Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFf_h4TeVM69bSBlvUUOKi3RiIA.roa
File: AFf_h4TeVM69bSBlvUUOKi3RiIA.roa (raw, json)
Hash identifier: aYzq5wM6Kvbh+kXA8ozwDKsgNsxq99KzmGEfFFZo4mA=
Subject key identifier: 00:57:FF:87:84:DE:54:CE:BD:6D:20:65:BD:45:0E:2A:2D:D1:88:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5974CB289934AEC96FEEC37C64E7A10
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFf_h4TeVM69bSBlvUUOKi3RiIA.roa
Signing time: Tue 08 Aug 2023 14:40:09 +0000
ROA not before: Tue 08 Aug 2023 14:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44340
IP address blocks: 146.120.174.0/24 maxlen: 24
146.120.174.0/23 maxlen: 24
146.120.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:97:4c:b2:89:93:4a:ec:96:fe:ec:37:c6:4e:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0057ff8784de54cebd6d2065bd450e2a2dd18880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:62:d7:a5:1c:9c:d7:cb:d6:57:db:e2:af:
ea:a0:33:c8:0f:ba:32:81:9a:fd:00:d8:b1:c5:13:
07:1c:7d:9b:4b:af:69:ba:e4:d1:e9:ba:ba:9a:1f:
3d:0f:12:a3:dd:64:2b:b3:0f:2c:12:c2:19:af:d3:
65:2c:bb:59:0a:d5:10:eb:12:f7:0f:0e:84:b4:f3:
0d:56:c6:67:b1:71:1d:bb:2f:77:9d:e1:e8:a1:cb:
0e:0c:74:ff:f7:bd:76:f1:33:7f:53:1d:83:94:e8:
98:e9:c2:ce:60:c7:7c:87:65:4b:eb:a1:ae:c4:19:
d5:be:84:48:80:bc:90:c5:10:d2:52:8c:f7:d7:78:
5f:a4:29:55:98:8e:f3:1c:32:37:34:a8:61:9e:ec:
46:eb:41:dd:6c:24:65:1b:e9:56:89:99:d5:bd:c4:
76:f7:53:6a:35:e2:63:ab:45:88:d8:08:fb:7d:f8:
f5:23:f8:d4:49:33:68:58:6f:08:52:98:38:71:46:
d0:4b:54:78:b3:71:e8:52:69:45:93:eb:12:b9:dd:
06:23:e4:80:82:03:a9:3d:4a:ba:2c:08:4c:72:30:
ae:43:ae:60:91:a5:c8:49:14:a0:92:86:75:c2:3b:
c3:35:66:84:96:6d:bd:46:74:60:38:b9:d1:07:32:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:FF:87:84:DE:54:CE:BD:6D:20:65:BD:45:0E:2A:2D:D1:88:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AFf_h4TeVM69bSBlvUUOKi3RiIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:e9:24:4c:8f:51:8f:b2:2a:e6:94:07:2e:c4:25:aa:38:b2:
1c:ba:01:d4:6b:c6:5d:9b:e2:58:0a:03:f6:22:5b:76:cf:98:
06:c2:a1:9b:62:37:db:e2:b0:8d:a0:ee:50:75:50:7a:a3:5d:
70:d8:1c:9e:ac:8b:14:c9:d0:38:21:0c:31:15:2e:cd:f5:8f:
50:0e:c2:a4:34:2c:4c:d3:97:24:92:fc:6d:9d:87:97:97:2a:
68:37:c8:30:68:60:7c:01:0c:86:91:ca:87:37:02:8f:9c:cb:
27:83:eb:4a:c7:57:4f:b8:06:50:7b:a6:11:92:3d:b8:b8:2f:
74:bd:7e:2c:b7:60:05:89:57:c5:86:bd:d5:67:50:c7:18:82:
69:5c:a7:8a:c8:63:9c:da:68:34:66:db:b4:64:52:71:06:0f:
e8:2b:2d:3e:3b:99:9d:27:88:99:7e:4f:5a:99:4c:f8:26:d5:
90:7e:86:c1:57:dc:f7:22:00:67:52:80:a1:dd:5e:3a:e1:8f:
9b:c2:52:64:aa:e8:5b:64:34:5e:b2:f7:97:b7:3a:c9:21:e1:
d3:9e:29:d0:2f:8f:53:92:83:26:8f:64:cf:76:ef:be:94:5c:
98:d7:49:e7:d6:cf:b2:6a:ac:58:7e:31:52:32:c7:00:bb:b4:
ce:e1:79:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:30 2024 by rpki-client on console-fra.rpki-client.org