Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/d7pQAcWoC_92vXuv1eLAGNgWggI.roa
File: d7pQAcWoC_92vXuv1eLAGNgWggI.roa (raw, json)
Hash identifier: 5H8ODJFFPzE5JVUodRVqyzof4h3Ay8SLThF1gPALkAk=
Subject key identifier: 77:BA:50:01:C5:A8:0B:FF:76:BD:7B:AF:D5:E2:C0:18:D8:16:82:02
Certificate issuer: /CN=1ee51ed90c49cae92fca2e8238114c7638380483
Certificate serial: 0185711E8755D9304E4C16904326650D17F5
Authority key identifier: 1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/d7pQAcWoC_92vXuv1eLAGNgWggI.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49321
IP address blocks: 146.19.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:87:55:d9:30:4e:4c:16:90:43:26:65:0d:17:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee51ed90c49cae92fca2e8238114c7638380483
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77ba5001c5a80bff76bd7bafd5e2c018d8168202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:a2:b0:7f:9c:7d:44:27:c7:fc:79:8d:1e:
aa:84:50:30:b3:a8:9a:61:a2:2c:21:81:dd:76:49:
d2:6f:35:61:6b:34:c6:1c:ba:05:28:87:a9:c8:53:
b9:c6:73:db:f5:c0:5f:de:c1:6a:d8:ae:f8:78:0f:
03:db:ae:7b:6c:fd:1b:d7:46:f7:94:36:04:54:db:
65:01:5b:ed:89:a0:c3:dc:1e:b6:a9:4e:1c:8e:8d:
9b:1c:8f:2a:67:46:3a:ff:32:54:93:c0:dd:2e:04:
92:7a:b2:a7:52:7a:e8:74:b6:64:4a:ef:fd:bb:d2:
7d:b4:19:ea:b6:5e:8f:4f:0a:13:33:53:e6:2d:c0:
f1:c4:72:d4:25:0c:19:ef:62:ca:02:4f:64:b9:8b:
a7:27:01:5e:5f:1e:3b:45:aa:6d:5e:1f:7d:72:35:
55:fc:c3:d8:01:dd:64:04:d6:46:ed:f5:03:c5:9e:
1d:6a:77:8b:6a:fe:91:06:80:2a:33:27:f0:74:97:
bc:35:ad:5d:cc:fa:34:e8:b5:ff:b5:d8:4b:78:68:
91:b9:66:09:8a:ef:f4:08:27:8c:e1:d2:40:53:58:
41:4e:2c:68:40:4d:fc:bc:39:85:6d:41:98:89:1e:
d8:9b:ae:fc:97:d5:0c:79:3b:fe:69:48:a7:76:bd:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BA:50:01:C5:A8:0B:FF:76:BD:7B:AF:D5:E2:C0:18:D8:16:82:02
X509v3 Authority Key Identifier:
keyid:1E:E5:1E:D9:0C:49:CA:E9:2F:CA:2E:82:38:11:4C:76:38:38:04:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuUe2QxJyukvyi6COBFMdjg4BIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/d7pQAcWoC_92vXuv1eLAGNgWggI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/790e87-201a-4543-b46c-7298c47454fe/1/HuUe2QxJyukvyi6COBFMdjg4BIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.146.0/24
Signature Algorithm: sha256WithRSAEncryption
41:31:eb:cc:38:bf:6b:a4:84:4c:84:06:dd:9f:d3:7d:0c:24:
34:6e:01:f0:fb:13:f5:4a:c0:20:6b:cd:5b:04:b3:e1:2d:8a:
6d:0b:6f:d6:90:3a:42:5d:68:49:c5:ca:f9:a9:e5:49:6a:6c:
c8:5f:b3:29:0e:9a:0d:d7:b2:df:4b:aa:01:f6:0c:20:8b:61:
2e:d0:cd:9d:d4:cf:4d:fd:43:ba:75:c9:3c:ff:0a:49:d7:54:
1c:e9:5a:42:78:e0:ae:7f:5b:96:9f:6c:c5:b0:e5:f8:3a:6a:
ad:cf:80:45:59:1e:75:5b:09:4d:20:46:b6:72:06:d7:b4:df:
af:2b:db:37:be:51:c4:ac:11:43:39:8a:dd:d5:8c:2a:06:97:
96:ab:80:8d:b6:aa:8e:40:85:26:92:a4:bb:47:52:c6:ba:9d:
cc:f9:f5:3f:e8:dc:d7:9a:a9:fb:b6:f6:50:16:29:eb:ac:71:
f4:4d:39:16:1f:c4:a5:66:f9:f0:e7:f7:05:03:ea:27:6c:72:
c6:39:4c:a8:34:2c:81:94:9c:1b:25:d5:e7:26:72:4d:ca:74:
7f:9b:da:ce:c7:17:d6:34:e5:46:51:04:58:71:97:9d:90:f6:
89:f2:4d:4d:f7:33:fe:38:9a:43:62:97:91:00:b1:4b:3c:b0:
f9:08:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:14 2024 by rpki-client on console-fra.rpki-client.org