Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/lzsEx2UUcJw9OKZ3gBWzjSyBUa4.roa
File: lzsEx2UUcJw9OKZ3gBWzjSyBUa4.roa (raw, json)
Hash identifier: Np2KPFcXu0mbMCDDJokUwY6IRe+mR40+Pqud7xlqGPY=
Subject key identifier: 97:3B:04:C7:65:14:70:9C:3D:38:A6:77:80:15:B3:8D:2C:81:51:AE
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 018617D216C2F8883662BCDF5CEE5EB436A8
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/lzsEx2UUcJw9OKZ3gBWzjSyBUa4.roa
Signing time: Fri 03 Feb 2023 15:08:09 +0000
ROA not before: Fri 03 Feb 2023 15:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:d2:16:c2:f8:88:36:62:bc:df:5c:ee:5e:b4:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Feb 3 15:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973b04c76514709c3d38a6778015b38d2c8151ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:c7:cf:e6:85:0f:cd:31:05:fb:11:4e:30:
ec:81:ad:b0:53:f5:23:bb:5e:8b:6a:a3:0c:de:fd:
fe:22:a0:ff:f2:a7:6b:b0:96:1b:81:1a:4e:b5:fd:
68:1c:61:63:49:90:13:12:c4:85:24:bb:8b:7e:cc:
49:3c:cd:10:78:21:ee:ee:fe:47:c3:82:5d:f2:d3:
20:b7:1f:57:41:5e:32:b3:9c:48:c3:4b:95:d7:92:
92:c9:c5:3e:c1:8a:ad:95:e6:ad:41:f1:d9:86:a5:
2a:26:59:9d:3a:5f:34:59:c8:3c:8b:c0:9a:d0:8c:
43:6c:7a:df:91:22:09:85:b2:10:40:27:c5:87:82:
d7:88:40:8e:22:da:ff:2c:70:24:a3:7b:74:1f:04:
c8:be:5b:72:8e:c8:31:ed:38:a3:88:78:5a:de:31:
35:d3:35:60:38:3b:15:4b:9f:d2:3a:bb:d3:1e:4f:
6d:e2:33:b9:7e:61:7a:ab:c1:a5:fa:66:1b:3a:00:
db:b6:07:f7:05:33:9f:88:da:1f:ff:be:f9:5d:58:
a2:1e:65:d0:70:77:d5:20:87:b5:7a:f7:ba:c9:38:
89:34:32:1d:53:1f:5a:34:bc:c4:d2:18:40:fa:89:
f2:a8:12:b7:05:e2:65:dd:85:50:0f:a5:fd:95:80:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:04:C7:65:14:70:9C:3D:38:A6:77:80:15:B3:8D:2C:81:51:AE
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/lzsEx2UUcJw9OKZ3gBWzjSyBUa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ad:0e:58:73:6b:26:54:9e:36:d4:18:43:0d:2d:2e:a5:fd:
b6:5b:e1:f7:36:cd:22:97:5e:4d:52:9a:a7:b4:af:50:04:e2:
6b:d5:48:a4:15:f9:79:c4:69:01:33:3f:16:54:72:4f:30:0d:
a6:34:a1:f3:48:8a:00:99:3c:17:c4:86:b1:fb:75:4a:11:cd:
b2:32:1a:c0:0f:57:67:04:7d:f2:18:c8:95:a7:ff:d3:2a:67:
35:d8:8a:4f:e9:77:5f:5c:74:15:01:2d:54:51:ee:cf:51:07:
31:ed:a2:1b:fe:1a:a9:13:dd:2f:eb:c9:a2:08:a9:fe:57:06:
6a:c6:0b:6b:c1:4d:91:42:5a:7e:4e:11:41:ff:be:c6:5a:b5:
8c:ad:9b:6b:5c:4b:f6:d4:00:60:6d:22:c4:7e:73:01:f9:92:
e2:9a:c1:b1:01:0e:1e:65:54:c7:3b:08:ad:d2:ca:fd:86:87:
71:e2:fd:aa:18:3b:e2:87:ec:12:e6:db:6a:2f:57:bc:e8:63:
55:66:87:96:83:65:50:86:ee:9b:7f:d8:30:a4:55:6e:5e:8e:
7d:b0:ab:4c:51:04:f5:cb:47:6c:d7:94:8d:81:a0:b8:a0:f9:
ea:65:e8:63:5a:da:3b:eb:bf:2b:6e:48:fd:d4:6c:b4:87:bd:
61:5f:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 10:38:38 2023 by rpki-client on console-ams.rpki-client.org