Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1Grj3XYgWtE8iKxipZ0twMk_az8.roa
File: 1Grj3XYgWtE8iKxipZ0twMk_az8.roa (raw, json)
Hash identifier: bPgdH52EtL3JU+rRl2n1x4WJ5LWOuc4LnF7BTArRu5I=
Subject key identifier: D4:6A:E3:DD:76:20:5A:D1:3C:88:AC:62:A5:9D:2D:C0:C9:3F:6B:3F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0185E427D5A56F4A3EFAD2FE854F0CA794A9
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1Grj3XYgWtE8iKxipZ0twMk_az8.roa
Signing time: Tue 24 Jan 2023 14:21:33 +0000
ROA not before: Tue 24 Jan 2023 14:21:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 146.247.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:27:d5:a5:6f:4a:3e:fa:d2:fe:85:4f:0c:a7:94:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 24 14:21:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d46ae3dd76205ad13c88ac62a59d2dc0c93f6b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:f0:b8:0b:b2:43:81:7e:6c:62:af:27:ce:
92:48:d3:97:c1:b1:d3:0a:9d:0f:13:84:11:89:34:
42:9d:41:65:52:bc:b4:d1:3b:0c:37:63:4a:7d:2b:
f8:df:83:8c:eb:1a:cb:0a:18:a6:fe:df:2f:3b:dd:
ec:91:77:ba:0c:f4:22:fb:42:4a:8f:11:06:38:44:
dd:48:20:4f:3c:84:37:85:18:8c:2a:2a:21:1a:9e:
10:f9:db:64:70:ae:7d:6a:4a:aa:bb:2b:09:f7:ef:
cd:8d:a6:5d:87:ed:92:36:78:13:9e:4a:22:0c:19:
d8:d9:48:dc:d7:f8:94:2e:f6:75:3b:24:cd:77:a5:
1c:99:7e:22:d9:0b:d7:11:9a:4b:0f:29:62:26:b8:
d2:fc:6f:84:63:fa:ff:87:0a:25:0c:38:7a:dc:fd:
c1:a5:fe:0d:31:fd:95:ed:7d:8c:94:2f:d0:17:0c:
e5:ba:70:4c:22:52:75:1e:38:c4:86:68:33:4b:0e:
24:a7:6a:67:1b:46:34:e8:f7:f9:75:dc:f4:54:37:
ce:14:80:55:6c:73:b2:67:db:c1:bd:69:40:9d:09:
69:89:c9:56:c0:a9:0f:0c:f4:80:70:d1:76:0a:00:
76:2c:ee:48:13:5a:f5:5f:f9:fd:ca:82:c0:93:84:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:E3:DD:76:20:5A:D1:3C:88:AC:62:A5:9D:2D:C0:C9:3F:6B:3F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/1Grj3XYgWtE8iKxipZ0twMk_az8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.104.0/24
Signature Algorithm: sha256WithRSAEncryption
01:62:72:a6:1c:79:5c:6c:5f:7c:cf:81:ed:ee:2e:b5:36:a2:
37:c5:72:3b:8b:33:ed:d3:59:ef:80:15:9b:1e:a2:75:0c:0f:
9c:b0:7f:41:b1:a9:48:08:14:99:c5:c7:f3:5d:72:06:44:42:
c9:5f:93:a9:ae:79:32:0a:92:cf:23:85:06:6a:d1:88:23:2b:
bf:1d:73:c8:0e:c0:05:7d:e8:2d:de:91:74:ab:70:c5:b1:82:
4b:29:79:fb:de:40:0b:ad:19:0b:6a:86:0b:07:58:41:a9:d3:
cc:56:24:b1:47:95:46:f6:34:8c:ce:1c:65:4c:42:4a:b7:ae:
7b:21:8a:65:8f:6d:ee:60:03:55:e0:7a:3b:c0:5c:f1:7f:0e:
b5:ad:50:bc:89:2d:b4:00:0f:7b:35:2c:0b:39:62:09:8a:50:
21:8d:da:d6:4a:95:f5:1a:42:7c:cd:66:a5:5d:8c:02:42:83:
70:ce:c5:be:13:68:cd:75:e8:2e:9a:05:d4:c4:88:dd:61:fc:
ab:4a:80:1f:86:71:73:78:e6:60:34:74:5e:4c:3f:80:5e:28:
59:0e:fb:5d:67:05:02:ab:34:d2:dd:04:a1:ec:a8:0b:a9:a7:
05:14:0b:bf:90:f8:fb:64:2c:f3:35:8d:15:c1:29:a3:78:6f:
ad:32:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:11:00 2024 by rpki-client on console-ams.rpki-client.org