Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/RTr2Z2sNZnt2Koz49nlbca41IL0.roa
File: RTr2Z2sNZnt2Koz49nlbca41IL0.roa (raw, json)
Hash identifier: FnUGiZk15o56oC3XMF3iVVl/0V2Ox8GRwBJS8V4X7+4=
Subject key identifier: 45:3A:F6:67:6B:0D:66:7B:76:2A:8C:F8:F6:79:5B:71:AE:35:20:BD
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 018C01E0D79CB7A3681D635C60F23A9EE516
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/RTr2Z2sNZnt2Koz49nlbca41IL0.roa
Signing time: Fri 24 Nov 2023 15:09:21 +0000
ROA not before: Fri 24 Nov 2023 15:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211484
IP address blocks: 146.19.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:e0:d7:9c:b7:a3:68:1d:63:5c:60:f2:3a:9e:e5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Nov 24 15:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=453af6676b0d667b762a8cf8f6795b71ae3520bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7c:66:27:e2:fa:aa:f6:aa:61:24:43:16:70:
ac:80:6f:0b:9a:62:9b:f7:94:d4:b1:54:ae:b8:a0:
f6:74:7c:64:88:0b:79:ae:04:fb:59:bd:75:c0:cf:
b1:81:f5:05:8c:87:f6:2b:f9:bd:cd:9a:58:f8:36:
d7:7a:d8:ce:d3:ea:a4:93:a8:af:9f:2f:28:8c:bc:
53:43:07:d5:aa:90:30:e5:55:de:43:a1:91:f4:30:
57:21:47:f7:7e:df:0a:7f:be:4f:0b:55:fd:15:25:
e3:04:d0:69:07:f4:45:bd:39:8f:8e:8c:6f:ff:99:
a2:d9:4b:6f:26:eb:9a:ca:6a:af:17:31:e0:b8:c1:
08:7e:b7:af:55:00:3d:38:01:1f:07:0a:a6:60:b6:
b4:a5:e5:0b:c2:c7:97:86:08:c7:0e:3d:84:22:9c:
5d:1c:5e:7a:82:e8:88:5c:7b:bb:42:1b:7c:a5:86:
f0:70:c2:aa:ff:30:85:dd:f4:5f:83:f0:22:4d:4b:
bc:62:5d:1d:07:6d:6e:4e:62:38:19:41:50:4a:ea:
ea:87:6c:9f:8d:96:e4:e5:62:6f:27:56:14:b0:81:
44:2b:0c:eb:71:b6:2e:7e:e8:d5:5b:5f:89:c2:35:
70:49:2e:dc:23:97:a9:a6:79:78:46:d3:5e:7a:fe:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3A:F6:67:6B:0D:66:7B:76:2A:8C:F8:F6:79:5B:71:AE:35:20:BD
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/RTr2Z2sNZnt2Koz49nlbca41IL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fa:57:72:1c:8a:6f:c3:4a:52:75:0a:e9:55:19:a5:6e:31:
25:62:10:fb:5d:3e:c4:9b:86:61:55:36:34:6d:20:72:68:ea:
ac:0c:fd:55:7f:1f:66:ec:62:e6:2e:41:85:51:6c:e1:fb:93:
20:4f:fa:34:00:3d:44:e2:67:82:23:b3:db:01:b8:c5:05:eb:
76:02:b7:44:01:ce:a7:87:1d:9c:8f:a3:78:75:0a:ff:ab:8f:
4e:64:6e:db:34:7b:df:5c:ea:a0:f1:93:5b:54:23:79:9e:f7:
10:f4:0b:70:eb:86:8a:a7:5e:5d:f6:c4:d2:0f:ea:28:b5:7f:
df:bc:30:8c:28:04:74:a9:95:93:5a:75:54:53:74:df:b1:a8:
65:41:fa:07:c5:9b:05:61:98:c9:bc:18:2c:15:5a:05:e1:29:
a5:9e:af:1d:ad:9b:c2:70:25:01:2c:05:f9:f4:98:d4:50:c7:
95:77:e4:06:a8:9b:30:f9:f1:77:13:f6:16:2e:5a:1d:4e:34:
d8:d1:57:b7:1d:2c:2e:86:e7:8a:7c:97:ce:cf:0d:db:e7:9c:
b8:ed:73:6b:a5:20:6b:f7:6e:92:9b:a8:b4:d7:f6:fb:57:17:
89:60:81:80:b8:38:c0:2b:b4:a0:78:b6:51:66:71:1e:40:d2:
56:30:53:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:35 2024 by rpki-client on console-ams.rpki-client.org