Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/A35zj2DY3kabFsMgg9PZpMYKN38.roa
File: A35zj2DY3kabFsMgg9PZpMYKN38.roa (raw, json)
Hash identifier: D3sTRn4vbFapzQxp4Hiikr2Ig5iyPaPpQ+vMTmXjtrU=
Subject key identifier: 03:7E:73:8F:60:D8:DE:46:9B:16:C3:20:83:D3:D9:A4:C6:0A:37:7F
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0188B9FCF806374BAFB7DF9486409F6E2A0F
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/A35zj2DY3kabFsMgg9PZpMYKN38.roa
Signing time: Wed 14 Jun 2023 12:59:03 +0000
ROA not before: Wed 14 Jun 2023 12:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:fc:f8:06:37:4b:af:b7:df:94:86:40:9f:6e:2a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 14 12:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=037e738f60d8de469b16c32083d3d9a4c60a377f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:2e:27:2a:41:80:43:81:f7:aa:c2:c5:7b:
2e:63:f6:10:22:85:71:1f:a4:8a:54:56:2e:63:93:
c8:c2:53:0d:c2:f5:4f:ed:91:10:54:6e:45:6f:03:
f5:bb:cf:66:3a:1a:09:5a:cb:07:65:3d:21:29:b6:
5a:9f:29:05:17:9a:02:54:e4:27:e5:ef:29:66:ed:
3b:60:89:3b:69:43:89:b2:49:80:47:60:37:a4:75:
77:a1:b8:14:1b:37:58:cd:51:99:39:39:61:b6:db:
34:17:c4:06:8f:7e:79:49:d4:60:14:72:46:e9:8d:
3b:72:41:ff:6f:d7:1f:da:d3:10:a2:3f:69:48:98:
fb:2b:43:7e:38:ab:30:ce:1f:03:dd:62:e4:08:b4:
51:ed:82:ca:76:6a:8b:56:d4:e2:1c:fd:9a:dd:4e:
ea:cd:03:03:23:e5:45:4e:f1:f5:32:dd:e7:36:59:
ec:e6:a8:e0:63:53:0b:2e:a4:86:5a:91:3d:c3:b6:
31:77:3c:b7:2b:0c:fe:3e:29:f2:47:f5:33:92:3e:
46:42:6e:8e:32:5d:a4:79:45:d1:54:cd:41:b8:d0:
dd:56:b2:01:fa:ce:b1:8b:c2:f5:5c:bc:64:42:37:
49:24:83:2b:33:a9:8f:74:c3:f8:bb:2a:32:55:d2:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:73:8F:60:D8:DE:46:9B:16:C3:20:83:D3:D9:A4:C6:0A:37:7F
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/A35zj2DY3kabFsMgg9PZpMYKN38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f1:e6:76:5e:42:39:1f:63:97:c6:92:57:3f:ab:07:22:87:
b3:84:e9:22:44:eb:17:5b:3d:9b:de:e7:df:bb:f1:5b:1e:da:
cd:ce:47:3f:0e:e1:1f:8f:84:7d:9d:29:33:fc:d3:13:0e:62:
37:21:fd:bb:ae:9c:4c:c5:7e:ae:03:f8:fa:4f:9b:b2:df:58:
9d:2f:40:d3:29:f9:56:7a:9e:f8:ef:63:8a:73:1a:46:7a:93:
ac:15:a9:51:0c:8b:f4:b9:85:6c:13:e0:29:33:f9:79:28:88:
cc:fc:88:5c:ed:cb:0e:a9:f7:48:a8:3c:99:67:af:7f:45:e2:
17:78:d3:82:ed:89:ff:00:5d:fb:ed:59:3b:bc:c2:38:28:0b:
29:fd:9f:19:38:d6:1f:65:c5:c5:65:95:e2:dd:47:e6:f2:ba:
d1:2e:76:8f:76:a4:51:89:0f:64:ec:8c:3a:93:37:51:4a:16:
db:a1:66:80:3e:80:4c:99:7d:d5:81:43:47:df:a8:03:7a:38:
03:2a:f5:c8:81:97:6e:d6:de:5d:b2:b8:01:60:6b:75:4f:bc:
c2:c7:5f:5f:67:28:4c:0a:b1:dc:96:d5:48:74:98:a7:3c:1c:
f0:c2:86:1b:e4:75:6f:1b:e6:c3:7c:dc:89:87:55:d7:49:75:
8a:0d:12:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:56 2024 by rpki-client on console-ams.rpki-client.org