Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/SEy6BeOLvtlT5lJ3jlMUB3yokpY.roa
File: SEy6BeOLvtlT5lJ3jlMUB3yokpY.roa (raw, json)
Hash identifier: wK9oAhq8oVey1DMvPU8uVy+60eAm+Rri/JXNNEvJrAU=
Subject key identifier: 48:4C:BA:05:E3:8B:BE:D9:53:E6:52:77:8E:53:14:07:7C:A8:92:96
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 0185729EDB7B78393341B98B25617041A73B
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/SEy6BeOLvtlT5lJ3jlMUB3yokpY.roa
Signing time: Mon 02 Jan 2023 13:14:51 +0000
ROA not before: Mon 02 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16085
IP address blocks: 146.109.8.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:db:7b:78:39:33:41:b9:8b:25:61:70:41:a7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jan 2 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=484cba05e38bbed953e652778e5314077ca89296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4a:7c:30:61:8a:c5:4b:59:2b:c4:95:69:84:
d8:7b:f1:8a:4b:d5:0b:05:a1:e7:f4:8e:78:e3:57:
50:1b:a7:7a:a9:70:78:3f:36:bf:97:0d:62:c4:e8:
9a:79:c0:a7:00:62:bb:bb:45:b7:78:f0:9c:65:87:
4c:9b:88:0f:97:2f:81:80:49:b9:10:8f:3c:b1:18:
b0:bf:a2:47:cb:6c:7b:ee:4a:c1:50:c9:a6:b1:bd:
a8:af:4c:c8:d7:67:db:af:40:f2:20:3f:af:79:b9:
5f:7e:b8:dc:a6:41:8b:22:48:ef:1b:fb:8d:55:a1:
d1:f3:c5:14:d5:f9:28:52:d0:89:42:b1:17:9b:82:
7c:a3:70:b2:88:aa:cc:ef:5c:f9:2d:5a:ca:dc:8e:
77:bb:36:76:a9:1e:9c:35:c1:a0:88:0d:b5:87:1b:
f6:cb:dd:c1:d1:cf:ad:30:09:ff:b3:37:8c:26:9f:
38:46:57:ae:56:5d:f7:9a:d9:7f:ad:04:c8:2d:62:
e6:16:e9:95:f4:38:e4:15:16:3e:42:c4:f5:ea:68:
95:9a:2a:3a:52:c4:58:d0:dd:10:9f:e2:e6:75:92:
cf:b7:d0:6a:42:ab:47:fb:b5:17:a3:ec:59:65:db:
ef:1a:8e:27:b7:3d:06:4d:a4:82:fc:c7:6f:25:8b:
0f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:BA:05:E3:8B:BE:D9:53:E6:52:77:8E:53:14:07:7C:A8:92:96
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/SEy6BeOLvtlT5lJ3jlMUB3yokpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.109.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:28:0e:a5:e3:0a:d1:4f:e1:18:37:72:42:9d:58:25:f8:75:
5f:70:fd:c3:bc:29:07:c4:f4:e1:6a:57:2f:21:b3:55:d6:cc:
7f:22:1d:05:b1:f3:7e:90:0a:0d:27:a4:07:c0:b2:8f:6d:2d:
9f:e5:3d:19:94:2f:b8:4a:0e:bf:35:95:97:71:11:b4:c8:1a:
3b:9f:1f:8a:7c:87:0f:58:1a:af:5a:b0:e3:7c:c1:07:32:b2:
0e:0b:b8:57:b3:4e:a8:de:bb:92:5c:eb:51:8c:d9:c6:11:26:
29:2b:fc:e8:a0:3c:2f:41:b9:06:f8:c8:4f:9e:17:02:61:2e:
4b:9b:0d:4f:c5:4d:40:4d:7f:af:0d:e8:37:8e:9a:0a:34:d7:
02:b7:55:c5:ad:f9:fb:bc:34:c6:86:66:35:6a:9b:e9:ea:86:
02:51:b6:48:74:f5:6a:6f:21:d0:bd:d9:5d:90:8d:bc:3a:f9:
75:e3:ae:2c:5d:90:5e:15:a5:65:70:36:e5:0b:e3:21:da:cd:
29:06:3a:39:2c:60:c0:a4:42:cc:fe:e1:91:34:85:71:e1:4f:
33:d4:77:3d:a0:b7:2f:0d:35:84:e0:7b:49:4d:bd:ba:79:f3:
e0:ea:c5:fd:b1:7b:d8:37:e7:16:ef:bf:6d:19:8c:7d:a9:f4:
94:17:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:34 2024 by rpki-client on console-ams.rpki-client.org