Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Ca5GqBQ6mFAHCemLf7Wr9A_qu4k.roa
File: Ca5GqBQ6mFAHCemLf7Wr9A_qu4k.roa (raw, json)
Hash identifier: AS9BWUIIliZynRoGJYkBWA0O0l9haNaP3T0Ihn4Y0Zs=
Subject key identifier: 09:AE:46:A8:14:3A:98:50:07:09:E9:8B:7F:B5:AB:F4:0F:EA:BB:89
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF128D85DD27B39CCFB38592523C95
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Ca5GqBQ6mFAHCemLf7Wr9A_qu4k.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 146.247.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:12:8d:85:dd:27:b3:9c:cf:b3:85:92:52:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09ae46a8143a98500709e98b7fb5abf40feabb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:a4:9e:be:b0:32:d1:76:da:76:ae:9b:e3:
1e:eb:ff:9d:fa:57:53:87:9d:03:0c:3c:61:4d:ff:
19:93:77:66:aa:ad:ef:52:91:b7:30:b2:0b:70:31:
97:10:50:8c:7c:65:e7:dc:f8:57:60:1f:d4:c1:c1:
3a:05:65:da:04:88:84:e9:cf:3b:19:ac:ed:8c:b4:
2b:43:62:65:9f:20:15:55:44:44:71:91:f0:c2:43:
e4:6d:9a:ca:e3:44:fb:07:43:59:4d:fb:4a:80:a7:
b1:99:4d:3f:3e:24:b7:ae:a8:c0:f9:dd:47:68:ae:
c8:2b:5f:79:be:88:2f:60:1f:f8:04:ca:ee:69:d2:
a7:75:a5:96:52:07:97:c3:05:cc:76:5b:24:1f:b1:
41:1c:40:59:2a:66:36:5a:e9:35:13:f7:c9:73:f6:
76:04:42:a7:66:32:5c:f8:13:74:30:01:98:88:31:
73:37:3f:d5:62:d6:0e:0d:20:4c:3f:6a:f7:0d:76:
2c:8c:09:f1:13:8a:ec:da:8d:63:37:34:40:66:80:
42:10:0e:08:68:ae:4f:33:7b:aa:19:f2:8f:24:a6:
9b:41:8e:7a:e4:0f:da:54:03:cc:98:35:61:28:c0:
56:53:29:85:21:c2:91:bb:6f:04:26:62:9f:f8:41:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AE:46:A8:14:3A:98:50:07:09:E9:8B:7F:B5:AB:F4:0F:EA:BB:89
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Ca5GqBQ6mFAHCemLf7Wr9A_qu4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.124.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:69:0f:71:28:ae:c3:61:06:a6:3d:49:90:44:82:7e:06:d7:
fd:91:f6:5c:3b:d5:5a:93:bf:f5:1f:17:0e:4c:33:f4:10:e5:
7a:fc:f6:2f:32:cd:5b:1f:df:57:b1:ce:60:6a:eb:c9:81:06:
e1:85:be:46:51:f9:00:70:c6:b0:7a:1c:3f:03:89:0a:5f:56:
41:66:6a:fd:8d:e1:5e:6b:ff:30:a8:6c:ce:4e:9d:1f:de:b8:
13:bd:cb:fc:df:d3:02:5e:bb:26:da:23:23:00:9e:63:94:08:
5e:ff:37:4d:28:5d:9a:36:ea:d0:cb:6e:b1:bc:a0:70:da:59:
39:06:e7:3b:a2:75:d8:c0:fd:5a:90:01:11:5a:bd:7a:74:da:
ad:e2:4a:19:f8:c3:39:fa:d2:b9:8b:0e:6d:35:58:ec:d2:e0:
2b:c6:fb:d7:35:11:e0:1b:62:12:cb:59:98:ef:08:94:fd:c0:
c2:10:a5:be:20:d2:3f:51:59:59:f1:f2:58:24:57:35:5f:79:
0c:6e:0b:fa:00:14:ce:b1:3d:43:5a:5f:55:c2:a3:25:c3:ec:
81:56:34:2e:c2:55:83:35:1d:00:c0:32:db:56:f5:a4:b3:b9:
77:3a:64:41:84:98:f7:9f:1a:c1:eb:e2:67:86:43:9b:d2:3d:
b1:6d:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org