Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/rO2OAithDMpHQodYFDxTF86Rlsc.roa
File: rO2OAithDMpHQodYFDxTF86Rlsc.roa (raw, json)
Hash identifier: 77CL+FsLcdMT/beawUvTTU1hWlwHSYTeRncthe/NOao=
Subject key identifier: AC:ED:8E:02:2B:61:0C:CA:47:42:87:58:14:3C:53:17:CE:91:96:C7
Certificate issuer: /CN=3a178048d127af3433f17bccda5d07d657eca688
Certificate serial: 018570F09A4F6552C6468C308D9D243B40E4
Authority key identifier: 3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/rO2OAithDMpHQodYFDxTF86Rlsc.roa
Signing time: Mon 02 Jan 2023 05:24:54 +0000
ROA not before: Mon 02 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:9a:4f:65:52:c6:46:8c:30:8d:9d:24:3b:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178048d127af3433f17bccda5d07d657eca688
Validity
Not Before: Jan 2 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aced8e022b610cca47428758143c5317ce9196c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:25:4b:68:8a:ac:9c:1b:0e:37:89:ef:01:
4d:21:af:0e:cb:ee:c8:50:59:a0:b3:58:26:05:aa:
99:89:d4:d3:8d:28:3b:15:82:63:b1:0b:bc:52:a8:
ed:0b:04:ea:8e:f0:3b:03:d6:7f:1e:82:4d:39:f5:
8d:77:7d:41:d8:c7:12:6f:72:ae:46:ab:3e:66:e4:
08:7d:f2:db:3e:88:51:99:1a:56:f9:90:76:ac:b3:
77:6c:62:a9:3a:eb:59:a6:1b:23:43:59:57:8a:84:
c9:06:75:41:1a:cd:53:9d:3c:69:a6:70:7a:96:87:
d0:b0:f0:e7:88:44:16:e6:05:b1:9d:54:fd:3a:a1:
04:bf:df:d5:ee:37:c5:b6:a7:29:19:87:86:11:db:
dc:28:ba:e2:f8:29:54:95:aa:b0:80:67:b5:88:3e:
25:4b:7b:4a:70:37:5e:c7:ba:ad:78:1f:c6:07:27:
85:42:33:82:f7:68:1f:90:9e:d0:dd:cf:78:76:f8:
52:dd:84:d0:29:70:f6:1b:64:af:e2:31:97:31:6e:
68:b1:3e:2b:09:fd:9e:74:6a:59:ca:f4:5e:5b:5a:
c0:21:69:4a:99:0f:47:dd:ff:87:1b:f1:3f:dd:81:
d4:e2:36:1f:d0:d7:98:b4:6d:db:c2:38:8a:d7:8a:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:8E:02:2B:61:0C:CA:47:42:87:58:14:3C:53:17:CE:91:96:C7
X509v3 Authority Key Identifier:
keyid:3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/rO2OAithDMpHQodYFDxTF86Rlsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c4:0f:bc:60:cb:9a:24:f0:55:8a:34:58:94:30:cf:84:a6:
9b:09:46:03:f8:6e:0b:28:25:60:02:6f:86:39:69:47:ca:df:
be:24:56:43:03:57:6e:5b:bf:ad:de:50:db:ef:ca:4d:c3:46:
6e:e8:4b:7e:b7:d5:5f:40:09:ba:41:cd:69:77:b7:1f:e3:37:
36:07:1f:c8:2b:68:04:aa:7d:6d:c1:db:df:b1:f4:1e:68:5a:
b6:19:08:a2:75:ef:4b:52:b7:5a:39:1c:bf:f2:f7:f9:25:71:
9e:7d:f2:aa:16:e4:a4:36:d0:cc:08:31:f6:80:f6:7c:40:27:
e9:cd:41:20:e0:87:d2:7f:f9:b2:13:3c:9c:9f:47:06:55:27:
29:e3:21:b0:23:40:64:fe:eb:2f:1c:1f:85:fa:1c:9b:d6:dd:
e3:9f:43:eb:16:92:47:79:6a:0b:b8:39:ba:5a:83:42:2a:1e:
dc:b3:e7:46:46:7d:93:72:f2:08:d9:0e:0f:f8:5b:ac:a1:2b:
b4:1f:b9:e9:77:54:8e:8a:7c:c3:1c:06:b4:a4:47:e6:61:04:
c2:53:52:1e:47:5c:0e:bb:df:eb:1a:36:af:8a:11:dc:51:5b:
27:17:29:2c:38:55:62:58:a0:0c:fd:7c:95:f3:cd:27:93:3c:
9f:f6:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:49 2024 by rpki-client on console-ams.rpki-client.org