Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ldW7PBXUdKaAPDuE7Imjz0GhsYU.roa
File: ldW7PBXUdKaAPDuE7Imjz0GhsYU.roa (raw, json)
Hash identifier: 43MVw8jynjbBOp5HBSHLHKKyW598gZ/A3IfQGazu+Eo=
Subject key identifier: 95:D5:BB:3C:15:D4:74:A6:80:3C:3B:84:EC:89:A3:CF:41:A1:B1:85
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018C63BC2F5EDFDC12F6EE38EC11A08E6E3C
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ldW7PBXUdKaAPDuE7Imjz0GhsYU.roa
Signing time: Wed 13 Dec 2023 15:12:06 +0000
ROA not before: Wed 13 Dec 2023 15:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6762
IP address blocks: 146.19.227.0/24 maxlen: 24
185.149.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:63:bc:2f:5e:df:dc:12:f6:ee:38:ec:11:a0:8e:6e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Dec 13 15:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d5bb3c15d474a6803c3b84ec89a3cf41a1b185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:ff:9e:ec:81:6f:6b:0a:5f:50:ab:c5:a8:
53:b8:c7:be:70:9b:2c:a5:9b:31:59:51:26:55:b9:
09:cd:76:64:2b:c0:3c:01:ed:bf:fe:54:d8:2a:d8:
da:f1:75:8d:7a:dc:e4:25:2f:6f:cf:f7:ed:a7:a2:
39:f3:cf:08:d3:16:ba:58:9e:23:08:5f:c6:9b:77:
3f:bd:43:18:d6:1b:51:90:4b:f4:88:24:29:49:8e:
14:e9:8e:2b:6b:bc:75:ef:0a:21:f2:73:cd:28:32:
bc:9c:9a:b3:dd:c0:31:d7:e9:18:3b:56:e1:c6:17:
39:65:fe:b3:ea:27:fb:2e:dc:a0:2f:30:69:9f:57:
14:11:27:f2:70:dd:7c:8d:e8:0c:83:ef:6f:65:18:
af:84:8a:6d:3a:ca:09:fc:f7:c6:75:e0:b6:24:c0:
56:cd:2e:64:b3:b4:12:f2:35:e4:ac:b0:7a:ff:46:
0e:d2:e2:12:b4:b6:99:ca:b1:ec:fb:9e:3d:f6:ef:
79:46:8b:d0:c9:89:bb:16:c9:ad:66:7f:30:b3:5b:
1a:e3:c2:c4:31:42:ed:55:47:b2:6c:75:17:43:40:
3d:e0:43:ca:0e:fd:fd:e2:dd:11:45:50:b0:74:dd:
c5:ec:8f:92:c6:e0:11:e3:5b:3b:63:a9:0b:f3:97:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:BB:3C:15:D4:74:A6:80:3C:3B:84:EC:89:A3:CF:41:A1:B1:85
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ldW7PBXUdKaAPDuE7Imjz0GhsYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
185.149.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:93:53:97:71:e5:58:f1:05:0b:60:d7:4b:0e:45:79:4e:28:
7d:bc:68:a9:ee:a7:a0:eb:4b:1b:b0:92:50:2c:e9:0b:a1:42:
ab:14:12:19:f2:5b:88:b0:d1:31:19:7d:a1:00:d0:c9:83:6a:
4b:d0:ce:40:7a:7a:d7:45:db:ab:e9:90:73:a9:00:59:b8:de:
67:c4:71:6e:1a:d8:df:82:57:6a:b7:10:6d:f5:1e:72:66:ba:
a1:29:ac:19:e7:6d:86:5a:c1:d0:ac:d9:40:5f:6c:12:17:9c:
c3:51:1f:43:8c:83:86:63:cb:04:83:1c:ee:98:1e:fa:26:15:
ae:03:2b:23:cb:66:8e:6e:8b:84:0a:fe:42:3d:ad:de:17:00:
48:06:e3:91:22:0d:14:63:bf:75:57:96:db:68:16:a5:df:1a:
4e:40:f7:34:96:0e:51:e2:a1:b2:ac:0a:d3:37:32:3a:99:21:
74:21:fe:f9:49:d1:e2:42:84:4f:7e:91:f2:4e:a8:fc:dd:3c:
da:ff:c3:10:87:2c:3c:f0:df:4b:47:83:29:83:b8:14:65:e6:
60:f2:72:21:19:38:99:81:3e:24:c0:fe:da:ba:5c:b3:2d:a1:
c0:5a:21:82:d3:38:d2:0f:75:a9:de:0e:84:5f:7f:43:cc:68:
d9:f3:be:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org