Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9H8vpCdOSDRHJSC_CjjrUryjL-g.roa
File: 9H8vpCdOSDRHJSC_CjjrUryjL-g.roa (raw, json)
Hash identifier: TQsEfI3mgWTG5DvZeVRdi56a7pt//tb0LwEDAwv1HQQ=
Subject key identifier: F4:7F:2F:A4:27:4E:48:34:47:25:20:BF:0A:38:EB:52:BC:A3:2F:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D5128BB78CBE1718B7FC6CD2B1B6D003E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9H8vpCdOSDRHJSC_CjjrUryjL-g.roa
Signing time: Sun 28 Jan 2024 17:40:40 +0000
ROA not before: Sun 28 Jan 2024 17:40:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43289
IP address blocks: 146.19.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 14:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:51:28:bb:78:cb:e1:71:8b:7f:c6:cd:2b:1b:6d:00:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 17:40:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47f2fa4274e4834472520bf0a38eb52bca32fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:f7:10:a7:16:c0:e9:ed:9d:46:bb:11:0b:
b8:bb:1c:a5:c0:f2:8a:40:32:34:70:82:39:fe:3c:
a1:98:b9:4b:a7:e2:2e:a8:6e:ed:f2:e6:24:8e:80:
74:4b:f0:78:eb:2c:2d:72:8e:cf:5c:ee:44:9d:2f:
cc:fa:d6:a8:f1:39:60:d8:54:7f:a1:cc:cd:4f:1b:
dc:0a:99:07:40:3b:9f:4f:b8:84:26:0c:f6:e1:a1:
a8:62:86:9c:75:f9:02:aa:2b:2d:4e:e6:14:23:6e:
f2:81:8c:c7:e1:69:3f:da:f3:5c:0e:7b:dc:43:b3:
98:3d:ab:9b:7a:c1:b7:9d:85:7d:c5:4d:08:9f:68:
b9:88:6a:33:ba:e7:90:f3:3c:ba:a1:8c:8f:6b:a0:
3f:df:8e:69:5e:a7:2d:8c:0d:df:3c:b6:16:12:e7:
cc:e5:be:c8:a8:0b:de:32:8f:75:fa:29:75:a6:84:
22:90:2e:9b:29:be:e2:5e:0c:79:78:a5:3c:79:14:
f2:9a:e8:b8:ed:46:0d:bc:80:a5:85:a2:df:dd:87:
f7:2f:e6:48:08:87:8d:b6:1a:b5:62:93:d3:40:52:
b6:b3:d2:9b:21:a1:81:7f:ff:13:dc:44:36:69:ba:
b7:2a:d0:a7:f7:b0:00:8c:f7:bf:e3:f2:ca:e7:bc:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7F:2F:A4:27:4E:48:34:47:25:20:BF:0A:38:EB:52:BC:A3:2F:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9H8vpCdOSDRHJSC_CjjrUryjL-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.139.0/24
Signature Algorithm: sha256WithRSAEncryption
79:82:80:20:c9:1e:b7:a6:a1:0f:8a:7e:8c:c2:7b:7d:8d:10:
da:dc:7d:76:c7:59:40:1a:31:2c:11:ef:51:86:22:cd:22:76:
cb:49:e7:be:ab:e2:29:f7:a6:01:61:ea:9c:24:5b:92:de:d9:
61:6b:3e:b5:c0:b9:3d:be:91:0c:f5:ed:8f:31:00:f5:de:b3:
65:9e:b1:11:70:ac:07:9c:e8:bc:74:0f:ed:14:48:61:7b:f8:
98:ad:0a:34:02:88:53:c7:fd:45:2d:af:24:ec:9d:f4:7b:8f:
f4:c1:a0:3e:f0:0f:6a:16:b2:7c:7c:c8:c0:e0:86:7a:24:2c:
ad:e4:dd:cb:2b:b1:7b:13:48:81:15:5e:d7:2a:c3:73:c5:1f:
99:82:df:a5:a8:28:7a:26:4b:ad:2c:f5:6f:51:63:e1:33:4b:
77:5a:f8:59:80:21:a8:31:06:e0:15:5f:86:c8:3b:75:bf:80:
e3:05:5b:34:3b:6a:d7:25:fb:12:fa:64:18:6a:a0:34:41:9b:
5a:12:bd:c0:71:97:c7:46:e3:0e:9e:85:93:ee:eb:d2:95:f3:
34:cc:e9:1a:9e:cd:ef:47:38:61:80:62:8f:3c:97:d1:06:fb:
e9:35:16:ff:f1:6c:0a:22:6a:5a:d6:19:7e:30:34:c1:30:be:
0b:9d:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 17:41:38 2024 by rpki-client on console-ams.rpki-client.org