Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/8BSe4LtiioRl5eCth2rxK9QP9dw.roa
File: 8BSe4LtiioRl5eCth2rxK9QP9dw.roa (raw, json)
Hash identifier: 4GTsDiVQPRiunWKH2K6uwTG9SEoO5I90Of/G/IEdmII=
Subject key identifier: F0:14:9E:E0:BB:62:8A:84:65:E5:E0:AD:87:6A:F1:2B:D4:0F:F5:DC
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01866EEA0C9F9A9AF96519A1A7D0AE5C00DB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/8BSe4LtiioRl5eCth2rxK9QP9dw.roa
Signing time: Mon 20 Feb 2023 13:01:17 +0000
ROA not before: Mon 20 Feb 2023 13:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 146.247.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:ea:0c:9f:9a:9a:f9:65:19:a1:a7:d0:ae:5c:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 20 13:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0149ee0bb628a8465e5e0ad876af12bd40ff5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:8b:a9:f8:8c:e1:d1:d3:f3:b9:d6:ba:a1:
58:11:ca:b8:7b:d3:c6:7b:d2:70:a3:42:dd:dc:f7:
63:34:6c:19:58:37:fa:02:24:7e:92:79:d3:e6:f4:
f3:e0:55:ec:42:17:7a:59:5d:e7:ba:dd:d5:86:43:
c5:a1:04:b1:23:8e:bd:08:65:a7:0e:da:c8:9d:ed:
58:14:a7:e4:04:03:d7:2a:f1:fa:7d:f7:06:4b:59:
99:a4:e3:90:d1:51:9f:4e:f7:59:4d:3c:ed:75:5f:
93:a1:96:6d:aa:7c:44:9e:7b:88:1a:39:ca:ac:30:
7b:c2:8e:ec:b9:a4:d1:de:83:90:e6:37:b3:b6:c0:
38:d1:91:3c:0e:04:49:05:f9:79:69:f3:92:1f:f8:
e9:f9:0b:cf:11:cc:4c:e3:cb:e6:25:a3:41:60:e0:
12:01:e8:de:77:e5:a0:01:be:c2:88:ca:68:51:ef:
b5:11:ee:7a:cb:c6:65:7a:eb:95:30:72:0b:b6:bd:
90:b2:cf:ae:de:60:96:2c:bb:e1:7d:6f:03:a3:c6:
63:ea:dc:7e:b3:ff:07:af:d5:ee:fb:6e:48:93:08:
85:a7:d1:43:04:9b:7f:9d:40:6f:34:99:95:69:83:
0c:ca:f6:ae:c4:25:02:18:20:ff:94:33:ab:72:39:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:9E:E0:BB:62:8A:84:65:E5:E0:AD:87:6A:F1:2B:D4:0F:F5:DC
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/8BSe4LtiioRl5eCth2rxK9QP9dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:65:c4:d1:e2:a7:cc:6e:c5:04:1f:e0:12:c3:41:53:16:ef:
09:95:2f:68:4f:46:67:1c:88:bc:4d:80:9e:ce:a4:96:2e:3d:
66:1a:33:8b:85:3d:58:f9:bb:e1:11:ac:56:f4:5d:4c:95:37:
22:22:e4:ce:b8:6f:ff:a7:89:ef:e4:99:08:f0:a9:8d:a3:6a:
4b:c1:e1:a4:0f:68:ac:dc:ea:03:78:6c:48:ca:da:d5:1f:24:
b8:85:66:f9:5d:cf:a7:0b:d9:83:5e:c1:6d:74:78:63:23:55:
e0:ae:db:81:02:11:ac:29:d5:53:cd:52:0a:ef:88:df:dd:34:
56:6d:6f:f1:f4:39:c3:b5:f3:33:54:45:09:2b:85:c9:51:f1:
06:70:38:1f:ba:67:23:79:68:53:61:3e:61:5a:3a:f6:93:1b:
d2:b7:35:f3:8e:d2:ad:6c:90:b1:6f:56:79:66:8a:f1:cd:9a:
42:69:7d:00:b8:72:e5:86:82:bf:55:f5:ea:57:84:99:ea:d0:
24:0c:12:0c:0e:23:79:9c:59:20:29:5d:0c:e5:55:f1:15:35:
2f:c4:59:90:61:e0:61:88:d6:a4:8d:38:4e:b1:91:a4:6c:9e:
83:86:43:91:3b:3b:8f:21:70:71:97:30:91:ca:29:95:0d:cb:
a9:6c:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:42 2023 by rpki-client on console-fra.rpki-client.org