:07:1c:f9:ea:fb:a7:c4:9d:29:f3:
58:82:ec:5f:0a:9d:0e:ed:f5:3d:82:75:81:45:b4:
85:ea:54:20:a8:fb:12:e2:9b:db:c8:e4:a5:7a:61:
30:ab:83:d1:e5:72:53:09:bf:c9:9f:96:79:2b:30:
df:ff:fd:3f:02:ed:23:ae:75:f9:6f:45:81:c3:67:
fe:89:5e:92:e6:0a:39:4c:70:39:b1:3b:29:e5:f4:
3c:04:9d:4a:41:5f:07:98:8f:62:c0:2d:df:cd:03:
d5:9d:0f:b8:cb:f5:7d:e7:01:4b:6b:47:d7:3b:10:
ae:1e:03:c4:26:1a:9c:0b:ca:3a:93:79:4d:30:b3:
2e:d0:95:fa:8b:bc:9c:13:3a:86:72:a7:be:a9:55:
e7:5e:0d:73:b5:52:14:57:3f:7b:d7:66:c9:ad:5f:
72:a0:c2:66:73:6c:e8:b1:04:eb:c1:b8:8c:7c:96:
30:ca:43:19:4f:d7:17:6e:95:f2:1e:53:e1:31:a6:
6f:e2:87:60:5c:76:b7:3b:a1:7c:1a:83:6c:b8:33:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:13:87:3D:36:60:C5:80:4F:0C:76:74:1F:CC:DD:16:EF:81:6E:B8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/GxOHPTZgxYBPDHZ0H8zdFu-Bbrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fa:c5:24:b9:bd:10:88:b9:5a:1d:7b:1f:93:b6:d7:21:1f:
fb:3e:32:8f:c5:e1:16:c5:18:5b:58:f7:a3:be:29:87:51:56:
0b:22:25:3e:4d:8b:e1:2e:70:05:15:bc:e4:da:41:dc:38:c8:
20:1d:91:f4:25:5e:04:62:c3:63:31:3e:a6:7d:5b:d3:b3:c3:
46:84:73:cd:e8:e5:67:0a:be:33:72:ba:7a:3d:9a:b8:cd:6e:
1b:74:44:4a:83:ef:f1:ff:3f:13:3a:79:b0:8a:cc:6b:9b:84:
b7:9a:44:09:5c:d2:94:ec:d9:3a:64:2f:aa:f7:0d:79:b9:4e:
50:9f:8e:a6:df:4a:9b:68:44:1c:ee:89:8a:58:e9:0c:dd:d6:
ec:28:0c:1e:d3:2c:10:32:90:d0:32:6b:91:5e:3f:9d:b7:63:
a9:02:f4:79:09:ca:f2:c3:f0:e8:5d:55:42:1a:b5:20:bc:1e:
01:df:92:c6:76:40:81:62:30:77:c4:7b:79:5e:16:8a:d3:8c:
50:1a:84:84:8f:8b:10:9a:be:6e:c4:1d:42:c5:b9:98:27:98:
17:4a:b0:15:13:b8:86:21:b3:c4:de:46:15:89:09:2b:6a:2d:
8b:ed:b2:e6:dd:49:27:20:4a:c7:71:19:73:98:b8:66:21:88:
74:e3:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org