Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-HES3j6b4OT2bB8l0lOs4_KHdeM.roa
File: 1-HES3j6b4OT2bB8l0lOs4_KHdeM.roa (raw, json)
Hash identifier: KPcOSrdmUWUXws2jDg3CkxWLDOF6EXTEUeeRmKe5khY=
Subject key identifier: F8:71:12:DE:3E:9B:E0:E4:F6:6C:1F:25:D2:53:AC:E3:F2:87:75:E3
Certificate issuer: /CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Certificate serial: 01856F5DCD279008DE1462824DFFFCE8C302
Authority key identifier: 33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-HES3j6b4OT2bB8l0lOs4_KHdeM.roa
Signing time: Sun 01 Jan 2023 22:04:56 +0000
ROA not before: Sun 01 Jan 2023 22:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210491
IP address blocks: 146.19.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cd:27:90:08:de:14:62:82:4d:ff:fc:e8:c3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3384241ade5f261ac8ece843e5e7db7ee108e33c
Validity
Not Before: Jan 1 22:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f87112de3e9be0e4f66c1f25d253ace3f28775e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:de:1a:f4:4a:20:3f:66:51:bb:9b:96:1f:
7f:a7:f0:5b:2d:73:b8:fe:f1:ce:46:13:a1:6e:0e:
58:a6:d4:b2:fa:9d:69:8e:b0:1e:ec:22:71:79:ac:
5d:e9:51:7c:bc:c9:98:74:a5:e0:bd:29:57:e8:50:
24:66:2c:0d:6f:bb:7d:42:b5:54:9f:0a:38:d8:00:
e9:43:50:33:40:03:be:da:36:1e:36:5d:58:93:fe:
c6:ab:2a:7d:c3:ea:f3:4d:3c:f5:0c:d6:68:29:5d:
dd:54:d5:d1:5a:5d:9b:2c:b0:d0:29:6c:15:27:ec:
b0:26:79:9c:b9:70:bc:85:05:1f:1e:90:47:35:2b:
1a:94:8f:b6:ff:f0:d4:88:25:45:47:73:a1:55:b5:
db:b3:a5:94:81:55:da:cc:ac:32:c3:79:b9:51:d1:
ef:04:d7:86:2c:fd:ba:37:47:3f:54:5f:d9:c1:23:
ff:20:f2:2f:59:2e:e4:30:89:35:2d:d0:0e:78:2f:
e9:69:27:d1:37:87:1c:78:28:ed:56:a6:7b:f2:2d:
b2:3d:97:34:08:ec:f8:d6:63:b1:ee:20:e9:0f:f1:
a8:1e:90:83:66:b7:51:0c:3c:46:6b:f5:d5:fd:ae:
f4:51:d9:2e:ef:d9:c0:e8:a8:82:cf:1b:35:d9:1c:
94:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:12:DE:3E:9B:E0:E4:F6:6C:1F:25:D2:53:AC:E3:F2:87:75:E3
X509v3 Authority Key Identifier:
keyid:33:84:24:1A:DE:5F:26:1A:C8:EC:E8:43:E5:E7:DB:7E:E1:08:E3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4QkGt5fJhrI7OhD5efbfuEI4zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/1-HES3j6b4OT2bB8l0lOs4_KHdeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3c56e2-e4b8-45fc-959f-c7aa19eabba7/1/M4QkGt5fJhrI7OhD5efbfuEI4zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.58.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:e2:9d:ba:db:82:3d:aa:e8:76:c4:50:d2:1d:76:59:86:74:
f3:43:b2:85:dc:1b:c4:ff:c8:61:13:a6:cd:a9:ba:be:e5:35:
76:89:92:f3:0d:15:a0:f3:bb:cd:9b:25:03:f2:62:cd:f5:91:
13:1c:6c:ca:29:ac:6a:f0:94:88:f6:d9:b1:c6:14:2e:33:e5:
ea:10:57:ac:71:0e:d5:da:8f:ce:90:65:b3:6b:db:3e:37:c4:
e3:52:8c:f7:cf:9e:31:bc:8e:99:2f:53:05:1c:0a:9a:05:98:
e7:b7:4d:d0:52:0b:79:53:7f:ed:27:0d:e9:c0:66:77:2a:83:
28:d9:34:a7:0e:79:5b:31:b2:a4:17:3c:55:af:7e:39:68:5d:
b7:1e:09:60:45:1c:96:fa:7c:05:34:f0:a7:f5:f5:37:a2:9e:
e7:0c:e7:6e:48:9b:91:fc:14:82:40:81:cc:2e:69:18:bc:cd:
46:96:7c:77:a9:b5:51:bd:1d:83:90:28:32:85:af:7e:3d:fa:
04:7d:4d:1e:88:65:f0:67:43:93:5a:df:1d:a5:f4:68:27:72:
7d:b0:70:45:f5:fb:74:79:65:a1:7d:85:33:13:22:29:65:18:
0f:1e:04:3f:83:6f:1a:a8:cb:00:26:f4:1c:6c:5f:9d:1d:f6:
7c:7b:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:57 2024 by rpki-client on console-fra.rpki-client.org