Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/H4Fbi8QxEGOmXuG6IW3-MUD0rwI.roa
File: H4Fbi8QxEGOmXuG6IW3-MUD0rwI.roa (raw, json)
Hash identifier: 2vCQIyLZ+1SsHsc47PQQRCoYTpP2WoxXUf8oHv4O6t0=
Subject key identifier: 1F:81:5B:8B:C4:31:10:63:A6:5E:E1:BA:21:6D:FE:31:40:F4:AF:02
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018DC1EB070DE684267D8FD5CE0081D81578
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/H4Fbi8QxEGOmXuG6IW3-MUD0rwI.roa
Signing time: Mon 19 Feb 2024 15:10:21 +0000
ROA not before: Mon 19 Feb 2024 15:10:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 146.0.0.0/24 maxlen: 24
146.0.1.0/24 maxlen: 24
146.0.2.0/24 maxlen: 24
146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 06:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:eb:07:0d:e6:84:26:7d:8f:d5:ce:00:81:d8:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Feb 19 15:10:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f815b8bc4311063a65ee1ba216dfe3140f4af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c9:2e:bd:43:28:4c:14:ca:bc:7c:7a:7c:4f:
6b:0a:17:f1:0a:a0:0c:74:56:f4:f4:fd:20:21:fc:
37:8d:1b:fe:90:ae:5a:31:56:26:c7:9e:ed:90:1c:
0c:f0:cc:c7:e5:65:3a:ee:35:e9:b2:5f:4b:1e:e3:
75:33:32:42:31:45:54:ac:eb:67:01:45:95:41:57:
91:bd:c9:20:5a:36:ee:d7:61:4e:5b:23:6f:9d:64:
5f:e0:5f:56:21:69:d4:6c:1c:8a:e1:21:b8:2e:29:
65:07:c5:3a:9e:49:56:fd:6f:1c:55:bd:76:ed:f4:
76:5a:46:bc:4b:07:89:42:ed:0f:06:51:21:4e:2d:
1f:c6:6c:2c:32:8b:60:d0:0c:31:04:68:05:31:9b:
45:43:bd:62:fb:04:dc:ed:bc:fe:03:9b:a8:e0:a4:
95:53:d8:06:7a:96:26:17:b0:6e:95:a4:b2:c6:08:
d6:03:7b:8c:25:42:4f:13:fd:e6:64:cc:10:49:b9:
52:3f:f0:aa:92:d6:fc:c4:f5:e0:29:3e:a5:be:10:
4d:5c:78:1c:ba:72:ee:85:1c:95:13:0e:12:b0:b7:
b5:38:47:38:c5:8c:09:bc:1b:99:32:75:81:ed:74:
bf:8a:a2:48:da:ee:4d:a7:cd:56:b2:91:87:05:0a:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:5B:8B:C4:31:10:63:A6:5E:E1:BA:21:6D:FE:31:40:F4:AF:02
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/H4Fbi8QxEGOmXuG6IW3-MUD0rwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.0.0-146.0.2.255
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ab:f7:ed:1e:c2:c4:c3:f1:0e:f0:89:28:c2:6c:eb:f3:fb:
38:14:34:0e:46:5a:ba:88:c2:ef:e6:3c:aa:05:d2:a2:43:27:
45:b4:ce:de:e1:87:c5:4f:2c:d7:9c:b3:6b:58:0f:89:51:cf:
23:bd:e8:ba:a8:77:00:b9:8a:37:81:fb:3f:e7:68:99:f7:7a:
f3:f2:37:1b:01:e9:dc:c2:2f:cc:89:2a:2f:23:74:8f:4a:4b:
ce:74:19:30:d8:12:14:71:7d:80:6c:74:40:c9:83:5c:d0:d6:
33:dd:fd:ad:84:d7:c0:b0:bd:ad:8c:1c:2b:03:16:65:08:f1:
c0:f8:47:3e:05:b6:a3:04:00:ff:64:c1:8b:d2:83:76:fe:16:
56:27:80:98:d1:8f:3e:66:8c:4a:14:19:8f:4b:80:be:78:65:
b8:e5:d5:a9:e4:cc:60:9a:3d:7b:4f:a2:06:3b:8f:32:ed:06:
0d:0f:e2:ee:e3:38:a9:32:42:da:b7:bc:3a:de:39:7c:8e:3f:
c6:5a:af:ad:5e:dc:1e:f5:ef:68:8e:24:34:c4:86:54:12:b4:
fc:25:d7:9a:53:0c:3b:47:11:87:cf:85:29:1d:c3:99:48:89:
89:1e:ab:4a:28:20:74:35:00:ff:b2:c4:5b:93:57:a2:89:3f:
ef:92:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org