Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/H9Jaq-f4rIBYo91RDXiyQELKYuE.roa
File: H9Jaq-f4rIBYo91RDXiyQELKYuE.roa (raw, json)
Hash identifier: 1lVXU/Pn88NY1qd9EDGlNm4xdt7vfMNDfCB8JswXGRM=
Subject key identifier: 1F:D2:5A:AB:E7:F8:AC:80:58:A3:DD:51:0D:78:B2:40:42:CA:62:E1
Certificate issuer: /CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Certificate serial: 0188512DEE93DD10088BB8348A82A86A77F0
Authority key identifier: 02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/H9Jaq-f4rIBYo91RDXiyQELKYuE.roa
Signing time: Thu 25 May 2023 04:32:24 +0000
ROA not before: Thu 25 May 2023 04:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 146.19.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:2d:ee:93:dd:10:08:8b:b8:34:8a:82:a8:6a:77:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02edfcfb335c9d76888d81b73ecd8a40bafecffc
Validity
Not Before: May 25 04:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fd25aabe7f8ac8058a3dd510d78b24042ca62e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3b:ad:d1:77:8b:17:50:96:23:96:dc:68:9a:
e4:1a:42:2c:10:8d:86:c9:2f:c6:c4:03:50:86:3c:
de:41:c1:e3:5a:9e:84:5e:b9:01:c7:65:d9:74:b6:
25:9d:bf:b6:64:40:c3:21:c1:d6:57:9c:9e:02:3e:
f1:a0:dc:4f:5b:71:33:64:c8:52:ae:85:9b:cb:c7:
f0:e3:44:4b:d1:97:31:28:73:b3:69:cf:14:d2:9e:
64:76:22:4d:ea:4c:8f:f6:b7:49:55:43:57:80:79:
8e:d3:11:d4:2e:25:31:14:f2:34:7a:6c:66:3d:64:
86:ba:62:ff:90:fe:e7:db:b8:ef:c0:52:0a:18:72:
83:2d:46:ac:d9:13:71:60:5c:d4:6c:e0:8a:11:b3:
7d:d8:b5:b8:ea:3e:89:6d:61:eb:de:5c:cd:cb:f6:
b2:8f:d8:5f:92:b1:7b:4b:02:18:1f:49:49:c1:2d:
34:04:92:1d:01:bc:18:0e:de:5a:7e:6a:2e:16:04:
ab:f5:73:50:6b:05:dc:8e:16:44:17:90:dc:80:11:
4c:af:d6:15:c1:02:6f:f9:9e:67:cf:96:45:14:e8:
d2:21:12:a7:d6:8a:1f:26:0f:ef:f3:f2:08:48:b2:
4d:cb:77:95:53:e0:16:73:1f:dc:e0:2a:01:9d:95:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:5A:AB:E7:F8:AC:80:58:A3:DD:51:0D:78:B2:40:42:CA:62:E1
X509v3 Authority Key Identifier:
keyid:02:ED:FC:FB:33:5C:9D:76:88:8D:81:B7:3E:CD:8A:40:BA:FE:CF:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Au38-zNcnXaIjYG3Ps2KQLr-z_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/H9Jaq-f4rIBYo91RDXiyQELKYuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7de221-e3be-456d-91f4-b14b7cf70d2f/1/Au38-zNcnXaIjYG3Ps2KQLr-z_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:64:37:bb:73:97:7f:0d:21:bf:be:8d:ce:28:2f:31:73:a0:
5d:a6:31:c9:72:75:0a:f5:70:75:60:f3:17:55:2a:14:1e:29:
e2:6f:0e:bd:b0:a0:c5:83:82:f1:49:5e:19:d0:a8:92:2e:41:
29:7e:83:fd:85:bc:81:58:c7:96:ec:7b:1b:d1:67:80:12:df:
02:a5:ad:c5:93:56:ce:4e:ef:5b:f7:8a:e7:b2:36:e6:e1:7b:
5f:17:2a:60:9e:b1:22:92:95:33:84:7d:20:ae:a7:d6:8f:52:
0a:fc:ff:0f:2f:37:87:5d:72:9a:79:c0:ef:ef:86:57:73:5a:
8f:f5:c5:f3:a7:12:1e:70:f8:65:70:dc:09:74:43:87:02:1f:
05:18:a4:3d:d8:71:30:e1:8e:52:76:ed:28:27:e6:63:cc:13:
99:b0:81:53:0c:46:b0:c0:bc:e2:c5:82:9c:ed:56:b9:01:3e:
74:90:f4:28:b8:39:a1:50:e2:3d:23:77:63:de:82:c6:53:6a:
f4:0f:84:4b:d3:42:e0:8d:e8:ed:b1:61:4d:41:52:8b:c6:5c:
4f:b4:da:12:b7:3a:09:3f:69:49:47:c3:fb:0e:a0:00:1f:72:
83:8e:3b:cc:fb:38:7d:88:f6:8f:66:13:4c:53:e8:98:4d:45:
e3:a9:87:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-ams.rpki-client.org