Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wxmiwtyfgvLEKj6yIc69VCjImMg.roa
File: wxmiwtyfgvLEKj6yIc69VCjImMg.roa (raw, json)
Hash identifier: dq2YUQOEHJ7aT7NW9pzTxqOjsiEyhSS/r4BTfBXt3S4=
Subject key identifier: C3:19:A2:C2:DC:9F:82:F2:C4:2A:3E:B2:21:CE:BD:54:28:C8:98:C8
Certificate issuer: /CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Certificate serial: 01856F8B85066669D46AA1B9EDE60D29363D
Authority key identifier: 01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wxmiwtyfgvLEKj6yIc69VCjImMg.roa
Signing time: Sun 01 Jan 2023 22:54:52 +0000
ROA not before: Sun 01 Jan 2023 22:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:85:06:66:69:d4:6a:a1:b9:ed:e6:0d:29:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011e4fffc4b8ebb0264b3e13fb3cc4766f3a8a14
Validity
Not Before: Jan 1 22:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c319a2c2dc9f82f2c42a3eb221cebd5428c898c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:4b:68:e4:2e:7d:37:85:80:d8:38:d9:1f:
8b:9e:15:e2:d7:3c:07:df:23:3f:b7:d4:93:b0:b4:
f4:af:0b:b3:cc:41:0c:4f:49:b5:88:ff:78:0d:53:
d2:6b:6f:b3:87:d3:70:2a:54:6d:8b:54:af:a4:e8:
3a:67:3f:18:3a:25:76:e1:73:0f:d8:1b:c9:e1:fe:
8d:d7:fb:85:e8:12:c2:18:0a:04:6a:3a:0a:7c:d1:
6f:8d:e5:53:f3:ab:50:81:80:a9:0b:9b:b6:c3:ca:
35:b3:16:b1:e7:6f:b2:6c:f4:a5:d1:15:14:93:25:
9c:bf:90:0d:8d:27:95:ba:71:eb:06:5e:13:c8:ad:
7a:73:52:d4:37:00:52:62:5c:97:60:36:b8:18:4a:
06:dc:e8:52:f3:c3:90:46:57:ed:68:42:d5:3c:57:
6e:b3:4e:b9:c6:21:ba:29:fa:71:bd:ba:ea:60:b2:
16:55:23:aa:ab:90:52:cb:01:8e:d3:f5:ef:85:a5:
96:03:7f:6d:94:6b:25:c4:f3:75:6d:26:2b:5c:0e:
67:ed:72:b9:10:5c:13:b5:6c:3c:f1:0f:2d:93:49:
24:47:c7:00:c7:5c:f0:57:24:be:4d:9c:d9:24:eb:
de:7e:49:84:90:48:7b:ec:67:0a:a0:8e:d9:ec:4c:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:A2:C2:DC:9F:82:F2:C4:2A:3E:B2:21:CE:BD:54:28:C8:98:C8
X509v3 Authority Key Identifier:
keyid:01:1E:4F:FF:C4:B8:EB:B0:26:4B:3E:13:FB:3C:C4:76:6F:3A:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AR5P_8S467AmSz4T-zzEdm86ihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/wxmiwtyfgvLEKj6yIc69VCjImMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/14df48-e164-40a0-b077-30c1df9268cc/1/AR5P_8S467AmSz4T-zzEdm86ihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a9:d3:a0:9d:fb:3c:ce:4d:db:5c:9c:73:0a:83:19:75:5e:
6e:fa:28:56:e7:e4:9a:81:cf:ff:1d:ca:14:5d:45:b0:03:dc:
60:f3:89:ef:88:29:d1:c9:92:a0:19:70:7e:e0:4c:ca:09:5c:
cb:db:a3:ee:f4:b6:36:c0:a2:62:60:8c:c8:75:ef:f6:61:ae:
cf:ce:5d:07:2c:3c:b5:1e:0b:6f:52:98:f2:5d:48:8a:b4:2d:
b6:f6:a6:5b:ca:87:2d:75:04:25:02:c6:60:99:0c:31:28:48:
9a:3c:25:03:a8:df:bd:4d:ae:8d:0d:1e:3f:30:79:54:9f:77:
d6:30:3d:b8:c6:ef:22:cd:01:79:ab:62:2c:8d:3b:97:c6:04:
59:a3:30:37:1d:86:7a:b1:f4:66:9e:28:6f:39:7e:14:6d:51:
6c:e5:2d:25:1d:e1:f6:cf:6d:7b:99:3a:ab:60:6c:8b:f5:b4:
0e:21:f4:5b:0d:63:b8:83:66:18:88:4e:36:a2:a9:f8:10:df:
bf:9f:5d:f3:9c:7f:76:61:5a:e6:1c:58:20:c1:41:2b:b7:ca:
56:64:a0:22:7a:b6:c7:a4:b5:ac:10:f3:9f:bf:c5:7c:ad:27:
d7:b7:63:c7:41:cf:98:0a:14:f2:23:3a:65:da:b0:4f:a0:ff:
46:3d:12:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:42 2023 by rpki-client on console-fra.rpki-client.org