Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Neqit2ixiM6jE9QyFLXz1GU2B3Y.roa
File: Neqit2ixiM6jE9QyFLXz1GU2B3Y.roa (raw, json)
Hash identifier: 1NWU5AkqkGa6m7cl9kRjvqbWCmuE7EJteujfN5CTY3Q=
Subject key identifier: 35:EA:A2:B7:68:B1:88:CE:A3:13:D4:32:14:B5:F3:D4:65:36:07:76
Certificate issuer: /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial: 01856CC15BF89417089FBF28DAB6E52E0946
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Neqit2ixiM6jE9QyFLXz1GU2B3Y.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.19.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5b:f8:94:17:08:9f:bf:28:da:b6:e5:2e:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35eaa2b768b188cea313d43214b5f3d465360776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4f:2c:cc:06:91:c4:04:ae:df:19:0a:92:aa:
32:a6:04:06:00:4a:05:ad:b5:86:76:2a:46:21:16:
5b:2f:3b:ec:d2:8a:4c:08:4c:e4:69:d8:f1:d4:2b:
dd:94:91:28:54:8c:a5:c6:b7:a1:f3:4e:21:71:1d:
be:2f:12:e5:aa:f1:ec:50:a7:1a:7c:6d:be:b4:f5:
b5:a0:6c:ed:68:0d:f5:e6:fa:09:8a:aa:1f:0b:04:
9f:bc:58:b9:21:70:f6:3b:d7:fc:5a:7a:a2:ab:72:
8b:3a:69:7e:79:a4:83:64:f2:ca:f2:d0:72:d2:0c:
d5:4b:f8:cd:7b:93:f8:f0:1f:57:4c:8f:e8:90:41:
c6:9b:28:1c:e7:dc:15:36:6e:25:20:cd:66:34:35:
20:fc:e3:4e:d3:60:1d:9d:ae:91:ff:c0:f9:97:b2:
72:b5:5d:3b:34:81:fc:03:76:31:63:61:92:60:e3:
62:16:79:ce:64:20:ac:bd:9e:ae:60:ee:23:3b:62:
6d:db:89:8c:73:36:da:0c:13:3b:ea:0b:61:5a:e0:
29:db:e3:53:bf:cc:cf:1d:b6:d6:e9:ae:96:08:bf:
63:74:c5:3a:55:ca:d3:56:05:49:e3:eb:ab:43:2a:
bc:1b:fd:5f:89:e5:51:67:5c:fb:de:ac:e9:2d:9b:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EA:A2:B7:68:B1:88:CE:A3:13:D4:32:14:B5:F3:D4:65:36:07:76
X509v3 Authority Key Identifier:
keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/Neqit2ixiM6jE9QyFLXz1GU2B3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
41:61:5f:cc:c0:84:cc:f9:43:51:c9:6e:b9:bc:22:f6:13:cc:
59:fd:7d:04:e1:bb:3a:bc:34:1f:7f:06:64:c6:ef:7f:59:87:
08:2b:19:93:71:d4:a0:8f:de:88:d7:23:02:8c:3e:75:87:9b:
13:ab:75:b3:bf:0f:3e:de:fe:ef:46:75:28:a8:db:ea:2b:a3:
5f:d0:35:02:31:8a:bd:0f:92:ac:eb:9f:eb:97:2c:05:cd:08:
e8:f9:00:05:9f:fa:f6:ba:89:33:ac:24:45:52:91:1d:7e:12:
75:7d:f5:50:ee:75:47:9a:0b:ce:ed:51:70:7c:93:c8:5f:b5:
8a:c3:a6:e0:02:ea:5d:31:6a:30:f2:5f:a5:00:7a:0d:7b:74:
4d:7e:c8:3e:c6:cd:c4:10:af:ae:5f:f1:9c:32:f4:6d:47:50:
35:ca:2b:3a:b6:99:97:f4:40:cd:0d:06:9f:59:ce:1d:8c:79:
8a:22:19:22:d4:1d:35:b6:af:4f:a2:95:f8:04:bf:fa:74:fe:
2e:d0:03:cd:99:6e:fc:64:d5:b1:ec:61:24:24:3b:2c:f5:67:
6f:0d:c2:9b:80:a9:5a:db:e2:ab:b4:be:81:08:a0:e5:ab:f1:
f3:1f:4b:82:af:9a:11:2c:bb:41:01:9f:3f:29:e0:e3:de:2e:
5e:a1:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 06:30:53 2023 by rpki-client on console-fra.rpki-client.org