Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qZZNHECq1NrEoxsz0GD7_p8QVoY.roa
File: qZZNHECq1NrEoxsz0GD7_p8QVoY.roa (raw, json)
Hash identifier: nFragtBPN6KLSFRMNSMaPmyGe7BAKhwp0Wl4u4jJOSo=
Subject key identifier: A9:96:4D:1C:40:AA:D4:DA:C4:A3:1B:33:D0:60:FB:FE:9F:10:56:86
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 018CD5920FF62BD59444E2230CF9204ED3FE
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qZZNHECq1NrEoxsz0GD7_p8QVoY.roa
Signing time: Thu 04 Jan 2024 17:42:48 +0000
ROA not before: Thu 04 Jan 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 146.19.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 08:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d5:92:0f:f6:2b:d5:94:44:e2:23:0c:f9:20:4e:d3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 4 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9964d1c40aad4dac4a31b33d060fbfe9f105686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:c8:50:85:a5:84:4f:51:2e:04:63:be:8f:
a8:0a:fe:55:51:4b:8e:79:66:2d:c2:ec:97:cc:e5:
0a:33:f8:63:3d:a0:42:5d:a0:0e:e4:9d:c0:2b:10:
12:86:d4:fb:e7:20:a7:ef:1e:65:f1:07:1d:ce:44:
a3:8d:90:da:64:15:85:22:15:e7:72:da:98:53:91:
25:0a:1d:8f:3b:c1:2e:e8:38:c6:8f:5c:ff:2b:c0:
e8:3e:f2:31:9c:78:36:68:5d:f6:84:c1:76:a6:5c:
61:a3:62:c9:32:48:8e:41:7d:d0:69:a5:96:86:22:
53:2f:d5:9b:db:79:01:5c:d3:4b:98:7e:19:fa:55:
23:4a:34:e0:21:e8:8d:f9:f9:9f:54:a8:b6:5f:6d:
61:0f:6f:27:3e:f4:ad:89:08:57:d9:18:46:b8:4d:
cb:c8:87:74:cf:bc:59:18:f4:b8:b3:61:13:45:29:
e8:ad:fa:8d:72:1c:aa:9e:ab:1f:4d:07:b9:b2:fe:
2c:78:79:f7:c5:63:9c:9b:0a:86:1a:f4:10:a6:51:
c0:85:92:ed:44:55:1d:13:44:f8:a3:be:95:91:61:
f2:0a:64:1b:41:23:4a:72:d2:d2:b8:ba:03:9f:03:
44:c1:82:d9:60:48:24:8b:53:fe:40:da:bc:3c:c1:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:4D:1C:40:AA:D4:DA:C4:A3:1B:33:D0:60:FB:FE:9F:10:56:86
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/qZZNHECq1NrEoxsz0GD7_p8QVoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.50.0/24
Signature Algorithm: sha256WithRSAEncryption
51:28:8f:b8:e7:a5:14:9b:e6:af:31:0f:a0:b4:fa:46:b4:64:
12:4b:a3:ce:17:e4:8b:32:27:4d:8f:51:6a:99:e3:9c:d3:6e:
18:9a:c8:b4:44:a9:ed:3e:cc:70:86:98:97:dc:37:7a:e3:16:
d4:e3:43:f8:1c:1d:d7:d9:d4:51:fd:5f:d9:8c:bd:e7:0f:e6:
20:f3:2a:eb:8a:38:9b:86:cb:f4:d4:a2:d9:8f:37:f1:ae:23:
5d:5b:86:f5:02:55:4a:30:1a:05:24:52:15:fa:ce:7c:6e:cc:
39:ba:ac:08:41:e4:ca:12:6b:f9:6d:74:ac:e0:56:cd:cb:03:
39:64:f8:35:41:d6:6e:97:97:07:87:90:70:7e:dc:b6:09:c2:
a5:42:be:84:b1:16:52:15:5b:d3:d5:31:99:74:92:cb:58:05:
d4:85:8e:e9:e0:04:a4:29:11:53:35:f7:6e:09:e5:28:65:4d:
9f:69:15:f5:68:32:03:39:c9:86:01:57:57:cf:10:79:34:60:
73:87:8d:bc:1a:99:3b:bd:b2:c1:38:06:2c:98:7e:65:b7:7f:
fc:ee:53:bb:af:56:ce:cf:af:60:4a:46:a6:2b:7c:f7:b0:d6:
8a:88:95:26:f7:0b:e7:11:fc:d8:96:d9:40:24:d2:ca:96:fb:
cd:a2:bb:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzVkg/2K9WUROIjDPkgTtP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjQwMTA0MTc0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTk2NGQxYzQwYWFkNGRhYzRhMzFiMzNkMDYwZmJmZTlmMTA1Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdzIUIWlhE9RLgRjvo+oCv5VUUuO
eWYtwuyXzOUKM/hjPaBCXaAO5J3AKxAShtT75yCn7x5l8QcdzkSjjZDaZBWFIhXn
ctqYU5ElCh2PO8Eu6DjGj1z/K8DoPvIxnHg2aF32hMF2plxho2LJMkiOQX3QaaWW
hiJTL9Wb23kBXNNLmH4Z+lUjSjTgIeiN+fmfVKi2X21hD28nPvStiQhX2RhGuE3L
yId0z7xZGPS4s2ETRSnorfqNchyqnqsfTQe5sv4seHn3xWOcmwqGGvQQplHAhZLt
RFUdE0T4o76VkWHyCmQbQSNKctLSuLoDnwNEwYLZYEgki1P+QNq8PMFSZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmWTRxAqtTaxKMbM9Bg+/6fEFaGMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvcVpaTkhFQ3ExTnJFb3hzejBHRDdfcDhRVm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMyMA0G
CSqGSIb3DQEBCwUAA4IBAQBRKI+456UUm+avMQ+gtPpGtGQSS6POF+SLMidNj1Fq
meOc024Ymsi0RKntPsxwhpiX3Dd64xbU40P4HB3X2dRR/V/ZjL3nD+Yg8yrrijib
hsv01KLZjzfxriNdW4b1AlVKMBoFJFIV+s58bsw5uqwIQeTKEmv5bXSs4FbNywM5
ZPg1QdZul5cHh5Bwfty2CcKlQr6EsRZSFVvT1TGZdJLLWAXUhY7p4ASkKRFTNfdu
CeUoZU2faRX1aDIDOcmGAVdXzxB5NGBzh428Gpk7vbLBOAYsmH5lt3/87lO7r1bO
z69gSkamK3z3sNaKiJUm9wvnEfzYltlAJNLKlvvNoruw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:27 2024 by rpki-client on console-ams.rpki-client.org