Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/EQECfCcTCVE7oUmK2hCr4OK1Izw.roa
File: EQECfCcTCVE7oUmK2hCr4OK1Izw.roa (raw, json)
Hash identifier: 3PhfYamOECxhpsaPol1F3mCBGlp6ifMAYZFnvmTzbYY=
Subject key identifier: 11:01:02:7C:27:13:09:51:3B:A1:49:8A:DA:10:AB:E0:E2:B5:23:3C
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 018BFDF48189E38E2609690E5A983ED7DD0C
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/EQECfCcTCVE7oUmK2hCr4OK1Izw.roa
Signing time: Thu 23 Nov 2023 20:52:21 +0000
ROA not before: Thu 23 Nov 2023 20:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 146.19.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fd:f4:81:89:e3:8e:26:09:69:0e:5a:98:3e:d7:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Nov 23 20:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1101027c271309513ba1498ada10abe0e2b5233c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:a2:37:8c:ff:3b:a3:6f:99:40:b8:13:8b:
4d:bf:4b:11:8f:29:c8:8a:ad:8a:47:70:25:1a:cd:
0d:d7:7e:79:28:19:d1:33:71:fd:35:4e:c9:e9:d5:
72:ce:44:e6:19:23:e6:71:c1:d0:89:23:d6:70:ce:
7c:81:6d:4e:e7:4e:21:87:44:5a:37:9f:29:1f:cb:
45:5d:43:26:40:11:b2:d2:e4:00:03:9f:90:65:30:
e8:56:6f:a0:77:da:9e:f0:91:3b:80:a1:7b:6d:02:
70:42:df:e8:fb:d3:e3:a6:e2:59:92:2a:b6:69:53:
30:4b:c7:3f:44:ab:7b:d1:72:66:77:37:4a:47:d7:
ae:e7:bc:e4:4a:6d:5c:7d:5d:33:11:b2:3d:cd:03:
4a:48:4f:1f:14:d6:23:50:14:62:18:02:60:0d:d2:
6a:a2:86:be:c4:c8:33:91:fc:c6:a3:e5:9a:46:c4:
3e:01:4c:ea:b7:9b:90:6f:40:67:00:4f:68:c4:17:
2b:53:c1:7c:03:d8:02:89:fa:a3:70:7d:29:64:10:
8d:6c:22:fd:7c:04:56:da:6d:b6:ae:19:8c:b4:e2:
cd:35:c9:00:9b:f8:91:b5:7d:5f:74:f2:f5:8c:9c:
f7:12:67:a9:30:da:3c:f6:46:6c:f0:af:bf:aa:f0:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:01:02:7C:27:13:09:51:3B:A1:49:8A:DA:10:AB:E0:E2:B5:23:3C
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/EQECfCcTCVE7oUmK2hCr4OK1Izw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b8:6f:96:49:1b:bf:e5:15:7b:00:07:ec:c1:8b:95:7d:22:
b2:52:a6:bc:53:87:de:25:29:8a:b1:5c:4c:f0:80:c6:1b:5f:
9a:e8:75:a5:18:bf:f3:eb:a2:88:dc:40:c0:58:dc:d8:85:18:
5e:9d:35:68:6a:44:be:63:e8:74:84:61:2e:e5:ef:b1:f0:61:
5f:34:34:65:c0:77:b9:3c:ab:53:71:ba:9b:66:a3:3e:d8:59:
d3:61:c8:61:94:a9:55:6e:d7:13:ec:f5:4d:90:cf:4e:0c:f0:
26:3b:2f:05:9f:4e:bb:27:53:27:98:cf:e7:8b:c4:43:34:02:
d7:b4:86:5a:07:21:4c:73:66:c8:24:94:a8:d8:d7:6c:10:5d:
de:c3:90:4e:11:1a:2a:b3:46:dd:7c:7b:ba:90:d8:7f:9e:fe:
02:8c:d1:57:3e:7e:40:50:b4:53:ee:ce:03:f6:83:46:07:42:
66:4e:1e:fe:59:53:43:7b:d0:e2:65:ec:ab:c7:38:93:73:59:
7b:cf:f9:84:27:f4:09:3a:f8:da:3d:d7:d4:98:d8:37:62:39:
da:17:48:e2:b5:91:11:a0:2a:e9:dd:4d:8c:31:22:ef:7e:e0:
55:38:5b:23:d8:fa:80:48:13:35:3e:51:02:14:35:89:35:03:
c0:6d:29:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net