Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A9Fniiziwcy5ScFQCi2_GKre0II.roa
File: A9Fniiziwcy5ScFQCi2_GKre0II.roa (raw, json)
Hash identifier: w0G6BV8P1C5wINh8oK63v7AAUQkER7idyXyPg2dp+dI=
Subject key identifier: 03:D1:67:8A:2C:E2:C1:CC:B9:49:C1:50:0A:2D:BF:18:AA:DE:D0:82
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018BF360604C87337B3D73721BC8F5ECA243
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A9Fniiziwcy5ScFQCi2_GKre0II.roa
Signing time: Tue 21 Nov 2023 19:34:21 +0000
ROA not before: Tue 21 Nov 2023 19:34:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 146.19.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:60:60:4c:87:33:7b:3d:73:72:1b:c8:f5:ec:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Nov 21 19:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03d1678a2ce2c1ccb949c1500a2dbf18aaded082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:ce:d4:69:63:8d:11:d3:d8:c6:e4:ae:09:
20:9d:80:67:0f:6b:ee:e1:6d:5c:5c:34:c7:0c:ea:
55:4c:a4:27:dd:91:f1:03:fc:8d:4d:1a:cd:2c:2d:
3b:e8:0d:07:9a:99:d3:06:ae:ae:9b:94:f8:bc:48:
d3:70:db:1e:4d:84:23:c0:eb:13:c7:a6:01:7a:3b:
00:1e:c3:3e:1b:70:12:97:46:65:cd:8d:23:09:db:
8f:d0:a1:fe:3b:f2:82:2c:f0:ce:2c:0a:17:c4:14:
58:17:f2:5d:bf:d4:7e:a1:b7:c4:92:0f:b4:57:13:
9e:fa:8e:cd:0a:c0:b8:69:8f:7a:df:b8:ce:be:c2:
a8:96:2f:7d:15:69:cd:72:87:d2:a6:61:9b:bd:65:
01:18:58:ed:aa:12:b5:0a:e3:48:1d:f1:ea:87:c2:
3b:d4:e6:f9:2f:0e:0a:66:8b:ca:1c:e3:ea:fc:21:
f9:9b:d0:ab:e1:c3:27:c6:8e:51:79:07:13:e4:53:
fb:88:c0:62:dc:aa:22:fe:8a:72:39:78:cd:86:6e:
25:97:72:28:ff:c9:b3:39:40:b8:fd:35:49:e6:a0:
be:42:c5:d9:80:29:6c:13:95:18:59:be:ff:e8:e8:
d7:38:e1:ac:44:62:9a:bf:b4:31:2d:8d:20:e1:e6:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:67:8A:2C:E2:C1:CC:B9:49:C1:50:0A:2D:BF:18:AA:DE:D0:82
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/A9Fniiziwcy5ScFQCi2_GKre0II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.245.0/24
Signature Algorithm: sha256WithRSAEncryption
34:01:6d:2f:b2:25:33:85:a3:d9:3a:0d:f6:5c:66:4c:8d:9e:
8e:6a:38:02:6e:5b:a1:a9:26:26:05:52:2a:72:03:3a:0c:66:
60:dc:53:d9:e7:cd:cc:c2:86:82:e1:54:de:fd:b8:11:37:9e:
1b:61:e1:30:64:28:86:4e:b9:d4:c4:ae:3f:f2:49:c6:66:10:
de:66:7d:b2:a4:eb:ea:9c:c0:56:bc:14:64:b1:d4:4c:32:0e:
de:16:0e:5f:68:05:ff:4b:ab:26:85:32:4f:8a:c0:10:4e:69:
92:fa:f6:48:30:6d:41:73:89:99:b4:0d:30:5a:1b:5b:01:4e:
e3:40:bf:9a:35:f5:24:41:46:7e:f7:c1:65:cd:da:5b:47:70:
1a:56:a5:c7:7b:22:94:8f:d2:47:f0:67:92:00:34:e1:30:9d:
9b:1c:9a:61:b3:4c:65:22:84:cf:8d:e8:5d:a3:a1:bd:99:46:
ac:34:96:43:31:19:2c:9c:36:18:3a:5c:fa:72:61:c2:d2:2d:
16:eb:62:5b:f3:64:01:07:4a:14:db:29:5d:be:7f:a0:c3:26:
b8:9a:67:67:ff:0c:ea:71:bc:a1:b4:c7:95:44:21:09:ac:7d:
5a:82:9e:93:d5:a9:25:9b:06:0d:32:44:ef:32:4b:90:15:6f:
3b:e5:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:43 2024 by rpki-client on console-fra.rpki-client.org