Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa
File: DRVO8Rds-BjvhveKmD08LOS5ukE.roa (raw, json)
Hash identifier: KNWdAsgckDPmztEYCRhE92hHD9pvT/cCWC1jrSYgf5w=
Subject key identifier: 0D:15:4E:F1:17:6C:F8:18:EF:86:F7:8A:98:3D:3C:2C:E4:B9:BA:41
Certificate issuer: /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial: 018A68D339C5F1B683F7FAE9C3AB3F5E24D4
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa
Signing time: Wed 06 Sep 2023 04:49:47 +0000
ROA not before: Wed 06 Sep 2023 04:49:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 146.19.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:68:d3:39:c5:f1:b6:83:f7:fa:e9:c3:ab:3f:5e:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
Validity
Not Before: Sep 6 04:49:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d154ef1176cf818ef86f78a983d3c2ce4b9ba41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:b4:2c:9b:16:9c:6b:af:07:ad:bd:f3:b8:
6e:99:85:db:64:d2:24:59:ca:47:8c:1c:c2:28:36:
4e:3a:46:d9:fe:ac:99:48:d5:d0:f3:c5:c5:87:02:
f9:31:59:f5:12:96:5b:a4:06:2d:5b:9c:2a:bb:df:
fd:fe:80:ee:b8:c7:39:19:1e:b5:e4:bf:d6:2c:db:
d0:ea:ba:e4:6b:51:62:6d:de:9e:12:e3:f5:fd:ef:
5b:b0:1c:4f:d3:9c:f1:06:60:09:d2:ea:f8:ef:33:
93:4d:17:be:c6:d6:55:28:db:74:b7:c2:a4:92:1f:
1d:02:dc:fd:71:cb:ae:ca:38:f9:e8:e3:83:5d:2f:
bd:c8:83:88:25:9b:38:7b:ec:0d:78:ef:87:a4:22:
cd:26:be:62:c3:0d:cd:0b:56:e6:cd:c3:c3:5c:f6:
18:32:b3:ba:be:20:a1:21:d0:5a:eb:7e:82:0d:3e:
7d:ce:19:b6:ce:89:5f:3c:59:3d:9f:4f:b8:1e:05:
93:dd:2b:e9:9b:ca:a9:ab:f8:bd:db:08:50:4c:79:
0b:d7:db:d5:ad:cb:d4:f1:a2:96:0b:ee:bc:e6:e9:
81:71:06:bc:4b:08:b0:00:6d:97:e7:af:fb:d0:a1:
02:f7:55:92:be:e2:5a:ff:59:5b:c7:b3:36:18:8e:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:15:4E:F1:17:6C:F8:18:EF:86:F7:8A:98:3D:3C:2C:E4:B9:BA:41
X509v3 Authority Key Identifier:
keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e3:58:1d:de:f4:9a:66:71:36:7f:f4:8f:9b:e0:f8:c7:25:
fc:cb:18:b0:62:b8:ab:e9:65:53:6e:66:df:37:18:1e:2b:27:
8c:57:43:40:4d:a5:b2:d0:24:c7:b2:ef:15:49:fa:15:62:90:
af:86:b3:08:09:3a:5e:3e:19:c8:ac:4c:0f:64:47:8d:d6:e3:
e9:78:7c:c7:b8:32:6c:57:46:6c:66:f9:ff:1d:d2:81:23:23:
42:f8:52:96:be:f8:d0:00:87:9b:09:f8:b5:31:c2:d9:fb:9b:
5c:64:bd:c3:0a:af:29:73:ca:5c:42:3a:98:e0:b7:75:66:d7:
2e:d2:bb:dd:30:79:e0:28:ea:dd:7f:98:10:36:d9:35:82:4a:
49:67:da:16:61:79:31:d6:32:f9:a0:fe:19:ae:9e:24:6a:3a:
84:47:97:fa:a2:34:e9:91:ed:a0:4c:ed:ad:b0:f9:e5:9c:5c:
70:d8:42:90:c4:97:6a:a9:34:4f:9c:1f:81:f8:76:6b:94:aa:
52:34:c4:9f:4b:f3:0e:94:6d:86:90:28:d4:ee:3e:ac:68:6a:
a0:a9:a3:47:77:b6:61:a0:d4:4e:5a:5e:9c:64:09:f1:7c:a0:
c5:06:29:c9:5f:58:c5:85:38:cb:2b:12:9c:59:3f:cf:4e:73:
25:b4:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 07:43:06 2023 by rpki-client on console-ams.rpki-client.org