Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/e-j-AyFWFJ-zVFLJeICTErkbWLg.roa
File: e-j-AyFWFJ-zVFLJeICTErkbWLg.roa (raw, json)
Hash identifier: thU3hZWF3thzR24aYqe9eYqelRVT0qtzI+tL+x7EI8s=
Subject key identifier: 7B:E8:FE:03:21:56:14:9F:B3:54:52:C9:78:80:93:12:B9:1B:58:B8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99A24FC737DBD80F96FB84618B7F79B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/e-j-AyFWFJ-zVFLJeICTErkbWLg.roa
Signing time: Mon 13 Nov 2023 16:53:24 +0000
ROA not before: Mon 13 Nov 2023 16:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 146.19.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9a:24:fc:73:7d:bd:80:f9:6f:b8:46:18:b7:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be8fe032156149fb35452c978809312b91b58b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:07:36:c3:22:bb:3a:ff:41:a8:c8:59:b7:
c3:77:77:d5:c6:ef:fb:32:5d:96:95:de:fd:10:7a:
61:e0:7a:28:77:c6:aa:8a:ab:62:ea:45:f6:47:d9:
2d:d5:cf:7b:73:78:d0:45:65:71:22:b0:cf:75:9f:
96:ab:77:f8:8f:cb:a4:16:66:4c:26:b0:28:5e:20:
20:f0:3f:3b:d5:33:0d:ac:7b:f1:29:43:24:57:15:
ea:15:ed:16:4e:fd:83:c7:ab:86:fd:2f:5c:9f:f5:
d7:63:fc:bb:0a:0f:3f:15:19:b7:af:ee:a2:22:81:
bf:cc:11:5c:b2:22:c8:59:9c:0c:aa:22:5b:00:e4:
81:88:0d:11:39:90:09:ab:96:d2:4d:b4:27:ee:50:
09:55:56:91:b8:b9:3b:cf:2a:49:96:44:2d:1e:ce:
a9:31:0e:99:da:e8:b8:53:3b:99:c7:b3:c4:7b:b0:
81:7f:7d:c0:b6:dd:06:75:bc:ee:e4:d4:6b:d4:f0:
c0:63:35:23:0f:f3:39:5f:8b:9a:bb:83:74:0a:d4:
53:c2:8a:e9:c2:2b:76:4a:0d:f6:8b:36:a1:52:a2:
5c:b7:90:7a:af:d5:fe:15:32:c6:d8:ad:ac:e5:21:
c9:4a:65:bb:47:1d:36:02:ef:be:59:c8:e4:64:e3:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E8:FE:03:21:56:14:9F:B3:54:52:C9:78:80:93:12:B9:1B:58:B8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/e-j-AyFWFJ-zVFLJeICTErkbWLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c3:b5:6e:cf:5d:41:66:fa:e0:e3:c9:16:1e:d0:41:7c:14:
3c:bd:9a:09:b2:7e:9e:3c:e4:7e:80:95:79:a4:14:94:29:26:
cc:f2:1b:b4:b1:62:01:e8:37:d2:8e:70:a3:3e:e2:bd:13:b2:
76:cb:36:f2:ab:b1:b8:80:11:47:c4:05:51:ba:de:29:a9:be:
63:b1:a9:05:a4:3a:5e:28:78:e2:05:ad:c7:42:e5:ab:52:c3:
98:c0:87:f0:61:11:61:e7:a4:c7:9c:f5:38:d3:fd:80:56:34:
73:27:8e:92:7c:4d:cd:70:49:19:07:73:00:62:13:19:74:7d:
88:72:ee:db:53:5b:e5:bc:7d:9e:8e:86:ed:8e:fe:7e:c7:4e:
89:06:e7:58:b0:b2:c1:5e:c2:8d:ec:6a:41:ef:23:62:76:14:
3d:be:e0:d5:92:07:7e:a7:9e:26:e2:b5:99:c1:f0:67:fb:19:
ef:bd:51:a3:48:1e:fa:47:f9:23:1b:4a:2e:b7:fe:72:5e:0c:
61:5d:5d:24:e9:92:73:c9:7c:e6:9c:65:52:51:f4:b3:c0:fb:
32:56:2e:26:7e:c9:f6:79:ce:da:46:38:56:81:70:05:8f:e7:
22:50:69:b1:45:11:ae:a6:93:34:7e:ef:0a:54:3e:54:9c:91:
a0:b9:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:21 2024 by rpki-client on console-ams.rpki-client.org