Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/5bIKT6oMSYeuj38eFaEDwvukm6M.roa
File: 5bIKT6oMSYeuj38eFaEDwvukm6M.roa (raw, json)
Hash identifier: q8/22Y+IM8av77L0v8X59F0PCLs0gQ237RAUNj+kZL8=
Subject key identifier: E5:B2:0A:4F:AA:0C:49:87:AE:8F:7F:1E:15:A1:03:C2:FB:A4:9B:A3
Certificate issuer: /CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
Certificate serial: 0189EDCC5535CA4B40E4DD325FB88A5E9B19
Authority key identifier: F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/5bIKT6oMSYeuj38eFaEDwvukm6M.roa
Signing time: Sun 13 Aug 2023 07:28:58 +0000
ROA not before: Sun 13 Aug 2023 07:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 146.19.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:cc:55:35:ca:4b:40:e4:dd:32:5f:b8:8a:5e:9b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b5a17e12055d54a22a5ce2586efdecd0dbeae7
Validity
Not Before: Aug 13 07:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5b20a4faa0c4987ae8f7f1e15a103c2fba49ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:da:22:ff:e7:1a:70:ab:27:a3:19:80:5c:
f7:d9:a8:7d:ac:8e:0c:ab:60:8a:60:c8:57:f4:8c:
26:e7:aa:9d:cc:cb:5e:36:b4:b5:7c:0d:af:14:38:
01:49:6e:81:4c:e1:6a:48:b1:ff:6b:f2:5c:ea:c3:
d6:8a:73:4b:78:7e:36:f6:c6:e7:66:c7:4a:80:ca:
21:d4:ce:10:61:62:bb:ef:ae:0e:93:f6:65:70:03:
d0:01:9b:b1:de:e0:00:05:ee:f0:ce:33:3c:03:74:
4c:a5:7c:87:1f:73:24:78:d8:c4:3f:d4:f5:0d:15:
30:e7:66:b3:4c:26:8c:c4:c3:43:51:36:9a:bf:68:
00:10:55:9b:34:06:c8:3b:13:93:db:f0:0f:91:6e:
2f:6d:45:ea:0c:c1:b1:95:3b:ea:7d:81:ee:50:ff:
46:26:0b:70:35:ff:13:a0:15:56:0c:9a:b9:ed:3c:
66:44:e5:a2:c8:9e:06:bc:0c:45:4c:39:75:93:b4:
8b:fc:0d:65:06:56:69:13:28:2a:6d:ce:09:07:6d:
a3:04:45:f0:1e:ae:b3:83:d6:60:9c:87:1b:2e:e6:
09:bf:cc:16:0e:cb:23:a5:91:ba:a2:42:8a:ba:52:
33:0d:7c:f6:65:13:b5:2b:f1:29:cd:77:ca:05:8f:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B2:0A:4F:AA:0C:49:87:AE:8F:7F:1E:15:A1:03:C2:FB:A4:9B:A3
X509v3 Authority Key Identifier:
keyid:F3:B5:A1:7E:12:05:5D:54:A2:2A:5C:E2:58:6E:FD:EC:D0:DB:EA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WhfhIFXVSiKlziWG797NDb6uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/5bIKT6oMSYeuj38eFaEDwvukm6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/b30554-0f4c-443d-8639-328eb5d59e45/1/87WhfhIFXVSiKlziWG797NDb6uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d9:6b:7b:50:68:ec:49:56:02:02:d9:f8:7e:97:c3:ab:72:
1b:c8:49:53:1f:42:98:04:ae:2e:51:0f:0d:ef:d2:7f:c9:2f:
7a:a9:ac:c6:7f:02:e4:37:3e:fb:d2:07:7b:50:18:83:2d:7b:
85:52:ea:d7:25:b1:c6:70:dc:61:f3:a4:3b:8b:23:f2:5d:79:
44:32:d2:d7:3d:94:5b:9b:f6:8e:dc:82:b4:89:53:e9:c8:63:
ad:58:ee:34:d1:8f:dc:58:3e:24:08:61:87:12:c4:8e:a8:74:
5c:5f:63:5d:b5:20:08:79:08:e7:0a:3a:dc:9c:3a:34:1b:b3:
d4:fa:c4:5b:3e:60:06:b4:e9:2a:c3:25:51:ab:23:1b:5e:02:
f5:a3:01:80:5a:02:fe:46:41:bf:c4:98:22:bc:1f:26:29:c7:
33:51:4f:94:c4:d3:e7:f4:5f:eb:c4:45:30:a8:9e:10:43:81:
ef:fb:4c:70:f4:7c:e3:ff:86:63:03:5a:cf:cf:b3:e1:b2:19:
1b:14:3b:5e:d6:56:c4:c8:e2:a2:21:2f:a6:8b:db:14:de:f1:
87:3d:b1:9e:55:dc:24:31:5a:53:10:83:01:71:53:79:9d:0c:
d7:db:3d:48:06:43:94:37:07:91:97:b1:a3:85:7d:b6:77:f8:
09:98:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 08:28:48 2023 by rpki-client on console-ams.rpki-client.org