Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/M5ViBYUqvJixGEFOpJC8dgHgW1k.roa
File: M5ViBYUqvJixGEFOpJC8dgHgW1k.roa (raw, json)
Hash identifier: VbnnJPjLQQv3APt1ZtU6QF1Dicay/3uVtsgE6nLHfZk=
Subject key identifier: 33:95:62:05:85:2A:BC:98:B1:18:41:4E:A4:90:BC:76:01:E0:5B:59
Certificate issuer: /CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Certificate serial: 01867FAC3356879943321686FB2CFB533535
Authority key identifier: 8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/M5ViBYUqvJixGEFOpJC8dgHgW1k.roa
Signing time: Thu 23 Feb 2023 19:07:17 +0000
ROA not before: Thu 23 Feb 2023 19:07:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 146.19.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:ac:33:56:87:99:43:32:16:86:fb:2c:fb:53:35:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb72829e6f70ebe6bdb07cec8d0b855e5774f97
Validity
Not Before: Feb 23 19:07:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33956205852abc98b118414ea490bc7601e05b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:ce:4a:92:16:4b:d7:a6:ca:a7:e3:9b:7f:
12:4f:e3:d2:48:e5:4a:88:6e:b0:38:8b:a8:f5:88:
07:82:de:e8:42:6c:de:2b:aa:1f:36:71:d5:68:34:
d8:51:72:2b:44:c5:f9:e8:6c:ab:1a:80:a8:3a:5d:
d8:e7:65:66:dd:e4:08:ca:1c:e5:88:1c:15:0a:17:
96:48:66:f7:e8:3d:13:14:00:01:9c:2a:83:e5:24:
bd:50:28:3f:f5:ff:92:55:85:d1:ed:18:42:18:c4:
3a:88:ec:44:27:76:49:db:b3:5e:09:56:3b:64:cc:
93:62:5d:5b:30:8c:99:69:4e:81:4e:f7:6a:e2:06:
63:dc:70:82:d2:e5:b2:2a:e5:24:67:5c:69:78:9c:
85:43:4b:04:ad:6b:75:cb:67:45:be:c5:58:df:ff:
78:b2:ed:71:78:4f:0b:78:7a:93:67:3f:54:46:33:
23:d1:df:cb:8c:56:a3:bd:7c:ec:ad:09:94:10:05:
49:59:5f:c7:ad:e2:d7:98:5c:73:4b:a9:66:6f:ee:
d9:eb:15:3f:4b:2e:f1:e0:fa:c2:77:54:05:cb:ae:
d5:90:96:0f:ba:79:05:ac:12:2b:ff:33:7c:9c:94:
2c:4c:52:48:06:22:a7:7a:6c:52:fc:dc:6c:48:a3:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:95:62:05:85:2A:BC:98:B1:18:41:4E:A4:90:BC:76:01:E0:5B:59
X509v3 Authority Key Identifier:
keyid:8E:B7:28:29:E6:F7:0E:BE:6B:DB:07:CE:C8:D0:B8:55:E5:77:4F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/M5ViBYUqvJixGEFOpJC8dgHgW1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cc8200-ec37-4394-9264-e926159044e9/1/jrcoKeb3Dr5r2wfOyNC4VeV3T5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.229.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0a:d0:d8:f0:ff:8b:b7:03:2e:ac:2b:d7:90:6d:51:56:2a:
a9:59:25:3d:c3:83:2b:f2:cd:27:c8:9c:26:ac:e5:b4:99:7e:
18:1b:5c:a9:4c:6d:61:69:da:34:3e:d4:c8:32:1b:04:f2:a3:
ba:be:1b:54:eb:9c:18:d8:19:d3:40:78:be:4e:49:25:21:84:
22:35:fb:f8:df:f4:08:d1:95:1f:64:4b:23:f2:b0:91:b4:df:
a8:e4:d5:20:a3:be:ab:be:cd:de:67:5a:26:dc:49:f3:45:75:
51:21:08:09:9e:b9:76:a4:4a:d3:48:2b:78:0b:23:29:cb:fd:
74:a1:e9:8b:db:cb:86:94:bd:0b:db:f6:79:1e:28:9b:90:d5:
da:d8:a5:46:82:18:ae:24:dd:7b:97:de:28:df:41:c5:44:39:
55:3f:c5:f5:27:5f:59:67:da:da:d6:40:a9:e6:8f:cb:4e:0f:
c6:d2:04:82:f1:91:df:05:8d:6e:7a:57:36:dc:64:f2:c6:43:
60:f3:b3:08:e1:c6:9b:e5:9a:d3:04:76:6d:4c:d8:bc:b5:27:
34:69:c7:f4:73:1c:62:02:6d:a1:67:f2:e2:bd:8a:f7:f9:6f:
87:5d:b0:cf:ae:ed:f9:7a:1f:f0:26:82:02:a8:ce:59:1f:ab:
b1:04:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:55 2023 by rpki-client on console-fra.rpki-client.org