Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/liV_Z5WCUeWHUCI0e_0QR0LxuTQ.roa
File: liV_Z5WCUeWHUCI0e_0QR0LxuTQ.roa (raw, json)
Hash identifier: pphnhgUDc0T/QQshoumCYf3opja1UPx64P6CiijIz+Q=
Subject key identifier: 96:25:7F:67:95:82:51:E5:87:50:22:34:7B:FD:10:47:42:F1:B9:34
Certificate issuer: /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial: 018C6C9C86BE90DCDF2AE071FEE613205A5E
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/liV_Z5WCUeWHUCI0e_0QR0LxuTQ.roa
Signing time: Fri 15 Dec 2023 08:34:06 +0000
ROA not before: Fri 15 Dec 2023 08:34:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:9c:86:be:90:dc:df:2a:e0:71:fe:e6:13:20:5a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Validity
Not Before: Dec 15 08:34:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96257f67958251e5875022347bfd104742f1b934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:10:1b:38:b8:0f:f2:53:b6:7e:10:c3:38:
ec:19:86:59:ce:8b:08:61:da:29:b5:dc:6a:14:db:
1e:e7:29:2d:e8:83:80:3a:4e:08:2c:f0:fb:ae:30:
06:ee:96:f5:73:66:d6:e0:72:d4:53:3a:a0:54:1b:
53:20:3c:65:6e:cd:6c:46:bf:dc:31:17:74:c1:b9:
7c:5c:68:b2:95:10:3b:56:e4:97:37:82:39:81:af:
3b:98:d3:6f:89:80:2d:cb:f9:50:38:12:2a:c1:5f:
4c:79:23:ff:9e:bb:22:0b:e1:a8:40:fe:51:a9:e5:
38:65:f3:54:00:1c:c1:2c:66:6d:6a:9c:61:fc:d2:
0e:dc:e5:1b:05:2a:1f:90:e4:e8:8d:1d:07:40:0d:
c9:fe:83:8f:9e:7c:94:ea:eb:28:8d:5c:a2:ad:88:
6e:01:83:0c:4f:bf:19:f1:43:35:a7:a7:08:be:a3:
22:fb:49:cf:08:e6:57:16:c4:72:23:73:9f:b2:2a:
d1:ad:48:b0:db:26:e7:8c:75:35:3a:9c:8a:19:0a:
ea:25:20:2d:c8:a3:77:9d:71:97:c8:bb:e5:24:f7:
bb:a3:fa:d0:68:89:ca:50:d7:0f:02:97:a7:3f:04:
d8:9d:7c:ec:d1:38:14:7a:08:24:d4:47:48:8b:12:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:7F:67:95:82:51:E5:87:50:22:34:7B:FD:10:47:42:F1:B9:34
X509v3 Authority Key Identifier:
keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/liV_Z5WCUeWHUCI0e_0QR0LxuTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.233.0/24
Signature Algorithm: sha256WithRSAEncryption
94:44:47:b7:83:7f:76:0a:ca:b3:03:1a:f2:14:3f:31:71:48:
1e:fd:e7:02:8a:8d:79:60:a9:96:d4:1b:d2:b3:6c:70:17:82:
78:ca:37:af:df:da:ee:46:77:be:ba:17:2c:d9:ef:d7:7c:5b:
05:e6:7d:79:06:19:9e:a2:53:47:8d:ad:69:d4:44:2d:72:43:
c2:ed:1d:ee:9b:10:a1:29:c5:4d:d9:72:e2:24:76:ac:c2:89:
84:a8:5f:c8:1e:2e:ee:19:18:ba:16:f5:a4:1d:b9:52:67:d6:
07:78:77:ed:43:17:10:de:99:a4:28:b4:22:67:4c:fc:37:93:
d9:d9:ef:7d:c4:ac:19:ae:d7:e5:c6:4e:fd:db:da:62:da:d2:
47:4a:79:23:29:10:5b:45:95:f5:b8:ff:70:da:82:88:ec:bf:
a4:98:0c:2b:1b:47:e0:65:87:29:18:53:46:5a:17:e9:4c:7b:
dd:5e:60:82:9c:bf:c7:02:f3:56:0c:94:6c:0c:46:66:cc:8c:
11:db:db:3e:41:18:c1:6a:51:c4:20:59:25:7a:ac:b0:4a:27:
ac:c5:40:1c:6d:d2:1c:32:83:a7:5e:cf:5f:b4:60:aa:f1:5c:
06:e7:d4:d7:d6:3b:dd:70:ae:f6:c2:cf:83:4e:af:26:1f:e1:
f9:25:e0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:04 2024 by rpki-client on console-fra.rpki-client.org