Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/CcEpkukFZikfAXVX8-Lx2uiVO6Y.roa
File: CcEpkukFZikfAXVX8-Lx2uiVO6Y.roa (raw, json)
Hash identifier: IfCpscKk43dR6Ac0AypAfS6Z6v+VO1oNh/3P6Sn0bOc=
Subject key identifier: 09:C1:29:92:E9:05:66:29:1F:01:75:57:F3:E2:F1:DA:E8:95:3B:A6
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 018CC86FD0BE7CF160A41B53D0C81C648FD0
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/CcEpkukFZikfAXVX8-Lx2uiVO6Y.roa
Signing time: Tue 02 Jan 2024 04:30:20 +0000
ROA not before: Tue 02 Jan 2024 04:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 12:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d0:be:7c:f1:60:a4:1b:53:d0:c8:1c:64:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Jan 2 04:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09c12992e90566291f017557f3e2f1dae8953ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:e3:19:a7:89:3e:e8:10:bd:08:6b:ef:31:
ce:f0:cb:3f:74:0f:ac:b1:1e:1b:91:a2:21:5f:2d:
ad:ad:5a:5f:37:73:34:70:c4:b8:e5:c5:a2:b5:2c:
fc:02:df:ff:39:9e:2e:07:19:65:fe:64:11:7c:7f:
c0:0b:07:d6:5c:e6:96:87:1a:6f:c5:ca:48:d9:1a:
2a:7e:d8:5a:2a:36:bd:d1:f3:d0:ba:63:1c:1f:c3:
86:43:ae:17:c3:f1:00:3d:ef:6f:ac:65:c0:22:3d:
fc:0e:b2:ed:cc:d7:f7:85:1f:60:bb:37:31:a8:d7:
de:67:db:73:0f:fd:16:ce:76:85:f9:59:3d:48:8f:
bb:85:8a:d7:74:e1:d8:12:83:93:2c:58:36:b9:be:
6e:75:50:24:c1:2c:23:27:d1:00:1c:22:49:c9:53:
16:e9:c1:50:60:37:34:84:28:79:97:3d:72:5a:a1:
55:35:53:56:3a:e1:40:c8:65:2f:48:f4:01:98:b6:
78:7a:30:4d:16:a9:f2:db:e3:34:b2:ea:4a:7c:a7:
53:05:d1:8f:1d:b2:dc:b6:44:96:18:ae:f8:99:bb:
61:85:77:0d:9f:00:4c:30:67:77:02:40:a3:db:4c:
cc:44:63:b2:a4:43:5c:79:4d:39:21:c5:9b:a6:1a:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C1:29:92:E9:05:66:29:1F:01:75:57:F3:E2:F1:DA:E8:95:3B:A6
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/CcEpkukFZikfAXVX8-Lx2uiVO6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f3:91:7e:13:f4:b3:a2:80:41:4e:c9:56:23:21:c5:61:4f:
c7:05:80:e1:1f:fe:c6:7f:01:0c:fd:8f:5f:8d:29:3b:65:5c:
8e:e1:36:8b:af:ae:34:4b:04:23:97:14:7a:5a:27:48:97:15:
5c:e0:3a:06:c6:b4:54:a8:8f:0b:97:88:f5:20:9a:ce:ec:7d:
bd:a7:eb:59:06:38:7d:24:ab:bb:4f:84:90:e7:cc:6d:0e:b0:
81:87:62:7a:b9:23:d5:5a:1c:6a:6b:9a:17:54:9c:23:b7:d5:
9e:d9:16:81:71:6a:9c:0c:53:2e:4e:a4:18:6f:7d:07:f2:b5:
4e:68:9b:04:03:41:52:f1:29:76:70:30:18:67:94:3f:0d:e9:
8c:86:94:b5:fd:2f:92:ff:21:9c:31:8f:98:8e:e6:1e:be:c7:
49:a4:59:21:ed:41:b8:2e:d4:07:c6:11:85:73:b8:6d:9b:34:
7e:1f:f7:e4:4c:f6:99:5a:da:5b:55:9a:b6:be:93:1b:14:38:
cd:b0:9f:ee:9c:18:b5:cc:1d:8e:cb:1f:cb:65:5f:84:c9:f1:
89:36:e7:d0:55:6f:e7:04:b0:c6:9e:d1:18:e0:a6:a9:4a:5b:
47:63:2b:82:e1:46:4d:3c:ba:46:ea:b3:58:e9:d3:f9:da:10:
49:3d:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 14:45:22 2024 by rpki-client on console-fra.rpki-client.org