Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/8_0CAHt5eqbwO2yzgFwZTPxD4eI.roa
File: 8_0CAHt5eqbwO2yzgFwZTPxD4eI.roa (raw, json)
Hash identifier: k+YC8mYgIZzKRaoxnY1p0eA0TjLZgqFRSeOPDAZlH4k=
Subject key identifier: F3:FD:02:00:7B:79:7A:A6:F0:3B:6C:B3:80:5C:19:4C:FC:43:E1:E2
Certificate issuer: /CN=7a216261df2a50fc560487abedb9f83dc4530400
Certificate serial: 01856DC1A63AFAE667AC458AA284872CF504
Authority key identifier: 7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/8_0CAHt5eqbwO2yzgFwZTPxD4eI.roa
Signing time: Sun 01 Jan 2023 14:34:45 +0000
ROA not before: Sun 01 Jan 2023 14:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a6:3a:fa:e6:67:ac:45:8a:a2:84:87:2c:f5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a216261df2a50fc560487abedb9f83dc4530400
Validity
Not Before: Jan 1 14:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fd02007b797aa6f03b6cb3805c194cfc43e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:6c:c8:ea:59:27:9a:2f:60:2f:30:6d:06:
f0:45:e7:dc:40:15:04:5f:f1:72:ee:1b:a1:80:10:
81:9a:97:63:76:3b:70:89:80:95:33:64:45:de:27:
97:f3:32:a4:d3:cf:f9:eb:6f:14:41:73:df:6c:7d:
40:e1:0c:a2:01:08:ee:60:76:c5:a5:94:84:48:81:
c3:e2:d2:1d:03:cd:08:a9:bc:0d:35:79:e7:1e:03:
cb:2c:d2:86:f9:b0:fa:3e:5a:2f:d4:21:0e:49:3e:
d9:ae:5d:7a:e2:6d:f0:27:f9:e3:22:cd:48:18:c7:
dd:df:89:20:62:53:87:45:c8:8d:89:35:4e:a4:8a:
8d:99:de:04:26:2c:9d:0c:49:67:0a:39:1e:d5:05:
cc:db:3f:c0:c5:45:a5:4f:d0:6f:dc:4e:a6:5c:b8:
83:d2:85:24:42:d3:51:fe:c0:2a:e3:77:c4:97:b3:
f4:9a:81:f7:19:ba:d3:0b:5b:09:fc:d6:53:07:70:
18:66:ca:90:cf:d7:f4:a9:16:dd:c7:ce:3f:70:3e:
ad:35:ad:f3:c9:6d:e7:92:18:0a:7a:f5:a1:5e:3a:
be:fc:99:39:02:1c:fd:56:10:76:ff:4c:3c:e0:16:
57:31:84:a5:32:fb:01:a4:be:f0:66:d7:43:bd:d4:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:02:00:7B:79:7A:A6:F0:3B:6C:B3:80:5C:19:4C:FC:43:E1:E2
X509v3 Authority Key Identifier:
keyid:7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/8_0CAHt5eqbwO2yzgFwZTPxD4eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:14:82:fc:e7:8a:eb:5a:61:f9:fe:af:cc:36:8c:82:8a:c4:
52:6b:90:47:0f:4b:0b:15:3d:5c:26:75:e3:98:bb:2c:b1:35:
c9:dd:fb:6e:35:f6:c8:fb:03:b9:64:ed:1b:5d:ea:0d:2a:95:
ab:e7:cd:61:f1:d5:40:ff:dc:cf:1d:4c:75:85:18:92:13:8c:
2e:07:c8:23:7c:66:91:d2:b9:49:77:2e:8f:b2:c2:45:76:22:
68:37:41:da:8e:76:af:c9:32:c2:da:95:5b:e4:28:5f:c1:b6:
7a:ca:9b:dc:c2:4a:08:86:32:1b:d3:7c:d0:85:12:eb:ba:79:
e3:5e:64:15:5b:ec:5d:e6:22:c8:4a:fa:7e:0f:fc:25:5d:7d:
16:d9:28:10:cd:2a:46:d9:77:e3:8a:49:01:10:1a:65:30:62:
0b:be:a3:95:d5:99:bf:56:82:bd:90:e6:3e:cf:d7:22:fa:dc:
78:79:cb:af:1e:6a:20:42:05:63:cd:af:46:24:3f:4c:3a:8f:
04:97:38:d8:8d:f3:1a:4e:af:9d:60:d2:dc:7a:2e:4a:d2:12:
9a:1f:6d:ce:9c:45:b9:17:73:ed:50:e6:29:1f:c9:93:ac:d3:
68:44:6b:51:6f:cc:5e:9a:35:b1:7d:67:5f:64:75:95:0a:38:
45:a6:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-ams.rpki-client.org