Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/t_n1RvxcZUctXRu6BAO4ZcNvA-w.roa
File: t_n1RvxcZUctXRu6BAO4ZcNvA-w.roa (raw, json)
Hash identifier: QzNfkbyWPRnv45PuzFP1jTW4wWlFE49P0LxWlJZskwM=
Subject key identifier: B7:F9:F5:46:FC:5C:65:47:2D:5D:1B:BA:04:03:B8:65:C3:6F:03:EC
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 01856E41C93696C913BE17025171355D13A0
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/t_n1RvxcZUctXRu6BAO4ZcNvA-w.roa
Signing time: Sun 01 Jan 2023 16:54:43 +0000
ROA not before: Sun 01 Jan 2023 16:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47866
IP address blocks: 146.0.25.0/24 maxlen: 24
146.0.26.0/23 maxlen: 23
146.0.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:c9:36:96:c9:13:be:17:02:51:71:35:5d:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jan 1 16:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f9f546fc5c65472d5d1bba0403b865c36f03ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:3d:29:b4:df:e9:ea:c7:de:ce:1d:1a:ab:
c8:e6:2d:2c:c0:f6:1a:81:ce:2e:38:08:2e:d3:5b:
da:b7:7f:65:45:80:75:11:78:e5:a0:65:58:0b:79:
c9:26:c6:78:a2:f8:ae:c5:8c:08:bf:78:5e:2b:e9:
01:33:d9:3d:12:5b:9d:d8:fc:97:26:53:f4:6d:27:
c8:ba:ea:c0:e5:7d:61:28:c9:9c:94:2f:a2:29:c3:
6e:32:c5:c7:d7:0a:19:09:ef:93:a0:d7:af:35:53:
e4:9a:a1:1c:a6:09:d2:8f:19:80:5f:7e:1d:2a:f8:
b4:da:df:75:6e:f7:c1:d2:38:6e:b8:98:74:c2:85:
09:e7:d9:ce:f7:55:bd:d5:4e:8f:39:66:36:85:d9:
f1:c2:35:3d:89:98:0e:17:c7:e2:26:b6:d0:8f:31:
82:79:56:a9:9c:38:35:df:90:5d:23:6c:43:f6:a7:
73:03:9f:12:cf:dc:f8:9a:fc:ba:a2:0c:ed:9d:e3:
ea:c4:59:39:0c:13:fe:bd:b9:f9:27:00:ee:ff:c1:
64:26:66:b5:55:a1:e8:9c:5c:5c:71:57:a3:96:02:
ce:26:80:6e:e8:2e:6a:9b:0c:45:69:5a:35:04:88:
cb:af:e0:ea:a4:87:42:9e:8d:57:e3:e5:f0:cc:f2:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:F5:46:FC:5C:65:47:2D:5D:1B:BA:04:03:B8:65:C3:6F:03:EC
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/t_n1RvxcZUctXRu6BAO4ZcNvA-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.25.0-146.0.31.255
Signature Algorithm: sha256WithRSAEncryption
72:07:13:e7:f0:3b:21:1a:f2:e5:79:77:66:d2:e6:a1:84:3d:
a0:f5:c0:b5:61:8b:50:b7:87:92:f9:48:0f:71:26:83:ee:13:
ae:de:85:e9:b7:75:64:a3:07:53:e9:c4:ec:9e:83:ea:8e:61:
93:30:97:45:e6:b7:f1:eb:1d:08:69:b5:4f:e2:90:0d:3b:a1:
2c:8c:a1:71:2b:e3:58:af:86:f6:6b:d9:bf:8c:be:ac:0a:98:
3c:65:0d:df:e3:cd:98:ec:8b:d0:04:06:73:97:c2:80:22:c0:
a9:4e:9c:29:76:4d:77:d4:4c:ac:83:40:b9:0e:1e:ea:65:e0:
61:1f:10:74:19:96:28:b4:9e:09:8e:0f:ee:78:51:6d:88:0f:
dc:20:be:1b:9a:74:e6:eb:b9:6d:d9:1c:31:4e:75:3c:06:54:
aa:a5:08:d1:2d:bb:e1:c7:9f:ed:68:25:68:08:3b:03:14:15:
84:b7:6c:a1:fe:b2:11:26:37:85:4e:f2:24:c6:e9:81:4c:36:
5b:0e:36:59:e7:2e:dd:15:b9:47:0c:6e:b4:b4:bb:19:21:1a:
a2:d5:df:d5:ee:4e:45:8b:b6:60:33:e3:91:05:56:6b:72:3b:
c4:82:ec:bc:7d:a2:e2:0c:b2:a7:44:a9:9b:06:d3:99:60:17:
b3:22:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org