Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/kOm-PDYmhTZegVO71npIbtyRnIo.roa
File: kOm-PDYmhTZegVO71npIbtyRnIo.roa (raw, json)
Hash identifier: V+gxaCMjslSLTqSA8IlqMDlrtjdrTomLVS9oUrHQrcM=
Subject key identifier: 90:E9:BE:3C:36:26:85:36:5E:81:53:BB:D6:7A:48:6E:DC:91:9C:8A
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 018C6C99C7195F4C143401316E70221326A9
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/kOm-PDYmhTZegVO71npIbtyRnIo.roa
Signing time: Fri 15 Dec 2023 08:31:06 +0000
ROA not before: Fri 15 Dec 2023 08:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26548
IP address blocks: 146.19.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:99:c7:19:5f:4c:14:34:01:31:6e:70:22:13:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Dec 15 08:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90e9be3c362685365e8153bbd67a486edc919c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:41:22:40:20:1a:7f:9b:f4:d3:dc:cb:10:
d1:49:46:a1:b5:e5:3e:fa:7d:4c:3e:54:7f:63:7f:
90:0a:b6:28:c6:18:3e:81:02:f9:ac:e6:e4:87:61:
c5:07:94:7c:a3:4c:19:34:61:73:cc:f9:56:30:9b:
a9:45:3c:b2:51:45:02:91:ad:cf:8b:f5:e7:60:d4:
81:f0:c3:07:d9:e0:b7:65:65:11:77:13:a9:65:38:
db:b1:dd:49:28:0e:4f:f2:94:48:ae:9c:9e:ae:ad:
42:d3:91:0f:e2:2d:9d:0e:d3:c0:a9:a7:3b:c1:2f:
a5:49:6e:b7:90:cd:c5:96:60:cd:91:9d:13:9d:48:
2b:2a:20:e7:a8:c8:ea:c1:ba:d5:4e:cf:ca:1a:29:
4f:12:f5:d4:ac:7e:ed:48:9b:20:89:9f:0d:14:61:
a7:3e:c2:39:31:75:09:c5:65:9f:4b:f6:3f:4f:85:
5f:cb:50:70:af:8b:31:93:34:25:4e:32:db:b9:d3:
71:7f:59:57:e5:b5:d3:6a:e1:b8:ed:f5:6f:9f:75:
14:c8:f1:9f:d9:d8:18:8a:6f:7e:98:30:53:3d:b3:
11:42:46:38:1e:d3:a5:3a:44:c0:27:83:67:3d:a5:
78:10:b1:76:24:01:2e:e7:c6:1f:ad:73:6d:76:52:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E9:BE:3C:36:26:85:36:5E:81:53:BB:D6:7A:48:6E:DC:91:9C:8A
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/kOm-PDYmhTZegVO71npIbtyRnIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.78.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c8:31:eb:c1:43:5c:41:da:eb:1d:08:9f:cc:bc:42:6e:e3:
4f:53:96:c7:85:58:dc:05:ed:f4:66:cc:8b:59:0d:eb:9e:eb:
fc:dc:c2:0e:20:16:f4:ae:4f:49:04:b0:50:ba:16:67:40:4a:
5d:51:85:9b:aa:5b:a5:c8:45:50:4e:47:31:97:55:b6:70:dd:
2a:16:c2:3d:87:b4:71:17:bc:59:5d:80:95:8a:a0:ec:6a:23:
89:5b:ee:0b:48:63:99:0c:3f:fd:17:c8:53:44:38:a3:3b:49:
7c:27:b3:5a:81:81:f0:1f:bf:f9:4a:f8:4a:77:16:73:e4:b4:
3a:aa:34:8e:0a:72:1c:b1:45:f5:b6:ec:42:b1:1f:1a:05:40:
40:f2:9d:59:41:e3:a9:6d:9f:96:8a:1b:5f:ac:7f:2b:0a:b4:
32:83:c6:62:05:61:b6:4a:7d:5a:34:bf:58:67:04:4a:75:a5:
79:d9:25:9a:09:73:6e:cd:86:40:f1:92:00:13:6b:99:fd:a7:
ab:a1:55:5e:df:cd:9a:48:e5:9a:4c:a9:9a:52:f2:03:30:d3:
a0:4d:8c:14:47:b5:d1:fc:5e:a6:00:e5:2d:c6:88:6e:54:b7:
5c:ba:a1:c6:00:2e:d9:d8:6d:66:d1:11:e9:ab:4e:9a:b3:a8:
33:11:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:09 2024 by rpki-client on console-fra.rpki-client.org