Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_P897cAVG3FFHDcBqHWoNglc4UM.roa
File: _P897cAVG3FFHDcBqHWoNglc4UM.roa (raw, json)
Hash identifier: 9ubLHAbBtVssF3hRoN/SzNXD2z8z7sRaOI0qFSDzdJA=
Subject key identifier: FC:FF:3D:ED:C0:15:1B:71:45:1C:37:01:A8:75:A8:36:09:5C:E1:43
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D1916A776FA53ED9810830A70CC37FF31
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_P897cAVG3FFHDcBqHWoNglc4UM.roa
Signing time: Wed 17 Jan 2024 20:22:11 +0000
ROA not before: Wed 17 Jan 2024 20:22:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 146.19.98.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 09:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:16:a7:76:fa:53:ed:98:10:83:0a:70:cc:37:ff:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 17 20:22:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcff3dedc0151b71451c3701a875a836095ce143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:8e:f6:1b:0f:69:73:84:d7:5a:d9:5b:e6:
a9:01:d0:b1:7e:00:37:56:cd:8c:51:27:2d:19:16:
5b:e1:b9:12:25:34:3d:23:32:ef:28:f7:04:e1:53:
b4:e4:01:6e:46:8a:db:4c:ed:92:2d:d5:78:5e:db:
b6:5a:29:ad:e9:00:a2:6d:5e:20:66:9a:c6:35:0f:
4d:a6:05:ba:a2:fd:0c:df:25:69:ed:83:fc:91:b0:
45:50:79:fd:e1:cb:90:88:5a:15:64:43:27:56:f7:
ac:54:77:c3:ed:01:64:35:08:fc:a3:54:fe:8c:06:
32:93:2b:0c:e5:d7:e0:fb:fa:43:39:09:ba:ac:d5:
59:8b:84:aa:21:6e:70:5b:db:44:4b:ab:e7:cb:94:
97:55:fd:5c:74:cd:c7:f1:67:3f:37:76:b5:7d:ad:
33:ae:74:84:62:d6:a0:4a:37:65:21:35:b4:47:19:
be:0d:d7:93:3b:58:f6:d0:45:fc:ac:81:54:40:da:
98:4a:8d:06:88:b8:2c:a9:ce:63:3a:ca:a6:76:10:
72:3f:21:c5:5a:4e:41:cf:0e:90:5f:c4:dd:6f:70:
25:1f:07:c8:c7:3b:17:16:d2:9b:e4:d5:dd:36:ff:
cf:19:a0:4f:e7:d1:39:b3:1c:e3:46:8d:62:a8:ce:
e6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:3D:ED:C0:15:1B:71:45:1C:37:01:A8:75:A8:36:09:5C:E1:43
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/_P897cAVG3FFHDcBqHWoNglc4UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.98.0/24
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:88:4a:5c:8b:4f:62:bd:4c:b4:67:90:6d:39:d8:76:f4:2e:
05:db:1e:28:12:24:a3:11:22:73:19:6a:8f:3d:59:e3:c3:95:
99:82:4b:8b:ae:cb:f0:b5:5c:6b:62:a4:ab:e8:b7:b4:1a:3b:
43:0a:76:96:31:81:3a:de:e6:23:01:66:65:38:91:70:39:cb:
38:f1:d6:44:64:76:0f:31:94:7c:fd:12:bf:70:e7:1f:9c:c9:
ea:7f:f2:b5:76:58:95:27:fe:33:c4:97:af:ec:43:39:c3:7c:
5a:fe:88:bd:ab:34:4c:6c:fb:4c:14:fd:d5:71:57:af:55:6b:
8b:55:cc:c9:90:39:f7:d7:07:12:03:d7:9c:7f:e3:f4:a1:a7:
db:b5:42:49:c7:e0:ec:7e:79:1e:fd:46:bd:a5:5b:ae:30:da:
2a:c8:82:a8:08:7b:bc:97:56:30:e3:0b:2e:ff:d8:26:62:3e:
4a:e3:14:a4:da:23:0e:f8:6e:54:56:5d:cc:1a:de:3c:cb:99:
d6:53:09:86:2b:59:ff:46:15:d4:2c:51:2d:bd:52:8b:b4:11:
ec:68:4e:c2:30:bc:7a:3f:52:8c:9e:ad:53:d6:aa:07:20:be:
09:49:7a:54:b4:2e:c6:b9:eb:8a:f1:e8:b3:65:a7:10:25:57:
b7:6b:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 10:24:09 2024 by rpki-client on console-fra.rpki-client.org