Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/jca8fExdbA36wpbMDiA_2oRmE9Q.roa
File: jca8fExdbA36wpbMDiA_2oRmE9Q.roa (raw, json)
Hash identifier: 0vEBVW/vkxtDmNei5AfhwF8VAufmv/LXXOYsOeJoyUQ=
Subject key identifier: 8D:C6:BC:7C:4C:5D:6C:0D:FA:C2:96:CC:0E:20:3F:DA:84:66:13:D4
Certificate issuer: /CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Certificate serial: 0185710BF881C689627A63F75AD140F42A5A
Authority key identifier: 1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/jca8fExdbA36wpbMDiA_2oRmE9Q.roa
Signing time: Mon 02 Jan 2023 05:54:47 +0000
ROA not before: Mon 02 Jan 2023 05:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:f8:81:c6:89:62:7a:63:f7:5a:d1:40:f4:2a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f376cf0ddc9b0a4d81328d291339c2614e42026
Validity
Not Before: Jan 2 05:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dc6bc7c4c5d6c0dfac296cc0e203fda846613d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4c:cf:e1:6d:f5:93:fd:c4:2b:f8:c5:b8:fc:
96:5a:c0:07:0c:6d:6b:e4:e8:66:fa:b4:f2:04:f3:
ba:dd:26:34:37:aa:95:28:4d:55:41:1f:16:d8:17:
65:45:70:5f:22:fb:14:5c:30:2d:cd:a4:b8:b9:bb:
51:24:a1:25:c0:34:bf:09:a3:24:0c:40:08:fa:87:
98:04:c9:cd:46:c8:26:d2:c2:08:e8:95:2a:48:62:
7d:c3:77:72:ba:5e:c3:f3:48:73:cd:75:d2:32:be:
4a:2c:bb:e5:0e:27:96:61:92:ed:b8:f8:14:4e:e5:
e5:09:43:cc:52:53:cc:5c:67:d2:4c:54:41:14:e2:
3f:20:b4:75:4e:7b:91:11:3e:4c:1d:92:e9:01:a6:
1f:88:1f:b2:b1:0d:57:8b:dc:bd:70:c8:3d:44:09:
c9:21:86:66:b7:da:34:20:53:ba:fa:f8:26:d3:40:
bc:bc:57:46:de:f7:2c:72:53:06:db:5c:14:23:17:
50:4b:2a:ff:db:ff:c4:ab:e6:ee:ee:63:6c:5a:6d:
b3:9c:13:cf:54:00:e1:d2:d9:f9:2c:f9:ea:72:9a:
6a:b0:66:1f:50:c1:5e:76:b4:45:49:77:00:0e:ef:
2f:14:48:5e:13:c6:0c:13:2a:d0:6a:70:3b:f3:68:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C6:BC:7C:4C:5D:6C:0D:FA:C2:96:CC:0E:20:3F:DA:84:66:13:D4
X509v3 Authority Key Identifier:
keyid:1F:37:6C:F0:DD:C9:B0:A4:D8:13:28:D2:91:33:9C:26:14:E4:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzds8N3JsKTYEyjSkTOcJhTkICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/jca8fExdbA36wpbMDiA_2oRmE9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bb2254-0f86-4081-bdf2-bb588296c6db/1/Hzds8N3JsKTYEyjSkTOcJhTkICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:09:a3:f5:d5:42:35:0d:31:35:64:f7:51:f2:8f:cf:18:19:
de:8a:2e:73:55:af:58:6c:10:4e:1e:d0:ba:a0:4b:f9:b3:09:
