Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/pf2qaXXBSXWe95AWmXIcfmumWtY.roa
File: pf2qaXXBSXWe95AWmXIcfmumWtY.roa (raw, json)
Hash identifier: ftPd/mCuMvHMy5hw+2RfR3tG8NvmNn5PAWTjdZBJO/c=
Subject key identifier: A5:FD:AA:69:75:C1:49:75:9E:F7:90:16:99:72:1C:7E:6B:A6:5A:D6
Certificate issuer: /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial: 018EEC1818FAD5A9548537EDB378B0F34180
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/pf2qaXXBSXWe95AWmXIcfmumWtY.roa
Signing time: Wed 17 Apr 2024 12:46:25 +0000
ROA not before: Wed 17 Apr 2024 12:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 17:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:18:18:fa:d5:a9:54:85:37:ed:b3:78:b0:f3:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
Validity
Not Before: Apr 17 12:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5fdaa6975c149759ef7901699721c7e6ba65ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:42:95:b8:db:4c:90:15:ab:c9:81:89:b2:28:
3c:81:3c:7b:d7:50:81:a3:5e:80:29:8e:70:e1:08:
50:c7:8e:8b:a2:37:56:b9:67:90:03:ac:92:62:89:
d1:30:db:89:2f:24:8e:d4:39:11:ee:f0:f4:55:8c:
42:bd:21:66:85:32:a0:eb:ad:ef:ca:70:01:89:75:
3b:05:76:53:c9:51:e0:34:b0:be:c3:e9:62:f9:d2:
7c:f4:45:27:d0:f4:f4:73:b9:c4:1a:c5:96:08:c6:
5c:62:8b:17:36:0d:c7:36:75:87:e9:a9:18:ef:0b:
2f:3c:d3:0a:a3:3d:33:f6:65:b6:4b:5c:ca:d8:6b:
fe:02:c4:33:78:08:27:90:a4:66:35:13:f7:18:10:
f6:92:e3:32:a6:1e:2c:93:90:80:e8:40:86:fc:53:
eb:63:1f:a7:4f:f1:13:70:39:95:53:1f:1b:83:61:
95:92:80:2e:dd:0b:43:86:62:5f:ba:1f:0b:c9:6e:
23:66:c4:20:09:d4:42:5a:79:c6:a2:f3:54:14:fa:
b6:4b:ec:52:a4:52:a1:54:76:33:bb:1b:0d:94:82:
64:91:55:80:d3:c9:22:2c:b8:5d:d3:f0:2c:2b:04:
31:9e:af:5b:cb:07:11:ad:9b:10:c5:ac:0f:83:21:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:AA:69:75:C1:49:75:9E:F7:90:16:99:72:1C:7E:6B:A6:5A:D6
X509v3 Authority Key Identifier:
keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/pf2qaXXBSXWe95AWmXIcfmumWtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a3:26:25:8f:a6:ce:f1:34:d5:8e:04:8c:70:72:2c:5d:da:
ad:f6:c7:ae:b9:b1:85:19:af:bb:b9:d6:8f:1f:ff:35:df:64:
47:93:fd:85:7f:14:e3:f2:74:ac:79:8d:a1:a2:c9:51:50:c3:
21:fb:b1:81:a6:67:54:d9:6a:36:ad:a3:51:ad:74:19:51:9b:
20:32:04:d7:6c:34:57:1e:37:9a:14:e5:b3:8f:58:53:65:04:
85:8b:ef:46:67:ea:ab:4f:ae:34:f1:15:51:b7:35:42:58:11:
10:ab:92:0e:52:57:af:c1:52:f4:3a:41:46:16:52:4e:3a:84:
7c:78:f8:c9:5e:23:bb:ce:7d:67:b0:86:08:f3:91:b6:b6:5a:
93:ec:f7:16:5a:6a:c7:5e:35:2b:84:69:ce:5f:ef:32:a6:55:
e2:d5:12:a5:dc:e8:c7:61:06:a6:d0:a4:06:6e:3c:21:0e:dd:
a8:6e:3a:ce:de:10:df:59:17:01:d9:5a:f0:d8:14:23:ab:7b:
ce:fb:a4:6b:fa:57:4a:82:a6:2b:25:db:d6:16:a2:ff:45:57:
79:38:07:4d:cb:87:eb:df:c5:06:4c:1d:98:be:ab:1c:42:b4:
06:c1:79:c8:a5:80:2f:14:02:9d:4b:3b:8f:9f:7d:02:1d:c2:
72:87:91:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:22 2024 by rpki-client on console-fra.rpki-client.org