Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/F6rgC20vB_WZo8F_7TkBe_5t5iU.roa
File: F6rgC20vB_WZo8F_7TkBe_5t5iU.roa (raw, json)
Hash identifier: 2TCvcq7X2TozT/kofBToPsBU/kOyNSlZlNmCxd8t+Nk=
Subject key identifier: 17:AA:E0:0B:6D:2F:07:F5:99:A3:C1:7F:ED:39:01:7B:FE:6D:E6:25
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 01856ECB61EB5D5B837C6F81338F53066BA5
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/F6rgC20vB_WZo8F_7TkBe_5t5iU.roa
Signing time: Sun 01 Jan 2023 19:25:00 +0000
ROA not before: Sun 01 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 146.133.124.0/24 maxlen: 24
146.133.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:61:eb:5d:5b:83:7c:6f:81:33:8f:53:06:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 1 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17aae00b6d2f07f599a3c17fed39017bfe6de625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e7:bc:d0:65:74:e2:4e:54:c1:99:98:6a:f4:
db:ec:d2:ca:c8:f0:12:ad:e2:5b:80:eb:a0:50:f0:
40:43:f7:43:3a:9c:eb:72:c3:db:05:c4:c2:fe:d0:
10:17:3e:cb:49:e6:e9:7f:08:b4:9f:00:ef:21:50:
e4:9a:fd:f5:8e:92:62:40:4d:a0:87:50:42:72:fa:
b7:3f:a0:00:ed:8e:65:96:6c:17:ae:7a:83:43:df:
b6:51:b0:b0:b1:6b:17:8f:3b:9e:20:f5:fe:5a:7e:
c3:3c:d0:c1:33:68:ee:63:82:e8:99:3c:e3:28:87:
04:00:5d:ab:99:16:d4:38:3d:5d:00:d0:0b:3b:e1:
8d:59:90:7d:56:9c:31:70:ba:4e:b5:8e:d9:9e:88:
97:02:04:05:a9:30:6d:74:2a:cc:5f:61:b9:ad:89:
f7:7a:af:de:18:59:37:30:81:67:4a:d0:06:e7:40:
25:7e:85:3f:e7:62:21:d0:fd:82:be:68:4e:51:28:
54:4c:26:f5:8a:f2:5e:b9:d7:49:01:a8:2f:63:ec:
eb:63:14:fe:07:5f:d1:74:38:fa:b4:8e:77:92:e8:
75:6d:e0:8a:e6:6a:d8:dd:62:d4:9f:80:fe:64:fa:
7a:f9:3a:76:b7:76:54:3d:d4:ba:c4:b3:c3:16:47:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:E0:0B:6D:2F:07:F5:99:A3:C1:7F:ED:39:01:7B:FE:6D:E6:25
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/F6rgC20vB_WZo8F_7TkBe_5t5iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.133.124.0/24
146.133.127.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e1:11:58:b6:9f:d1:d7:bb:18:b9:7a:ab:fa:d7:ff:94:7c:
84:ae:80:85:c6:d6:dc:d3:d9:38:43:48:4b:78:20:54:77:75:
a7:44:34:12:4b:04:e4:d9:fe:06:50:29:50:73:4a:5b:f5:a7:
39:17:f8:c3:58:17:ad:e5:73:5c:85:7c:56:31:a5:ab:f4:ac:
3f:3f:fe:20:39:68:dc:c9:27:69:2b:90:b1:94:71:4d:b3:d5:
36:d2:88:22:38:e9:f4:28:ee:89:49:af:bb:68:3a:16:25:86:
96:65:a7:97:e6:c0:bc:37:02:31:fb:82:09:86:ab:4b:4b:32:
98:31:36:06:53:a0:8b:f7:f4:42:d7:2e:4f:15:86:2b:7a:ff:
e3:96:22:73:b4:13:35:74:9e:b4:e0:84:ca:01:ec:c2:b6:6e:
7e:1d:17:a9:91:41:66:69:94:f6:6a:4d:25:9e:92:83:a2:c7:
02:72:75:4d:0f:a1:17:a9:8b:88:61:4b:70:66:52:91:2c:b9:
38:f8:a6:2d:5c:23:0d:32:6d:77:23:96:4b:9b:b7:f5:44:af:
a1:a3:18:a9:7d:eb:4d:82:36:01:cc:66:aa:f7:b0:4b:30:e8:
16:1a:38:a4:d3:0c:14:04:73:5e:27:e6:65:e0:a3:a0:d8:1b:
4c:e1:1d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:24 2024 by rpki-client on console-ams.rpki-client.org