Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/IOH56Bd_aGqPOpcb0W0NKuS8sG8.roa
File: IOH56Bd_aGqPOpcb0W0NKuS8sG8.roa (raw, json)
Hash identifier: OpbxzwzTQZwNo19GMZeWfS0Jjx2UTwU05EMX8dAa9J0=
Subject key identifier: 20:E1:F9:E8:17:7F:68:6A:8F:3A:97:1B:D1:6D:0D:2A:E4:BC:B0:6F
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 018A8013F6565F43A99499EABD0CAD3631C6
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/IOH56Bd_aGqPOpcb0W0NKuS8sG8.roa
Signing time: Sun 10 Sep 2023 17:11:46 +0000
ROA not before: Sun 10 Sep 2023 17:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:13:f6:56:5f:43:a9:94:99:ea:bd:0c:ad:36:31:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Sep 10 17:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20e1f9e8177f686a8f3a971bd16d0d2ae4bcb06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:44:12:4e:1b:84:b4:6b:80:fc:18:6f:06:
40:ff:19:96:71:0d:5b:63:7e:cf:d4:fb:7c:af:c7:
70:42:d2:97:50:ee:e0:33:db:1e:7a:d2:98:b2:75:
03:c0:80:c0:07:67:a6:e8:73:d8:cd:3f:e6:db:12:
bb:2a:f3:e9:10:b5:29:c2:af:db:22:6d:9e:d7:62:
35:50:c9:7b:3d:5f:d1:7c:a9:c3:50:2a:30:8d:5a:
59:19:a3:6f:c7:50:20:4f:d6:91:bf:42:d4:29:f0:
51:ba:57:3f:c9:17:23:3c:47:09:a9:a6:4a:6e:4a:
8b:3b:52:37:bb:90:32:06:3e:69:88:65:d5:a8:a8:
11:24:49:79:e8:16:43:f0:03:f6:1c:f0:5b:fd:d8:
0d:fe:8f:fa:bb:c5:f2:05:28:26:f1:98:ef:b2:f3:
7f:95:7a:14:7d:50:3c:4a:28:88:4c:1d:7e:5e:99:
21:eb:75:a1:58:f4:e6:93:5e:9c:bf:90:ee:5d:cf:
a4:20:fc:da:79:95:8e:b6:18:95:94:26:20:9f:d9:
37:b0:07:df:6f:57:bd:f6:10:72:3b:48:80:a4:d6:
e7:5d:a5:24:7c:63:0e:60:62:33:55:50:36:36:2a:
e5:75:85:cb:6c:03:40:9a:98:22:ac:32:e1:7f:c1:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E1:F9:E8:17:7F:68:6A:8F:3A:97:1B:D1:6D:0D:2A:E4:BC:B0:6F
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/IOH56Bd_aGqPOpcb0W0NKuS8sG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a2:57:7a:56:bb:c3:91:57:a3:ba:26:77:e0:89:a2:6e:99:
5f:f6:09:07:27:2b:2d:86:ad:40:6a:c8:ac:e9:9d:d0:b8:63:
b3:cc:df:62:b4:43:fc:73:ab:c4:30:2b:f1:3f:4e:a7:d2:bc:
00:ec:ca:30:65:27:9d:3c:32:ee:70:9c:aa:06:d3:65:fa:46:
be:e8:68:d2:cc:61:c5:30:88:c4:9b:7a:87:07:45:05:1c:b6:
3f:ae:f9:82:e3:87:51:86:a6:e3:0d:f6:c0:cf:44:bf:14:b3:
59:9b:40:71:9b:26:3b:f5:0f:6b:9d:55:e3:c2:da:a6:65:f7:
e0:78:a7:0c:25:15:11:fd:0f:3f:70:02:b1:cd:21:8f:98:c1:
fc:30:bd:bd:5e:d3:65:d9:07:5c:19:fc:71:78:1d:f0:27:7b:
53:42:b9:ba:7d:60:24:7e:9b:72:84:78:29:63:02:16:af:ed:
58:e3:55:7c:51:c0:e7:4e:72:42:f0:c2:f6:5d:0f:4b:76:7f:
e7:5f:22:df:66:7c:95:1e:17:1f:18:4d:b1:b6:a4:1a:e5:78:
8d:e7:70:05:72:d8:db:0d:57:06:c3:36:42:cc:5e:04:28:54:
fc:fa:de:54:11:05:ee:61:82:19:de:0d:d8:cd:48:a9:9f:38:
13:a7:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 21:37:41 2023 by rpki-client on console-ams.rpki-client.org