Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/f6MzhkdljiMoD8sivLarLTH0Xqo.roa
File: f6MzhkdljiMoD8sivLarLTH0Xqo.roa (raw, json)
Hash identifier: JrSvoYmi7g0vrK9okpnnTNZpq8+hXqJnaG8XRJu5ODw=
Subject key identifier: 7F:A3:33:86:47:65:8E:23:28:0F:CB:22:BC:B6:AB:2D:31:F4:5E:AA
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 01856F7007F512E376A08BE15062B83B09F2
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/f6MzhkdljiMoD8sivLarLTH0Xqo.roa
Signing time: Sun 01 Jan 2023 22:24:51 +0000
ROA not before: Sun 01 Jan 2023 22:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:70:07:f5:12:e3:76:a0:8b:e1:50:62:b8:3b:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jan 1 22:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa3338647658e23280fcb22bcb6ab2d31f45eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:99:c4:77:07:08:17:50:85:af:8b:d6:1f:
6d:05:e2:31:62:23:6d:7c:a7:04:2e:38:3e:cb:61:
47:d2:89:ea:5d:46:cd:b3:25:33:09:16:23:4f:62:
27:9c:f7:6c:c5:e3:b8:51:bd:c8:3a:ac:eb:5f:6c:
e9:e9:a3:e6:be:08:6c:05:b3:ff:7d:95:ad:d6:e2:
2c:4a:ce:71:5e:ee:6b:29:a1:8d:e4:a0:01:29:37:
74:79:8b:f7:a4:ab:0c:c3:04:1f:44:22:11:23:31:
60:b3:0c:8b:15:ac:b2:fd:69:17:22:3d:60:71:ac:
f0:f3:3b:1d:8a:2a:9e:12:58:b1:42:96:61:b0:70:
69:94:24:cc:bc:9a:30:b7:fa:d8:42:d7:e3:f8:d3:
6a:f7:9e:be:13:11:3d:ce:a7:bd:3f:97:95:99:e2:
8f:89:96:4c:66:4f:7e:3b:5f:30:92:23:21:9c:e9:
63:8e:f3:c8:71:87:69:e6:d8:81:88:c8:09:85:72:
eb:d4:06:a3:dd:d7:96:86:ac:c3:36:ef:26:6d:b0:
90:d8:7c:94:a8:d4:42:8a:11:42:19:ad:ac:5a:0b:
b3:0c:88:7f:06:7b:cb:c7:1c:6c:33:64:e7:2e:11:
a5:e8:97:72:25:36:a5:b9:2d:8e:5c:5b:97:25:b6:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:33:86:47:65:8E:23:28:0F:CB:22:BC:B6:AB:2D:31:F4:5E:AA
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/f6MzhkdljiMoD8sivLarLTH0Xqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.250.0/24
Signature Algorithm: sha256WithRSAEncryption
68:69:09:d3:78:91:ba:64:5b:ce:14:51:a3:23:4b:91:39:02:
53:fa:6d:84:c7:6b:76:eb:97:41:b3:d0:fb:42:6f:94:90:cb:
83:bb:04:51:d9:42:7e:29:93:70:94:33:96:8f:dc:f4:44:51:
a7:d6:26:56:65:15:83:56:50:76:e1:d5:e0:9d:97:f3:92:dd:
16:9e:46:3d:68:c5:02:75:c6:e9:1d:6c:42:31:03:93:b1:0b:
5d:62:d2:41:8d:15:af:68:e9:ca:13:bc:2f:12:31:93:91:0f:
ef:7b:77:83:bb:e8:3b:05:5c:63:ed:8d:cd:34:9e:32:a8:cb:
e3:bc:8d:6c:c3:b9:52:d4:bb:36:e7:73:ab:e2:b3:d0:8b:04:
fd:26:e0:ef:54:dd:c9:90:2b:1f:f4:0a:4a:1a:1e:fa:a2:32:
08:2d:5f:7c:aa:85:d8:cd:a0:36:95:2b:5b:08:9c:b9:70:5d:
27:f3:57:48:cf:29:89:b8:5c:ed:ba:d0:08:46:b8:86:34:e7:
50:28:92:ca:09:f3:09:79:2d:d2:f4:0a:ac:57:10:30:97:8f:
9b:94:10:ff:cf:05:a9:01:b1:59:96:b6:0f:48:89:51:18:4a:
c3:3d:eb:2b:42:5c:d6:a6:de:7e:b7:4e:13:fe:9b:8e:4a:c5:
ca:65:59:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:55 2024 by rpki-client on console-fra.rpki-client.org