Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/16ZlaNCHjlw2JcqwNb8uncQMxQE.roa
File: 16ZlaNCHjlw2JcqwNb8uncQMxQE.roa (raw, json)
Hash identifier: NG7ocSTcosdAVhfAL2UD+M2VUxMKd8Qf5o4sCSbZHos=
Subject key identifier: D7:A6:65:68:D0:87:8E:5C:36:25:CA:B0:35:BF:2E:9D:C4:0C:C5:01
Certificate issuer: /CN=629e80e88bb766291e5ec80338732511e4d41e04
Certificate serial: 01856E5427EBE1B09DEFA91F369659DA8D3F
Authority key identifier: 62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/16ZlaNCHjlw2JcqwNb8uncQMxQE.roa
Signing time: Sun 01 Jan 2023 17:14:47 +0000
ROA not before: Sun 01 Jan 2023 17:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53589
IP address blocks: 146.19.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:27:eb:e1:b0:9d:ef:a9:1f:36:96:59:da:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=629e80e88bb766291e5ec80338732511e4d41e04
Validity
Not Before: Jan 1 17:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7a66568d0878e5c3625cab035bf2e9dc40cc501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:82:03:de:cc:dd:d6:c4:5c:45:25:a2:79:
40:2f:41:9d:82:e2:d0:f3:12:68:c0:35:04:2b:99:
bc:6d:ce:16:d7:39:2e:51:42:8a:3d:66:5f:4a:a9:
f9:c9:56:23:2b:71:b6:65:62:42:bf:c7:0a:8e:77:
36:a6:70:bf:91:a7:2d:d7:ae:cb:65:1b:3b:cd:37:
70:e0:73:23:ad:07:36:7b:95:68:ef:ef:56:ec:09:
a9:be:91:26:c5:1e:e7:33:75:f2:22:e3:d9:1d:da:
ba:e2:ee:ca:6e:26:79:f6:81:eb:f3:48:37:bb:1e:
31:71:bc:f4:29:37:53:dd:66:19:ab:ad:ac:f1:fb:
22:0d:e4:f1:ef:19:51:5c:4c:69:79:86:5a:93:2c:
62:d2:6d:9f:41:ba:aa:f0:bf:b0:03:ae:d4:ac:d8:
fc:21:ba:fd:a9:ef:1c:7a:29:f1:0c:bf:45:ce:ca:
ac:fc:19:43:dc:ea:f6:ec:48:b6:c1:f5:11:d0:d0:
2d:0a:88:54:b2:5c:76:44:5b:81:09:28:f8:71:a9:
33:b9:ac:42:1f:f9:97:3d:57:62:0f:f0:13:ea:c8:
67:a9:23:a6:22:6e:bd:6f:d4:66:78:4a:86:ee:af:
75:2d:42:5b:ec:65:77:3a:e4:cc:63:e5:f7:67:74:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A6:65:68:D0:87:8E:5C:36:25:CA:B0:35:BF:2E:9D:C4:0C:C5:01
X509v3 Authority Key Identifier:
keyid:62:9E:80:E8:8B:B7:66:29:1E:5E:C8:03:38:73:25:11:E4:D4:1E:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/16ZlaNCHjlw2JcqwNb8uncQMxQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb844a-f373-4e3c-8f76-5b7c431ab61e/1/Yp6A6Iu3ZikeXsgDOHMlEeTUHgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.134.0/24
Signature Algorithm: sha256WithRSAEncryption
99:9c:fe:95:d9:42:de:e4:2d:6b:07:15:3f:ff:7c:13:4c:e2:
12:f6:05:cf:6a:3b:2e:56:e3:80:d1:4d:91:f9:80:68:e0:49:
0b:2f:e2:e5:50:a8:d6:06:96:b4:55:75:2a:c4:3b:0e:ab:95:
5b:e9:27:90:77:eb:59:ca:ed:0b:0d:d2:4c:35:76:ec:1b:5f:
e8:79:83:c1:66:61:c4:cb:0c:8a:9c:4d:5c:c8:7d:a4:53:5a:
5b:0f:d2:4e:98:fb:88:b9:f5:c7:22:85:44:c0:2c:c2:33:68:
71:fb:d4:4f:8c:21:7b:b5:7c:d4:d4:d8:a9:d8:bb:9b:ac:e6:
d9:eb:bb:86:32:40:2f:4f:f2:63:9c:04:8d:7a:a8:0e:82:37:
59:f5:6e:55:39:27:43:06:b9:6b:4f:4a:43:3e:9e:2a:5b:2a:
68:a5:3d:9c:f3:c0:c1:af:a7:32:04:47:a7:05:34:0c:5e:27:
29:03:99:28:96:00:3c:05:f4:69:c9:53:00:6d:66:be:87:aa:
53:8c:92:4f:02:9f:7f:99:cd:f3:ca:5d:09:e0:25:83:81:ca:
05:58:6a:ac:95:cd:9c:ea:c8:c8:6c:1e:0b:19:6e:b1:39:46:
f4:21:33:f2:9d:2b:d2:60:6d:f2:42:bd:5c:d0:ea:53:5d:68:
c4:ea:61:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:46 2024 by rpki-client on console-fra.rpki-client.org