Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/vFhX7iAldZehEPtGVtFnroAYOlY.roa
File: vFhX7iAldZehEPtGVtFnroAYOlY.roa (raw, json)
Hash identifier: Xm8w67hiA8OjJrQsaemYitl1abij49etLRPjjARM/PI=
Subject key identifier: BC:58:57:EE:20:25:75:97:A1:10:FB:46:56:D1:67:AE:80:18:3A:56
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 01856F8B845F46952B8A3CB677C7FFAB5ED2
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/vFhX7iAldZehEPtGVtFnroAYOlY.roa
Signing time: Sun 01 Jan 2023 22:54:52 +0000
ROA not before: Sun 01 Jan 2023 22:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:84:5f:46:95:2b:8a:3c:b6:77:c7:ff:ab:5e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Jan 1 22:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc5857ee20257597a110fb4656d167ae80183a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:99:4e:a3:2b:6f:86:e8:82:f9:e1:59:ed:
f4:0a:40:ee:24:bb:9a:d9:42:30:85:94:b4:a8:24:
fc:30:33:be:e2:bb:83:ab:85:9d:79:d5:e8:11:f0:
d9:14:50:a9:8f:ea:d7:76:2e:10:16:78:c7:7f:7f:
da:89:f9:4c:4d:08:eb:b2:6f:92:ab:55:b5:9f:40:
5d:29:ea:b9:95:98:38:2b:53:c6:9a:d4:e9:dd:7b:
15:6c:59:e0:69:ba:c2:49:71:ee:33:9d:ce:b4:5f:
05:f6:72:bf:db:e1:32:0d:bf:64:e6:b3:7c:d3:5e:
63:c1:f9:c3:6a:fb:65:58:98:c8:13:b5:b5:79:dc:
d1:66:5e:0d:55:d2:51:c9:0b:03:5e:63:45:37:18:
73:7f:e8:99:b7:d5:ac:e2:ed:99:3b:46:50:37:da:
bb:2c:f5:cb:b5:61:24:47:ce:3e:a3:65:10:b2:aa:
9e:b8:d8:25:fc:38:1a:47:07:20:80:da:2d:b1:6c:
9a:2a:1d:3e:b8:f4:8f:ad:a8:01:6a:23:47:1c:53:
ac:39:9c:60:9b:ca:2f:fb:89:fe:ab:f3:cf:88:98:
c3:72:63:84:8b:c0:ed:d9:2a:6c:73:cc:b1:c5:d8:
7c:74:44:eb:fe:ad:fb:cd:0a:b6:2f:d4:ad:bd:ac:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:58:57:EE:20:25:75:97:A1:10:FB:46:56:D1:67:AE:80:18:3A:56
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/vFhX7iAldZehEPtGVtFnroAYOlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:50:0e:b2:92:ad:38:98:0b:a5:88:e1:54:de:eb:fd:1d:41:
e8:a2:8a:ec:07:35:9d:2c:94:1a:87:38:7f:83:d3:1a:7b:fe:
6f:5d:78:35:bc:95:a0:a1:a3:81:dc:5c:8f:0f:1e:85:c7:1e:
c0:e4:78:90:12:98:a5:5f:e9:18:7d:b2:04:fe:0f:d9:68:c9:
95:db:a1:88:a1:69:cb:a9:7e:25:3d:1f:89:c3:11:9d:1c:dc:
a9:4d:4f:71:62:e1:3f:90:6e:99:69:1b:b3:b6:0d:94:9c:e1:
66:cf:94:b4:da:b6:52:a7:d5:30:f8:58:6b:fe:52:01:3c:fe:
0a:58:3e:08:6c:b5:c5:41:f5:12:9f:67:06:d3:74:ba:85:40:
d3:d8:6f:19:2e:68:0c:77:5f:9a:4a:0d:59:25:dc:4c:11:c1:
7c:75:ab:a3:5f:9d:8e:6a:34:f4:b0:14:2c:9e:2d:2c:b4:e0:
c0:3f:a1:7b:b2:57:b7:4e:03:ab:fb:ad:aa:0f:76:2f:cd:c6:
31:15:d3:e7:a5:0f:62:77:f0:f6:79:1d:8f:78:60:1f:f5:ea:
19:3a:7c:5d:58:b5:9b:04:2e:ca:59:c5:47:6e:77:fc:1b:50:
aa:98:dc:b3:78:47:82:4e:69:44:f7:98:37:a2:03:13:38:e6:
f3:9e:9a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:42 2023 by rpki-client on console-fra.rpki-client.org