Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/o3NzgPjv0k6dM0tOBKXhAve3INw.roa
File: o3NzgPjv0k6dM0tOBKXhAve3INw.roa (raw, json)
Hash identifier: +BbSf2f/d75+nZoR/aCl2lZ4XfmnKlaltNrzkGiQVYU=
Subject key identifier: A3:73:73:80:F8:EF:D2:4E:9D:33:4B:4E:04:A5:E1:02:F7:B7:20:DC
Certificate issuer: /CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Certificate serial: 018682D0EAA0460E6CAB9D12C3C6F7BE6125
Authority key identifier: 14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/o3NzgPjv0k6dM0tOBKXhAve3INw.roa
Signing time: Fri 24 Feb 2023 09:46:14 +0000
ROA not before: Fri 24 Feb 2023 09:46:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 146.19.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:d0:ea:a0:46:0e:6c:ab:9d:12:c3:c6:f7:be:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c0be084bfa0c8e701e9c3d42c187c7ba6a40ed
Validity
Not Before: Feb 24 09:46:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3737380f8efd24e9d334b4e04a5e102f7b720dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:b8:26:cc:48:e6:6b:fb:5c:8f:f6:3d:15:
eb:9b:2b:2f:1e:2a:74:fb:e1:4e:84:6c:92:4a:a3:
60:11:99:88:7d:1b:7d:67:16:10:23:fc:c5:df:73:
2d:ad:de:72:7e:99:6f:5d:a4:52:d5:e9:dc:62:7b:
cb:c4:e7:4f:94:14:de:1f:ac:07:0c:06:14:fc:fb:
5b:ef:7c:25:8e:59:79:9e:f3:10:14:c5:aa:07:80:
02:df:26:84:1a:0e:8d:18:22:bf:d3:9a:3d:42:87:
87:d6:c6:70:df:75:71:9e:40:d6:00:3b:71:48:f1:
36:22:fd:34:5e:ee:c4:38:30:07:a0:db:79:80:38:
31:3f:a7:73:21:b6:87:d5:42:98:0e:4e:20:ec:b0:
a8:1a:7f:60:1f:d4:f8:e8:d1:5d:02:8a:2c:a2:e7:
71:3c:f7:32:83:58:ff:ab:c0:a0:f6:8c:98:08:19:
44:6e:ff:07:e0:77:c5:15:2e:20:de:ce:77:b3:b9:
05:e0:01:f2:c6:71:15:27:cd:c7:46:76:4d:dd:ec:
49:62:4f:64:3f:8d:49:86:15:b0:6f:01:5b:ea:08:
a8:a5:36:bb:33:73:74:e0:13:c9:80:cc:35:11:b4:
52:0b:cc:fb:15:0a:ea:39:c0:98:53:2d:df:7a:98:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:73:80:F8:EF:D2:4E:9D:33:4B:4E:04:A5:E1:02:F7:B7:20:DC
X509v3 Authority Key Identifier:
keyid:14:C0:BE:08:4B:FA:0C:8E:70:1E:9C:3D:42:C1:87:C7:BA:6A:40:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMC-CEv6DI5wHpw9QsGHx7pqQO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/o3NzgPjv0k6dM0tOBKXhAve3INw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b0b452-cfb8-47f4-9549-03e001a7f604/1/FMC-CEv6DI5wHpw9QsGHx7pqQO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.155.0/24
Signature Algorithm: sha256WithRSAEncryption
09:80:58:87:e0:35:63:5d:67:f8:89:1c:d7:92:c0:ba:a3:75:
f0:cd:0e:2f:19:49:f3:f4:0c:cc:71:90:0d:62:7f:46:f2:c5:
bf:5f:d1:27:23:4e:35:af:9c:f5:54:b1:d8:20:d3:25:d1:c2:
20:a2:c7:4b:6c:a3:77:43:d5:b6:11:bf:8b:4e:6b:66:3d:79:
02:7c:91:b3:f9:e5:7e:5f:05:65:5e:2e:d4:6f:27:bc:66:06:
38:7c:9a:25:22:ae:fd:0c:bb:47:b8:1d:e5:c0:12:8e:03:a4:
72:b0:47:8f:20:be:50:64:7b:01:7c:2e:7b:ad:65:a1:5c:6c:
8a:dd:a7:1f:02:4b:00:eb:65:20:ee:67:1d:69:15:f1:c6:e6:
67:1c:51:a3:d6:43:16:9f:26:11:19:6b:73:14:e5:f7:2a:e4:
80:c4:55:0f:9f:73:a7:a9:f9:7e:d8:76:67:3a:65:83:2a:dc:
8a:60:71:c1:65:3e:8c:b4:c3:26:47:98:a6:31:e3:f0:02:58:
c5:9b:67:f6:58:84:51:7f:be:64:74:c0:90:61:bb:c0:bc:a0:
7c:81:63:86:66:90:69:d2:8a:9c:9e:2d:91:29:65:99:30:d5:
e3:33:f8:31:78:d1:c3:d3:17:5a:d4:b2:bd:b9:21:69:cf:c5:
e3:b1:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-ams.rpki-client.org