a5:1d:ca:be:7d:7e:5e:1b:de:5d:27:45:69:49:fe:ef:f6:c4:
c1:e1:5c:f3:f9:ba:39:ca:df:c0:db:47:0b:1d:02:bc:6f:14:
29:3a:73:4f:8a:34:dd:c1:fc:a1:2f:42:a9:05:b2:89:ed:57:
e1:52:86:53:c6:e7:b2:bf:71:b3:62:8d:36:82:3a:b8:47:29:
41:ba:07:b3:83:ea:c8:c4:0c:f5:97:a2:bb:72:62:7e:ff:86:
ef:17:20:45:d8:da:6e:17:f1:fe:e0:9d:db:1b:b9:6f:b1:6e:
3f:f9:55:5b:00:2b:c6:a6:9c:a0:cc:d1:3d:14:e2:82:36:ff:
4c:04:dd:9d:2a:36:19:9c:17:cd:6b:25:0a:82:3f:89:b7:88:
cf:89:9a:59:ff:f7:fb:d9:b8:d8:9b:48:ac:ac:24:18:fc:c1:
c4:a0:1f:70:45:39:f0:7b:87:9b:86:ee:92:fa:e2:a7:60:5c:
dc:16:fb:96:92:ed:db:a5:67:94:26:dc:b5:19:4f:79:ad:3b:
86:1d:95:f6:1f:37:3e:65:6f:03:b6:9c:93:2e:81:da:30:38:
3b:e8:52:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxC/iBxoliemP3WtFA9CpaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMzc2Y2YwZGRjOWIwYTRkODEzMjhkMjkxMzM5YzI2MTRl
NDIwMjYwHhcNMjMwMTAyMDU1NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGM2YmM3YzRjNWQ2YzBkZmFjMjk2Y2MwZTIwM2ZkYTg0NjYxM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUzP4W31k/3EK/jFuPyWWsAHDG1r
5Ohm+rTyBPO63SY0N6qVKE1VQR8W2BdlRXBfIvsUXDAtzaS4ubtRJKElwDS/CaMk
DEAI+oeYBMnNRsgm0sII6JUqSGJ9w3dyul7D80hzzXXSMr5KLLvlDieWYZLtuPgU
TuXlCUPMUlPMXGfSTFRBFOI/ILR1TnuRET5MHZLpAaYfiB+ysQ1Xi9y9cMg9RAnJ
IYZmt9o0IFO6+vgm00C8vFdG3vcsclMG21wUIxdQSyr/2//Eq+bu7mNsWm2znBPP
VADh0tn5LPnqcppqsGYfUMFedrRFSXcADu8vFEheE8YMEyrQanA782gCQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI3GvHxMXWwN+sKWzA4gP9qEZhPUMB8GA1UdIwQY
MBaAFB83bPDdybCk2BMo0pEznCYU5CAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHpkczhOM0pzS1RZRXlqU2tUT2NKaFRrSUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9iYjIyNTQtMGY4Ni00MDgxLWJkZjIt
YmI1ODgyOTZjNmRiLzEvamNhOGZFeGRiQTM2d3BiTURpQV8yb1JtRTlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9iYjIyNTQtMGY4Ni00MDgxLWJkZjItYmI1ODgyOTZjNmRi
LzEvSHpkczhOM0pzS1RZRXlqU2tUT2NKaFRrSUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhOiMA0G
CSqGSIb3DQEBCwUAA4IBAQASCaP11UI1DTE1ZPdR8o/PGBneii5zVa9YbBBOHtC6
oEv5swmlHcq+fX5eG95dJ0VpSf7v9sTB4Vzz+bo5yt/A20cLHQK8bxQpOnNPijTd
wfyhL0KpBbKJ7VfhUoZTxueyv3GzYo02gjq4RylBugezg+rIxAz1l6K7cmJ+/4bv
FyBF2NpuF/H+4J3bG7lvsW4/+VVbACvGppygzNE9FOKCNv9MBN2dKjYZnBfNayUK
gj+Jt4jPiZpZ//f72bjYm0isrCQY/MHEoB9wRTnwe4ebhu6S+uKnYFzcFvuWku3b
pWeUJty1GU95rTuGHZX2Hzc+ZW8DtpyTLoHaMDg76FL6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:39 2023 by rpki-client on console-ams.rpki-client.org