Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/FE_ZX7Pl8gUTCdh1Pr0JcA8Nnmw.roa
File: FE_ZX7Pl8gUTCdh1Pr0JcA8Nnmw.roa (raw, json)
Hash identifier: 8N+eJutItahoxTdK6WBhadCBkHKEjwCEyWs6FYJh2F4=
Subject key identifier: 14:4F:D9:5F:B3:E5:F2:05:13:09:D8:75:3E:BD:09:70:0F:0D:9E:6C
Certificate issuer: /CN=281597558437c58185d4c2fe71b9d52779d800d6
Certificate serial: 01856F66D33F20573A4420BD48A6B697E7FA
Authority key identifier: 28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/FE_ZX7Pl8gUTCdh1Pr0JcA8Nnmw.roa
Signing time: Sun 01 Jan 2023 22:14:47 +0000
ROA not before: Sun 01 Jan 2023 22:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.19.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d3:3f:20:57:3a:44:20:bd:48:a6:b6:97:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281597558437c58185d4c2fe71b9d52779d800d6
Validity
Not Before: Jan 1 22:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=144fd95fb3e5f2051309d8753ebd09700f0d9e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d4:da:a3:55:c5:db:99:e1:86:99:37:d3:28:
c0:a1:7c:2b:d4:af:b3:11:fb:bb:ed:56:00:9f:b6:
9f:da:2b:64:75:1e:f4:22:05:6e:d5:76:ba:40:71:
37:e1:30:48:1a:56:42:ee:92:b3:fb:77:88:db:ce:
b1:88:05:ea:0d:73:03:80:a0:40:4f:56:0a:ef:9d:
e1:01:74:62:67:46:64:6d:e3:6e:d1:d8:b5:81:43:
56:4b:93:97:19:b5:ab:54:59:a5:15:0c:62:bd:d7:
74:c8:97:6d:fa:f7:f3:6b:9b:93:09:bf:32:95:7d:
d7:81:de:be:b3:56:50:d3:8d:47:3a:d5:e8:36:cc:
49:37:9c:98:6d:3d:5c:03:aa:a0:78:3b:35:3a:c1:
e1:2f:a2:c8:b4:87:75:7e:ae:be:1a:07:1d:d1:8e:
9e:ab:fd:96:40:4a:e8:f5:c9:3c:67:45:e1:67:aa:
1d:bb:c1:c9:98:90:0d:24:de:a3:80:c4:95:83:03:
ab:cf:5f:ad:ee:12:eb:8c:4a:2f:48:1a:7c:cc:82:
c6:db:26:f7:84:19:a7:95:9d:39:f8:a9:bb:8c:5c:
f4:86:47:52:10:d4:54:63:9d:8c:77:b7:4f:d9:44:
06:f8:7c:b2:5e:be:0f:01:4d:ce:e2:b8:b6:0f:70:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:D9:5F:B3:E5:F2:05:13:09:D8:75:3E:BD:09:70:0F:0D:9E:6C
X509v3 Authority Key Identifier:
keyid:28:15:97:55:84:37:C5:81:85:D4:C2:FE:71:B9:D5:27:79:D8:00:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/FE_ZX7Pl8gUTCdh1Pr0JcA8Nnmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f95bb4-5c31-4a3c-8b3c-b174a94155ed/1/KBWXVYQ3xYGF1ML-cbnVJ3nYANY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7e:7f:db:98:37:02:ed:c4:7c:a7:33:9b:1a:8e:ca:42:41:
42:55:04:87:a2:e0:9b:a4:1a:19:86:f4:32:de:25:ec:24:56:
64:59:5b:f1:cd:a1:dc:5f:73:9b:1b:a7:a6:4f:e3:b7:51:3b:
1f:70:6e:53:e4:56:6a:d3:12:dd:79:7c:0a:88:cf:ed:3c:2b:
fd:19:8f:e6:41:e8:51:56:a0:b6:37:ea:89:63:1c:59:ce:d5:
87:3e:e6:90:a9:19:3d:df:cd:0d:48:79:2b:be:8f:b3:1d:ec:
50:ee:71:4a:db:4a:52:6c:b7:0b:ea:18:90:b2:c7:22:39:16:
a2:16:97:66:7e:16:c7:44:73:26:b3:20:3f:db:54:73:d8:5b:
9d:f2:59:fd:e3:67:ca:a2:dd:3a:79:03:89:01:ac:e5:c2:bc:
98:ad:7a:94:ff:f6:4d:7e:a8:18:61:5a:a3:b9:67:77:96:76:
79:3f:b6:66:4e:63:b6:46:0d:11:39:76:da:38:c5:e0:f4:9c:
47:b0:38:d3:18:26:0a:d4:30:b4:b3:9d:0b:23:9c:75:03:a1:
2e:d0:f1:5d:bb:81:46:99:f1:bc:fe:bf:b3:6d:b1:ac:d9:8a:
49:45:ed:4c:32:62:b7:15:37:45:dd:b1:36:23:63:3b:98:03:
c7:9d:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:38 2023 by rpki-client on console-fra.rpki-client.org