Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VWtbcHE0O080LInmEUTAykPgL_0.roa
File: VWtbcHE0O080LInmEUTAykPgL_0.roa (raw, json)
Hash identifier: nRC9iq7sgDLy63hyQD8BJWsji+jeuy75NRmDls8q5CA=
Subject key identifier: 55:6B:5B:70:71:34:3B:4F:34:2C:89:E6:11:44:C0:CA:43:E0:2F:FD
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 018C9097850F4A419DC3363989AAAC283124
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VWtbcHE0O080LInmEUTAykPgL_0.roa
Signing time: Fri 22 Dec 2023 08:14:58 +0000
ROA not before: Fri 22 Dec 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:97:85:0f:4a:41:9d:c3:36:39:89:aa:ac:28:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Dec 22 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556b5b7071343b4f342c89e61144c0ca43e02ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:2a:a9:00:51:dd:b5:18:60:32:10:00:c0:
5d:c4:6c:3f:dc:00:14:45:cc:43:8d:79:3d:be:01:
20:37:4a:7e:bc:14:50:86:17:65:4b:55:98:2d:30:
e8:36:84:54:ac:86:f5:0c:e8:a1:23:c7:ed:67:61:
8f:ce:ba:b6:3c:37:22:26:24:c0:2e:37:39:ac:b6:
e3:52:5c:5a:54:5f:53:20:b5:69:ac:02:5e:c8:28:
99:c9:57:28:94:87:da:cd:fb:a0:df:1a:49:4a:6d:
aa:66:0d:9f:e4:d7:27:bc:55:b7:05:b6:74:2a:0a:
ee:1a:df:28:74:b3:74:f0:39:94:22:83:45:cd:95:
eb:a8:9f:14:87:16:c2:8b:76:a3:17:2e:22:e2:58:
bc:fe:f3:5d:37:e0:55:a5:1a:50:e6:91:e2:af:22:
45:de:b1:c0:09:f6:a2:65:f5:db:8c:24:a4:91:c1:
7b:35:44:90:70:f4:51:0e:58:6a:41:1b:99:38:99:
6c:42:24:6d:4f:c4:6e:18:20:a2:b7:40:6a:0e:93:
c1:43:c4:1a:56:38:e1:82:e8:23:e9:01:f4:25:fc:
5e:54:c7:0c:44:08:d5:db:13:c2:3d:b2:7e:43:38:
eb:e0:5d:f7:08:e4:9e:fe:2d:65:16:ba:80:81:30:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6B:5B:70:71:34:3B:4F:34:2C:89:E6:11:44:C0:CA:43:E0:2F:FD
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/VWtbcHE0O080LInmEUTAykPgL_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a4:e0:0c:4d:14:d7:67:80:30:56:d1:eb:28:30:66:e1:2b:
e5:9e:29:4a:9b:28:59:3a:c3:6e:4e:94:a4:42:95:fb:02:ec:
78:1b:28:cc:31:96:ad:a0:57:eb:bd:30:fc:f5:9f:72:dd:05:
43:c4:55:01:f0:64:ee:6c:e2:4b:8e:de:d5:fe:1e:fb:c6:1b:
5c:ef:9a:5d:59:9b:5e:c5:8b:8a:ad:f5:81:d1:6f:49:93:5d:
35:2d:5b:2b:83:01:db:00:06:f8:4a:f7:34:c5:4a:38:ce:32:
10:79:cd:27:1e:37:56:0a:bd:b8:81:1e:bf:9b:a4:0a:63:69:
67:db:05:e2:33:1b:b2:78:28:ab:fe:e6:1a:c2:e8:08:92:8e:
a3:4d:67:ae:8e:d9:e1:bc:06:d7:4e:40:9d:d7:b3:84:8a:6f:
43:69:2b:54:97:5d:31:e4:27:ca:1e:65:f6:de:e3:cc:3b:b5:
5c:56:62:f6:ef:c5:b5:f5:ff:11:c1:b2:c4:35:e3:e9:5a:1e:
57:4f:9c:a9:cb:fa:94:3c:43:20:c5:34:1c:ba:eb:e6:c9:08:
ea:9e:28:51:45:32:84:85:bb:e4:de:19:17:55:cb:80:ec:f9:
a4:b9:41:41:15:56:9e:26:10:07:c9:37:48:49:df:e5:f1:54:
68:74:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:37 2024 by rpki-client on console-fra.rpki-client.org