Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/DMy0u1wXqI87gn7C6Ub876wrM_U.roa
File: DMy0u1wXqI87gn7C6Ub876wrM_U.roa (raw, json)
Hash identifier: bCGOfyLn7Q+iO+UPBCcTDIZHlDL8sdXPuCp+j4+dWYI=
Subject key identifier: 0C:CC:B4:BB:5C:17:A8:8F:3B:82:7E:C2:E9:46:FC:EF:AC:2B:33:F5
Certificate issuer: /CN=eba85586b991cf70e0af19c03a4376e27d026f43
Certificate serial: 018779E3747A8666C5C6A7FCDE2294DB5539
Authority key identifier: EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/DMy0u1wXqI87gn7C6Ub876wrM_U.roa
Signing time: Thu 13 Apr 2023 09:12:42 +0000
ROA not before: Thu 13 Apr 2023 09:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:e3:74:7a:86:66:c5:c6:a7:fc:de:22:94:db:55:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba85586b991cf70e0af19c03a4376e27d026f43
Validity
Not Before: Apr 13 09:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cccb4bb5c17a88f3b827ec2e946fcefac2b33f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:68:17:16:a4:db:81:6d:eb:a5:64:3f:6e:
e2:db:a2:d5:94:3e:82:54:9f:5c:60:c0:ab:1e:85:
e8:7c:b3:dd:c3:cf:23:f7:43:cf:f0:1f:0b:3e:2c:
67:b3:aa:74:bf:ed:07:26:fc:83:35:cf:55:2e:3a:
b7:d5:75:fd:24:90:99:c4:32:a7:9c:69:e3:42:71:
be:47:b7:fa:19:65:c3:84:da:69:8c:77:b8:fc:b7:
e3:1e:11:73:d5:a9:18:89:47:d0:36:e4:29:63:d9:
3e:73:5e:af:c8:b7:be:b0:04:64:a3:05:ff:7e:f0:
41:38:96:ab:aa:a2:e8:f9:79:15:2c:19:0e:50:e6:
28:09:d0:f2:d0:47:af:8f:6c:6b:54:e2:bf:05:29:
84:23:76:4a:3c:a1:a1:4a:1f:ab:b0:70:7c:f4:0e:
f5:4b:af:3d:35:1a:20:39:29:d4:e5:6e:1d:37:05:
11:d1:a3:b8:28:da:fc:0c:ce:04:90:b5:e9:6d:3d:
3a:ea:81:68:8b:34:ca:f7:ff:f7:b8:05:18:38:1c:
e0:21:d3:c3:6b:00:21:d8:b9:72:9b:98:28:06:f6:
64:de:34:37:87:97:5b:05:df:fb:6c:de:0f:f9:ea:
b9:fe:27:1c:7c:c7:9e:f3:bd:a6:71:42:f7:34:8d:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CC:B4:BB:5C:17:A8:8F:3B:82:7E:C2:E9:46:FC:EF:AC:2B:33:F5
X509v3 Authority Key Identifier:
keyid:EB:A8:55:86:B9:91:CF:70:E0:AF:19:C0:3A:43:76:E2:7D:02:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66hVhrmRz3DgrxnAOkN24n0Cb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/DMy0u1wXqI87gn7C6Ub876wrM_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/182104-4570-48ce-a97d-96eb49d1955c/1/66hVhrmRz3DgrxnAOkN24n0Cb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ec:97:63:e4:8e:34:85:4c:85:a8:cd:52:73:b9:43:32:4d:
07:28:1e:c5:3b:0c:8d:03:48:52:a2:a0:77:74:8d:c2:61:59:
5b:9e:c9:db:4f:36:20:63:62:e2:01:92:71:69:31:ff:dc:b4:
f1:bd:0b:61:3f:6c:66:55:31:cb:db:96:cc:0f:6e:b8:69:ed:
af:ea:8a:a9:5a:ee:e8:25:a2:77:24:a1:8e:3a:5b:d6:0d:34:
9d:7a:d3:b6:e8:48:aa:1e:5a:2f:e7:15:ec:49:e2:7c:80:50:
42:9b:88:9f:9d:3c:18:d2:a4:ee:5d:03:aa:b0:e5:c6:b4:8f:
9e:ed:e6:f9:80:b4:31:a3:de:5a:31:db:df:3f:11:01:8d:85:
87:c1:88:44:0d:35:c3:64:a4:23:15:a7:4c:74:04:91:b7:71:
08:e5:b8:71:16:86:2a:16:90:7a:09:b0:ac:fc:31:1a:32:b1:
48:d8:f5:7f:d3:11:1b:ee:d2:91:aa:f9:35:75:e1:f5:d0:3f:
a4:14:77:07:fe:37:a7:f0:cf:d0:b4:4d:be:38:b9:de:a0:c9:
f0:b6:8c:58:8f:60:a4:d1:13:86:f2:70:4c:76:b1:58:47:59:
ea:43:b7:2f:86:7e:5d:1d:46:f6:d1:89:37:b5:d4:cc:50:21:
01:dc:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-ams.rpki-client.org