Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wMpp2naalAVR-ibDBBp7agm3Mus.roa
File: wMpp2naalAVR-ibDBBp7agm3Mus.roa (raw, json)
Hash identifier: ZQTUT2TiQH2rQbBwUx5bmL0XBmnlob8C9i0DdVanc6M=
Subject key identifier: C0:CA:69:DA:76:9A:94:05:51:FA:26:C3:04:1A:7B:6A:09:B7:32:EB
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 018A75EEB53A0395E5EE674732CD1C2FCBD9
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wMpp2naalAVR-ibDBBp7agm3Mus.roa
Signing time: Fri 08 Sep 2023 17:54:52 +0000
ROA not before: Fri 08 Sep 2023 17:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:ee:b5:3a:03:95:e5:ee:67:47:32:cd:1c:2f:cb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Sep 8 17:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ca69da769a940551fa26c3041a7b6a09b732eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:60:26:11:18:2b:69:c2:6a:16:f8:8b:66:
e8:38:93:53:a6:c7:88:c4:c5:1e:ae:fe:d8:b7:72:
d7:0d:ac:71:77:84:3e:af:59:e9:4e:45:f0:29:65:
02:d9:13:88:98:c9:a8:52:17:d7:f8:f4:98:48:ec:
19:89:9c:c7:3e:f1:ea:cc:44:4c:c4:34:f2:e5:10:
a5:06:15:a5:31:d9:7a:50:ea:98:56:a6:d0:c8:10:
c4:30:74:35:d0:96:c5:6f:58:a0:48:55:3a:78:3b:
49:71:da:8e:e8:ae:a5:2a:ff:e5:84:3f:9b:b8:0a:
34:ad:3a:25:9d:b8:55:f1:8e:8c:36:8c:60:38:d3:
0f:4c:60:48:b5:05:b2:c0:1f:f3:d3:97:b5:a2:0c:
b4:e6:89:df:25:45:b1:01:cc:fc:4c:9a:57:bb:8e:
d9:96:e6:de:95:cc:df:ee:7d:ab:1a:cf:fc:c0:61:
95:68:ae:ae:69:5e:f2:08:c8:c7:46:11:71:7e:4c:
1f:b7:74:a1:2c:ba:28:88:03:17:40:bf:14:45:e9:
ed:d9:9a:a7:5b:94:a9:56:6d:39:a0:2f:3c:a6:dd:
a0:f0:65:59:5a:bf:ce:7c:30:05:d7:50:0c:30:be:
e4:37:11:45:16:3f:a7:81:df:5c:65:db:38:d1:2f:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CA:69:DA:76:9A:94:05:51:FA:26:C3:04:1A:7B:6A:09:B7:32:EB
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wMpp2naalAVR-ibDBBp7agm3Mus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a4:be:9f:62:a2:81:4b:b0:ed:d8:1f:ef:3f:a1:86:fb:04:
f8:ae:c6:01:69:48:71:66:a8:cf:fe:7a:82:92:46:23:2a:41:
e3:e5:de:97:ff:f8:13:96:05:cd:f6:85:58:5c:9d:1d:31:64:
97:bc:7a:1b:78:68:a7:3c:29:28:2f:15:99:95:1b:89:4e:1f:
b5:9d:30:d3:88:9c:15:8b:48:96:99:ed:e8:fc:93:c8:56:45:
9c:db:12:ae:ce:16:78:c4:d4:cb:5b:88:1e:6c:5b:a9:9f:80:
60:a8:8c:c2:b7:ee:f9:fc:e7:e9:51:9b:60:17:b9:e8:2f:b1:
72:f5:bd:b2:d5:52:eb:18:eb:7c:6a:84:c9:06:ee:be:c3:a0:
37:53:e9:db:fe:d1:2f:3c:5d:ea:4e:db:53:00:3c:70:b2:eb:
df:1a:cb:7a:7c:14:8c:1d:04:d5:ce:b0:fd:9e:86:94:e2:30:
f1:f8:56:7d:d9:af:a0:e0:b9:97:64:67:b0:73:c3:d1:5a:f1:
b5:11:7a:76:e4:1e:14:41:28:f2:b2:ec:df:ed:2f:97:df:af:
a8:03:d0:88:30:cb:34:79:14:05:10:82:e5:ec:4e:d0:81:54:
c5:5c:21:f8:33:0b:2c:42:af:53:a6:ed:5c:1e:f9:74:37:16:
80:71:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 17:43:22 2023 by rpki-client on console-ams.rpki-client.org