Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/P14UA1x9CQJKNueKFeDSuO_PPJc.roa
File: P14UA1x9CQJKNueKFeDSuO_PPJc.roa (raw, json)
Hash identifier: IwES0NxeU/9z4HPAUMRr+jJB8AN3LMVWwYInKFCcz+s=
Subject key identifier: 3F:5E:14:03:5C:7D:09:02:4A:36:E7:8A:15:E0:D2:B8:EF:CF:3C:97
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 01856ECB6190DE96F6D454F772E9E955D1D4
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/P14UA1x9CQJKNueKFeDSuO_PPJc.roa
Signing time: Sun 01 Jan 2023 19:25:00 +0000
ROA not before: Sun 01 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 146.133.124.0/24 maxlen: 24
146.133.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:61:90:de:96:f6:d4:54:f7:72:e9:e9:55:d1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 1 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f5e14035c7d09024a36e78a15e0d2b8efcf3c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:2b:99:d7:13:4a:66:dc:dd:ab:18:e4:0a:
59:74:03:f1:c4:0d:7c:30:f6:c5:99:01:c5:9c:81:
12:51:95:90:86:5c:ee:4d:b9:fa:08:12:22:15:3a:
0a:be:62:17:80:ea:b8:43:eb:c1:82:a3:96:96:02:
a8:89:58:95:8f:ac:92:5e:4a:2a:ea:90:cd:31:7e:
99:b1:f7:4d:9c:06:69:2c:3d:6b:57:cc:37:ae:6b:
9b:71:e2:b4:f6:7f:8e:db:ab:c6:3f:16:ff:67:3d:
39:7a:31:e7:0f:86:ec:a1:18:ce:0a:d0:ac:53:34:
85:d7:13:4d:32:a4:46:dc:6a:4b:68:5d:43:e9:c3:
47:19:17:c9:4e:31:46:e4:98:76:74:3b:5f:0a:f7:
f7:c9:b3:30:5c:88:0e:07:e7:27:a0:86:18:cf:78:
69:0f:88:36:06:8a:96:b9:71:b7:59:12:9f:3d:07:
de:e2:d1:7e:40:65:64:99:e5:1f:53:17:a3:74:78:
a1:2a:0e:e4:19:3d:45:b6:94:0c:a8:96:e4:5e:1c:
d1:41:85:10:0e:b2:70:f2:0c:17:99:b5:e3:d7:c3:
88:2f:ec:c6:6a:c1:9a:8b:14:22:65:e6:17:62:b7:
19:cd:8a:24:3f:b1:03:ae:50:25:5e:5a:bd:90:d8:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5E:14:03:5C:7D:09:02:4A:36:E7:8A:15:E0:D2:B8:EF:CF:3C:97
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/P14UA1x9CQJKNueKFeDSuO_PPJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.133.124.0/24
146.133.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:34:1e:44:71:8c:10:7c:9a:d2:5b:19:c0:61:e3:27:1e:43:
bd:f3:0e:98:c1:7f:ec:4d:a6:9f:09:aa:63:ad:4a:ed:70:75:
c6:bd:4d:62:78:71:82:f7:0f:4e:47:74:01:30:a9:e0:a6:be:
65:90:b6:f5:d8:96:dc:2c:52:5c:de:c8:ee:a0:cc:ab:d9:e9:
ae:4d:00:26:7d:e7:26:d4:f0:a3:0c:72:de:85:b6:dc:58:81:
94:79:70:0f:bd:e7:64:f3:f9:67:27:93:02:06:1c:63:ae:ac:
a3:cc:ce:de:ae:ee:a2:34:e0:2e:6a:d1:dd:4d:66:ce:46:0a:
76:fb:15:31:a7:7f:8c:2a:89:4c:e6:9e:ba:59:bd:8e:84:b0:
42:4c:d8:d8:1a:30:38:35:2c:26:1b:9a:0b:1c:d8:84:bf:f3:
26:70:2b:72:c6:d1:d7:03:b8:68:03:b3:4d:7b:a2:3f:80:3c:
9b:71:97:b5:a2:6f:8f:8d:81:99:9b:86:2f:21:99:09:44:83:
7c:02:8e:50:b0:31:37:69:45:9a:11:b8:02:4f:64:42:e7:7b:
5e:74:51:b0:63:1e:c1:32:db:b2:1c:fc:45:ec:db:fd:f6:db:
fa:15:b6:f8:24:8d:4f:29:21:dd:d0:d6:87:05:8f:6a:fb:f7:
fa:76:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org