Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/jtH7Vt4iIFlSmzILNrTtaYVXeoo.roa
File: jtH7Vt4iIFlSmzILNrTtaYVXeoo.roa (raw, json)
Hash identifier: dXJx4TUnic3LglgL7UemtGNzCLKcPu7aTKCm1H8Eymg=
Subject key identifier: 8E:D1:FB:56:DE:22:20:59:52:9B:32:0B:36:B4:ED:69:85:57:7A:8A
Certificate issuer: /CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Certificate serial: 01874FB71C33C8117D6959059D7AB5E12854
Authority key identifier: 23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/jtH7Vt4iIFlSmzILNrTtaYVXeoo.roa
Signing time: Wed 05 Apr 2023 04:40:12 +0000
ROA not before: Wed 05 Apr 2023 04:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 146.19.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:b7:1c:33:c8:11:7d:69:59:05:9d:7a:b5:e1:28:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2307e7974fb8312a2e6aaa996f5ef8474a53107c
Validity
Not Before: Apr 5 04:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ed1fb56de222059529b320b36b4ed6985577a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:58:05:24:f0:a0:f7:6a:f3:a1:05:cf:54:
44:5c:58:9d:19:5a:71:10:03:46:84:98:ce:f6:e2:
f9:98:7f:6a:03:f2:09:94:28:ad:84:d2:04:9b:2d:
70:f3:94:79:53:12:0a:4c:ca:28:c7:47:dd:fa:ab:
eb:d7:fd:88:92:83:49:6c:73:20:99:ea:9b:ed:54:
1a:37:c5:6e:fb:db:aa:d7:f3:d0:e5:f7:a8:39:90:
21:98:b8:5b:f7:00:a1:62:e0:6f:ff:18:61:de:8b:
44:24:d7:d5:5d:cf:3c:6f:b3:ed:95:33:f6:5e:f2:
d8:12:fb:ef:06:e8:67:d3:55:9a:15:fa:5a:22:b4:
8f:77:b8:02:57:cd:72:bb:af:12:b9:30:e5:03:67:
b9:28:9e:27:f2:e5:0c:3b:9c:e8:90:c9:0f:2d:b2:
a1:68:31:8a:ee:84:29:33:ba:64:2c:0f:df:c3:6c:
05:68:7f:21:05:50:fa:e2:95:f5:3d:ee:3e:22:e2:
35:89:57:4d:d8:f7:03:ea:64:88:dd:b6:f9:6f:b0:
20:a0:80:a4:44:74:d3:75:b8:55:00:39:ff:dd:56:
b6:87:af:35:01:e9:a7:b9:6f:41:f7:89:09:04:7f:
f1:0b:5c:a4:36:cc:a4:7b:ec:9a:ed:bc:1c:04:9b:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D1:FB:56:DE:22:20:59:52:9B:32:0B:36:B4:ED:69:85:57:7A:8A
X509v3 Authority Key Identifier:
keyid:23:07:E7:97:4F:B8:31:2A:2E:6A:AA:99:6F:5E:F8:47:4A:53:10:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iwfnl0-4MSouaqqZb174R0pTEHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/jtH7Vt4iIFlSmzILNrTtaYVXeoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/37cde7-e98c-4f26-9dd3-434f74d499d7/1/Iwfnl0-4MSouaqqZb174R0pTEHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.189.0/24
Signature Algorithm: sha256WithRSAEncryption
14:69:ca:92:e2:44:a2:b4:e8:bf:d3:c9:f6:63:84:3f:68:66:
7d:52:51:7c:f0:85:53:27:06:7d:59:3b:62:1e:08:9f:6f:e0:
66:ea:a9:42:c5:9e:f7:37:be:90:83:c0:61:5b:ac:15:59:2f:
3d:ca:91:33:8c:4c:5a:db:99:2a:55:b1:92:dc:c3:e8:6e:d7:
9e:6f:d7:17:77:a1:36:35:a9:c7:14:61:25:07:e0:f2:4c:df:
60:da:be:22:88:4a:a4:78:64:8d:69:43:f6:a2:16:8e:bd:2e:
9c:46:6b:56:d2:85:17:a5:32:d1:1f:03:65:b3:6f:c5:af:23:
47:47:41:48:a7:b9:b5:1a:b8:8a:56:69:45:1f:05:64:7a:a5:
cf:8e:4d:d0:11:b2:57:cc:18:74:7f:ac:68:8f:6d:56:c9:9b:
a1:5a:b0:52:7e:4b:0a:4c:83:0f:0d:1b:14:81:75:2b:96:d6:
0a:74:cd:2f:30:b1:04:07:24:82:10:34:5b:e3:c2:55:47:ff:
cb:cd:75:26:4d:1b:4e:30:ee:4b:e0:e9:47:79:c2:92:72:c2:
76:26:29:3d:aa:d6:58:87:41:ce:fc:0b:0f:0c:bd:78:81:33:
05:f8:a6:47:83:0c:57:07:7b:4e:3d:d9:52:a0:be:29:0d:a3:
b1:13:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 07:16:57 2023 by rpki-client on console-ams.rpki-client.org