Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/BHmh3TrxEq_5zXTtjje70wpt5Hg.roa
File: BHmh3TrxEq_5zXTtjje70wpt5Hg.roa (raw, json)
Hash identifier: VasuqiQsntvCuF3RVgofkCWXnNT1vMHnudYrl8wF1AA=
Subject key identifier: 04:79:A1:DD:3A:F1:12:AF:F9:CD:74:ED:8E:37:BB:D3:0A:6D:E4:78
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0186DB316A4A848BB1078DC707BE603ED3F1
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/BHmh3TrxEq_5zXTtjje70wpt5Hg.roa
Signing time: Mon 13 Mar 2023 13:38:13 +0000
ROA not before: Mon 13 Mar 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.115.0/24 maxlen: 24
146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:31:6a:4a:84:8b:b1:07:8d:c7:07:be:60:3e:d3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 13 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0479a1dd3af112aff9cd74ed8e37bbd30a6de478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:0d:55:9b:2c:94:75:a6:5a:8e:f6:e0:d0:
de:89:04:07:7c:b0:fa:c8:b4:81:36:01:a2:74:27:
45:b6:15:bb:f1:e2:36:bc:d6:9b:0e:f6:e1:06:e4:
7a:e6:45:89:f7:16:61:78:27:fc:6d:3f:c1:a3:33:
33:8e:5c:d0:db:cb:58:f2:57:f9:a5:31:1d:f5:ca:
f2:bd:3a:85:87:4d:48:d3:28:22:3e:3b:1e:87:69:
ce:0b:2d:b3:7f:00:e1:55:0a:3d:2a:92:a0:0d:fd:
3b:dc:a5:d2:e4:36:d6:ae:05:f8:fd:dd:8c:07:7f:
ba:19:ad:5f:1a:94:cc:dc:4f:b5:98:88:29:0f:9c:
c9:a1:1c:e7:ce:28:a0:5e:47:f4:25:a6:30:d4:83:
87:8c:e3:37:11:3d:38:c2:92:df:3b:11:61:0b:3b:
ce:98:a7:39:58:0b:ef:67:47:c6:66:05:33:6e:5d:
5b:a1:7e:ee:b1:f1:85:f7:cd:c6:14:06:a2:dd:78:
a9:e3:7c:bc:1d:10:a9:d7:9e:50:5c:c3:5d:71:50:
38:17:71:1c:97:5e:60:08:04:36:83:c2:08:2f:97:
90:37:0c:01:81:ee:5b:9b:cc:8e:f1:f3:00:f0:63:
bb:df:48:66:0a:7b:30:32:46:a9:20:53:f4:0b:7a:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:A1:DD:3A:F1:12:AF:F9:CD:74:ED:8E:37:BB:D3:0A:6D:E4:78
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/BHmh3TrxEq_5zXTtjje70wpt5Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.115.0/24
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ee:10:84:e7:6f:45:e5:fc:8a:f0:e9:da:cc:60:78:76:c5:
c6:61:0a:d1:3a:8f:67:e2:40:7b:74:38:16:d9:99:12:1d:6b:
b7:1d:d8:72:2a:c6:6a:03:2b:0a:6b:bb:29:7b:78:d5:2d:ab:
40:0f:52:e1:a8:58:05:5b:1a:62:af:4a:76:de:e7:7c:45:6c:
43:30:79:88:d3:70:28:d9:88:d5:28:da:2b:4a:be:9d:08:fd:
17:5a:00:cd:d2:63:fd:f6:8c:1d:9c:54:7c:4b:00:bc:06:81:
5c:be:04:d5:9f:44:a5:b7:c2:95:12:41:61:4f:68:2c:41:82:
70:6f:f0:1b:9e:ea:41:32:93:54:4f:a6:96:ba:ea:e0:0d:f5:
72:ea:1f:f4:ff:8d:e1:e0:8d:08:7c:ea:91:98:ca:64:4d:26:
f7:59:0c:52:2e:77:8d:4d:ac:69:33:46:13:f2:13:12:bd:9e:
39:6e:3e:7c:18:03:b5:bd:d9:5c:de:7f:3e:b0:94:44:20:22:
bf:57:5b:2c:40:95:40:a4:8f:0a:3f:25:30:a0:08:e0:02:44:
d7:ab:41:d5:5a:45:55:bc:18:a2:a2:7e:24:33:9a:1b:9c:61:
a6:7f:5f:d9:b6:8f:fd:43:b7:fa:a5:f0:34:13:13:a8:d0:4b:
b4:68:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org