Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/EktJSEu0RFfI082TkBZqyXlXL48.roa
File: EktJSEu0RFfI082TkBZqyXlXL48.roa (raw, json)
Hash identifier: KzfGJEYSic93zTqifYAF83NWwoHZ88XcBf43F+zmrGc=
Subject key identifier: 12:4B:49:48:4B:B4:44:57:C8:D3:CD:93:90:16:6A:C9:79:57:2F:8F
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CCD6A2B20629E9F8F0ABE76374663
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/EktJSEu0RFfI082TkBZqyXlXL48.roa
Signing time: Mon 02 Jan 2023 15:14:56 +0000
ROA not before: Mon 02 Jan 2023 15:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44282
IP address blocks: 147.234.24.0/24 maxlen: 24
147.234.30.0/23 maxlen: 23
147.234.30.0/24 maxlen: 24
147.234.31.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:cd:6a:2b:20:62:9e:9f:8f:0a:be:76:37:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124b49484bb44457c8d3cd9390166ac979572f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:a9:82:30:1b:75:e6:8f:aa:12:97:e3:0d:
43:2d:81:0b:d8:cd:c2:9a:7f:0d:60:40:21:1e:80:
99:73:4e:01:7f:51:30:f7:0f:b4:dd:ad:81:59:03:
5b:f8:65:1d:25:9c:b0:5f:f2:04:be:e7:23:98:28:
d6:6e:f2:45:b4:30:8b:d1:57:32:2f:1b:24:0b:ec:
3a:44:41:6c:d6:73:d1:de:fb:38:a8:42:be:6c:d9:
64:7e:15:fa:2a:fe:8f:90:69:bd:7c:03:81:18:20:
38:96:57:4a:d7:df:2a:79:ae:a7:cf:35:97:fb:ff:
c9:aa:47:6f:e3:c9:d4:fd:cb:b1:3f:91:7b:09:b2:
78:a5:d1:ce:9c:71:8f:e3:97:b1:f9:7a:71:6b:27:
b3:cb:a1:e6:77:14:63:b6:95:63:f6:c8:07:e8:a5:
03:63:8d:22:5c:9f:a9:d6:1f:1a:2b:c2:77:c9:6c:
54:93:e2:6c:43:85:93:4a:e9:9e:f5:7d:c9:79:17:
e6:e1:f2:49:f1:c8:a9:e1:dd:0c:9b:9e:87:86:3c:
57:82:48:0f:a5:28:25:15:32:fe:a4:92:88:b0:03:
d0:ca:eb:78:87:0f:de:dd:ff:2a:df:8f:07:cc:ba:
67:34:57:c7:f5:4b:e3:aa:c4:0c:4f:16:ca:06:36:
97:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:49:48:4B:B4:44:57:C8:D3:CD:93:90:16:6A:C9:79:57:2F:8F
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/EktJSEu0RFfI082TkBZqyXlXL48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.24.0/24
147.234.30.0/23
Signature Algorithm: sha256WithRSAEncryption
13:92:25:4b:52:91:35:fd:b5:2e:31:80:87:76:ae:3a:9f:26:
a6:5b:a8:22:6e:89:2e:51:6a:56:33:8d:66:71:fb:68:96:38:
9d:14:fb:b3:61:a7:27:f5:af:40:b8:ea:8b:5c:ec:7c:50:06:
8a:39:be:41:8d:1e:ad:21:cf:26:62:c3:71:37:51:9b:4f:79:
7a:06:9b:4f:71:80:3d:97:3b:03:f8:d6:31:5f:81:00:48:4f:
7e:55:23:0e:1e:af:8c:4d:64:01:75:24:98:14:6a:ac:03:ab:
fe:36:d8:b8:bd:95:75:6f:30:68:65:00:0f:9c:14:ca:a8:74:
6e:87:50:a6:30:af:1a:71:a9:ef:4c:94:45:d4:6c:f7:15:12:
d6:05:a8:3f:9a:f8:a4:92:60:b8:3b:46:3e:3e:a8:13:7b:82:
51:a7:52:ab:a7:5c:36:1d:4b:20:92:68:86:9a:62:9b:40:46:
3b:3d:f9:d8:e2:27:ec:7f:f7:9e:4a:58:73:e3:a2:a1:75:cc:
ad:55:dd:2c:c5:94:2e:1e:b5:39:19:d5:d4:e7:1c:1e:de:c6:
6b:dd:63:d5:18:ae:b5:14:2a:b0:22:20:39:bf:1b:ed:ac:b6:
dd:89:b7:8a:74:f9:f9:46:70:50:be:61:ff:c0:7b:63:ef:a8:
3e:6d:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:44 2024 by rpki-client on console-ams.rpki-client.org