Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7u6ZWpEUBMjIPW2kHKCp50s1b4U.roa
File: 7u6ZWpEUBMjIPW2kHKCp50s1b4U.roa (raw, json)
Hash identifier: L03PBB0LDLtbqK0mUDFwdaHDYP6Ij//B/UdRR/Rwoqc=
Subject key identifier: EE:EE:99:5A:91:14:04:C8:C8:3D:6D:A4:1C:A0:A9:E7:4B:35:6F:85
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01887411A0EA93D93C9300012A37FC3A2241
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7u6ZWpEUBMjIPW2kHKCp50s1b4U.roa
Signing time: Wed 31 May 2023 23:08:12 +0000
ROA not before: Wed 31 May 2023 23:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.109.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:74:11:a0:ea:93:d9:3c:93:00:01:2a:37:fc:3a:22:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 31 23:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eeee995a911404c8c83d6da41ca0a9e74b356f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:a7:49:97:c7:e9:b0:6e:1d:ef:37:bf:4e:
7b:7e:77:cf:a8:59:06:5c:9b:64:c4:af:f5:b9:9a:
a2:18:b7:72:52:a9:bb:b0:e5:f2:78:ea:48:8b:88:
e4:4a:9c:a2:d9:90:6e:59:e7:29:38:d7:cb:ea:27:
4b:6b:0f:cf:9e:0a:60:a2:7d:e9:ec:71:2e:05:2c:
1f:79:48:14:5d:7f:9d:f7:f0:44:1d:bf:bb:dc:1b:
e4:b0:65:f2:66:00:0b:d9:cd:fe:ff:d7:7a:3e:a5:
29:6a:6c:42:4b:41:d9:01:ea:b2:b0:b0:79:ed:5a:
9e:e2:83:37:f3:3a:45:86:4f:5e:a7:c7:d2:46:94:
da:80:5a:bb:67:d1:c8:01:1b:f6:dd:12:01:c6:d9:
36:d3:fd:62:24:bd:82:cf:c7:ba:b2:00:fb:c4:de:
be:4e:51:7b:1e:e2:cd:b6:1c:c5:39:95:2b:dc:31:
d5:b0:a4:50:73:38:79:d3:79:8a:e4:a3:4c:6e:d3:
97:75:d5:67:14:b8:d0:83:51:97:e7:9d:b6:a5:7a:
dd:9f:0a:7d:7d:76:2e:a1:39:da:5a:8c:c2:cb:3b:
82:e5:28:2e:c1:b8:98:fd:1c:1e:bf:5c:5c:25:4a:
15:2a:20:3e:55:70:ef:6f:20:e6:b1:fc:1c:ff:a2:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:99:5A:91:14:04:C8:C8:3D:6D:A4:1C:A0:A9:E7:4B:35:6F:85
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/7u6ZWpEUBMjIPW2kHKCp50s1b4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.109.255
146.247.112.0/23
146.247.118.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a2:90:71:e7:ab:a9:3b:2e:5f:2d:98:e9:0a:3e:60:d5:77:
9d:74:96:ce:09:90:35:39:95:35:5a:ee:22:3e:fe:1a:28:21:
b8:ce:b4:20:46:96:07:8e:1f:4a:c6:d1:f9:44:17:17:e9:93:
be:83:47:f5:02:24:7a:eb:d4:bc:09:db:e3:48:1d:0d:c7:57:
47:38:77:d1:d1:c6:b1:7f:56:a7:cd:44:6f:06:b5:33:c9:ac:
ca:d7:c4:80:39:a3:d9:35:c9:3d:b4:39:1d:c0:90:30:e2:d5:
25:97:02:e7:8b:0e:46:d9:1d:e5:ef:1d:e9:05:dc:da:88:c9:
da:3e:72:01:50:0e:7e:72:f9:d8:2b:34:c2:96:9a:75:44:df:
e3:d2:95:3c:8f:09:b4:1b:51:16:66:a3:6c:6f:1c:3b:8d:49:
bb:2a:8a:23:69:b3:17:b0:f0:46:17:c0:1d:ca:24:52:0a:06:
23:9a:b2:61:91:46:18:26:b7:ad:f6:07:8a:b3:6a:93:2d:a7:
a9:87:a3:aa:ba:3c:e7:bb:e5:54:28:c0:f1:16:1c:bc:de:8a:
ab:a1:aa:a4:02:9d:9f:a3:82:1c:66:f3:a1:dd:8a:c2:f6:0d:
d3:86:f9:0b:a4:ce:99:cf:2b:8d:cc:e1:c2:7d:87:1c:f2:36:
77:78:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org