Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Tp6mPQT3CTU1-KSf2zbMBE3LBSg.roa
File: Tp6mPQT3CTU1-KSf2zbMBE3LBSg.roa (raw, json)
Hash identifier: AhuQnqw2CnQIO/Si12/3bD4pAlLPM1Bzu2pJVdjx4+4=
Subject key identifier: 4E:9E:A6:3D:04:F7:09:35:35:F8:A4:9F:DB:36:CC:04:4D:CB:05:28
Certificate issuer: /CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Certificate serial: 01856C0144A9F5950CB3C4D840BEC9875B0F
Authority key identifier: 14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Tp6mPQT3CTU1-KSf2zbMBE3LBSg.roa
Signing time: Sun 01 Jan 2023 06:25:00 +0000
ROA not before: Sun 01 Jan 2023 06:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:44:a9:f5:95:0c:b3:c4:d8:40:be:c9:87:5b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Validity
Not Before: Jan 1 06:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9ea63d04f7093535f8a49fdb36cc044dcb0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:e0:99:e3:57:7a:9a:1d:c6:7c:e2:0f:e1:
75:ab:8d:85:fb:1f:56:f0:cb:da:4a:e5:7a:a2:c3:
e2:a2:2a:46:14:72:24:30:ed:3c:ad:e4:af:ee:9e:
e1:53:a5:c2:6a:dc:57:8b:ae:04:82:ee:b7:0e:87:
ea:67:db:29:fc:a4:99:31:9e:f4:1f:87:8d:28:9d:
f3:0f:05:bd:f0:78:e4:3d:b3:4e:2c:26:fc:6f:04:
8e:3e:1a:3b:25:89:47:87:0e:7f:e0:21:fc:50:82:
94:8a:0b:a3:75:c8:a5:c0:52:8d:de:51:b7:b3:7b:
89:25:a7:1c:29:09:ee:cb:ab:e0:b7:8a:a6:c5:ee:
4b:37:bf:f4:e9:f3:32:92:f3:96:43:88:fd:8e:da:
0d:77:f7:65:5e:93:c4:18:6d:5f:06:f5:af:ca:c6:
b2:9f:3e:d2:9b:e9:a4:af:a4:0a:7e:04:d0:cc:fe:
28:c1:7f:6d:53:c1:34:f3:76:7e:24:0f:9f:f7:b0:
d8:f3:84:be:2b:d1:3e:80:ad:9d:20:16:4c:0a:23:
e4:92:7a:9c:d2:c9:c3:56:71:d8:cf:fe:b1:1d:49:
08:90:2d:56:af:19:65:ce:9e:42:8e:aa:64:99:89:
ce:0f:dd:5c:b6:67:ed:28:0a:e6:13:55:d7:a8:6d:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:A6:3D:04:F7:09:35:35:F8:A4:9F:DB:36:CC:04:4D:CB:05:28
X509v3 Authority Key Identifier:
keyid:14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/Tp6mPQT3CTU1-KSf2zbMBE3LBSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
Signature Algorithm: sha256WithRSAEncryption
af:81:4f:8a:a1:8c:f3:17:b3:7b:e7:14:32:5b:ce:9b:7f:97:
64:61:e4:68:7b:75:ba:9c:a9:14:90:2c:44:b7:b1:eb:93:67:
83:7f:a0:8e:a2:73:37:82:ea:de:67:3b:cc:41:3e:c9:b0:e3:
ce:a4:1b:16:0a:aa:80:7f:6d:f5:c5:a4:3c:cb:98:36:75:39:
83:09:d7:a5:46:4b:40:04:8e:42:5b:aa:4c:af:9f:ce:d6:40:
fa:46:0a:6a:21:96:86:40:81:24:1d:ac:e1:c9:1e:ea:ae:0a:
91:4d:93:58:01:8f:df:dd:48:bd:0e:c5:f7:94:e3:92:54:55:
c4:84:62:8c:c1:15:c7:b0:78:cf:12:73:c9:6d:e3:15:cf:7b:
e4:9f:ff:62:c6:5e:b2:d7:ce:fe:65:2f:8c:19:c3:1c:6a:c4:
c3:24:31:6a:d1:1f:3f:c6:18:40:57:82:53:20:58:e5:30:18:
15:7e:98:7f:08:73:91:01:be:b1:b8:b1:76:78:f2:e9:fa:0f:
61:29:07:22:df:d5:89:7b:1d:d7:84:a9:6d:a7:ff:f6:0e:ed:
14:9a:b5:89:53:a3:3b:7b:95:81:3a:0b:c5:87:86:1f:77:ad:
f5:61:1b:9f:4b:61:fe:9d:12:14:60:bc:1c:ce:a8:88:4d:09:
5b:ed:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:01 2023 by rpki-client on console-fra.rpki-client.org