Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/_NC1HU6bdOAroUNrbUSoO311cRk.roa
File: _NC1HU6bdOAroUNrbUSoO311cRk.roa (raw, json)
Hash identifier: /dwa2zYGNyFTHoSLEYmP9ObJxTq32a+WNw6MjVast+Y=
Subject key identifier: FC:D0:B5:1D:4E:9B:74:E0:2B:A1:43:6B:6D:44:A8:3B:7D:75:71:19
Certificate issuer: /CN=9616ef27278309d222b3ec97334e4a83ad48971b
Certificate serial: 0185704BDA8D8F11752B9F80C45026752AFC
Authority key identifier: 96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/_NC1HU6bdOAroUNrbUSoO311cRk.roa
Signing time: Mon 02 Jan 2023 02:24:57 +0000
ROA not before: Mon 02 Jan 2023 02:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202909
IP address blocks: 146.19.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:da:8d:8f:11:75:2b:9f:80:c4:50:26:75:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9616ef27278309d222b3ec97334e4a83ad48971b
Validity
Not Before: Jan 2 02:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd0b51d4e9b74e02ba1436b6d44a83b7d757119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:72:a7:0d:65:92:df:31:40:40:c2:0d:db:30:
c8:40:e7:d8:c3:85:06:7f:04:1e:e3:81:02:cb:6e:
d3:53:d7:5d:e0:8c:ec:c9:6b:db:8c:51:9b:c8:0c:
2a:5b:25:61:fa:93:d3:4e:05:9f:69:79:ae:b5:9f:
55:a4:34:31:cb:0a:35:45:2e:32:cd:1e:e7:7d:e0:
ef:e6:2f:4b:77:8b:a4:5c:d2:9a:27:ae:b4:ee:b2:
6a:85:0d:f8:e7:25:fe:68:09:70:b7:75:8a:50:a6:
09:16:34:bc:04:94:e0:99:c8:2f:6b:c7:49:bf:fc:
08:13:e2:58:23:3a:87:2e:6e:e1:ef:ad:d8:b1:97:
63:63:cb:ca:05:6b:28:59:f7:4a:97:80:37:d0:2e:
4f:ec:c4:f5:ea:3c:9f:03:50:b3:58:c0:81:52:01:
8e:4f:4e:80:6d:4b:c6:f3:57:c7:df:1e:62:6d:19:
30:9d:97:a6:5d:dd:20:1b:1a:51:49:36:02:90:4f:
00:f8:66:6e:e2:d2:ae:bd:3f:33:e4:c0:9f:71:c8:
c5:47:55:6b:a1:2f:39:e2:8b:e2:13:cc:c8:0d:10:
b0:a5:cf:c0:55:6e:b6:a2:63:d4:11:e9:46:24:5c:
4e:2f:d1:39:49:d6:ce:28:51:85:e9:9c:58:1a:fe:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D0:B5:1D:4E:9B:74:E0:2B:A1:43:6B:6D:44:A8:3B:7D:75:71:19
X509v3 Authority Key Identifier:
keyid:96:16:EF:27:27:83:09:D2:22:B3:EC:97:33:4E:4A:83:AD:48:97:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhbvJyeDCdIis-yXM05Kg61Ilxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/_NC1HU6bdOAroUNrbUSoO311cRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a29bd-11c4-4838-bb3a-411f8f7be744/1/lhbvJyeDCdIis-yXM05Kg61Ilxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.52.0/24
Signature Algorithm: sha256WithRSAEncryption
14:60:d6:4e:a1:2c:83:b5:16:0b:e5:ce:27:1a:47:bc:3e:4f:
b9:8a:e7:20:b0:d0:ff:39:ec:24:c4:23:70:dc:80:57:78:06:
90:e8:23:6a:a4:1e:e7:2c:bc:5d:d8:64:31:c1:10:88:45:66:
3f:7e:0e:96:b9:84:a9:9b:37:98:2b:7f:68:2a:63:cd:1c:c5:
af:a6:e6:c9:81:d0:6d:2d:b8:18:ab:17:d4:76:c6:fb:ab:49:
bb:75:23:0c:a7:7a:f6:e4:9c:f7:0e:8c:7f:6e:8e:1f:0d:2a:
37:5f:00:e9:94:be:0e:a5:06:8d:84:7d:0f:cd:09:55:2f:73:
51:6a:48:1b:9b:9e:a3:91:2c:39:3c:98:04:03:89:18:53:28:
c2:c1:1f:11:99:34:a7:c9:38:86:d6:92:06:8c:04:1c:89:d0:
71:0c:b0:fb:9d:85:cc:1f:ea:fe:b0:f6:71:87:72:84:71:20:
a0:59:59:03:3f:82:42:c6:4c:b7:cc:6a:38:f9:41:f4:a1:14:
c4:17:8b:19:0f:54:4c:90:5d:a6:71:58:44:39:56:a8:56:6b:
f0:44:99:e4:f1:b2:81:2e:3a:9c:54:cd:f3:44:87:69:11:eb:
6d:04:3e:37:dc:0f:3d:80:88:0d:1f:59:fb:ff:19:87:39:6c:
96:13:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 3 22:10:40 2023 by rpki-client on console-ams.rpki-client.org