Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa
File: EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa (raw, json)
Hash identifier: OMy7u2i2bx5npv9okxU1hJEoHwZJ78Jot3yLotxU7FU=
Subject key identifier: 11:46:72:EC:A5:93:A8:53:2A:A8:26:78:C0:0D:86:A2:9A:3E:B1:EA
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0F570808F25BB32F2746C4650B7B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 146.247.116.0/24 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Feb 2023 16:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0f:57:08:08:f2:5b:b3:2f:27:46:c4:65:0b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=114672eca593a8532aa82678c00d86a29a3eb1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:18:0d:ed:ca:76:f1:a5:9b:28:a1:e7:2e:
d9:28:42:4f:41:c4:60:ad:1d:31:59:f5:21:dc:8c:
54:ca:91:af:16:14:2c:74:49:02:78:21:00:f4:f9:
62:02:1a:b3:31:36:1a:a5:d5:36:a0:9b:d5:74:90:
7d:de:eb:61:98:78:f8:8e:cd:20:55:99:bf:4c:3b:
20:91:c5:ea:1f:b6:c2:d5:ba:a7:82:25:46:07:26:
2d:41:11:06:c4:5c:13:a8:55:55:96:b9:a6:24:e2:
fa:b9:98:c7:8b:15:04:4a:12:b5:9f:a7:1e:bb:62:
a0:3f:24:33:15:2e:33:41:d8:8f:69:30:1a:9e:76:
74:53:5a:4e:9e:fd:d8:30:c2:a4:fd:23:43:ba:7c:
4b:af:ba:29:82:06:9c:c8:4f:ae:9e:86:06:25:c8:
fb:8e:b3:2e:b8:7f:b6:40:3a:14:43:d3:30:f9:0a:
0a:82:bf:60:5a:bf:2f:a7:7a:a0:ef:10:54:6a:45:
c7:ab:62:8f:a5:d5:82:16:c0:c2:d8:00:31:43:d6:
32:b8:05:11:b6:bc:40:8a:bb:77:c0:09:6a:61:e5:
96:1f:9b:94:01:cb:4d:ca:20:9d:0e:58:df:e6:88:
4f:e2:51:64:32:33:53:13:ae:56:82:9e:32:af:f9:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:72:EC:A5:93:A8:53:2A:A8:26:78:C0:0D:86:A2:9A:3E:B1:EA
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/EUZy7KWTqFMqqCZ4wA2Gopo-seo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.116.0/24
146.247.118.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:24:4f:d4:f7:55:f5:3e:b1:98:ad:87:ec:37:f5:1d:2a:7a:
5e:4a:bf:8c:80:36:eb:ed:57:35:68:64:24:26:62:62:b9:77:
cc:b0:89:c8:fd:04:31:a0:ff:69:08:3d:70:ec:31:b9:4a:a6:
ed:00:93:38:7d:64:d7:14:c4:6f:62:ac:07:c8:0b:14:4a:3e:
ed:46:d3:9d:50:75:84:6b:4a:7b:5a:40:9c:83:39:c2:3b:ac:
9a:a4:36:1f:e6:33:29:9c:b3:65:d9:3a:15:87:11:2e:b5:aa:
56:51:53:a4:d4:b7:bf:63:94:be:9d:fd:6b:e8:4b:0e:50:15:
6a:d3:12:97:39:1d:40:e7:cb:05:8a:0b:93:da:57:33:88:25:
d8:29:64:98:42:b1:4e:3e:f0:90:a7:b1:ca:27:50:a9:6c:67:
ae:52:69:91:7a:56:20:15:5f:69:4e:b9:17:6f:0a:7c:11:df:
fd:70:73:d3:9d:6c:c7:f6:d9:00:58:88:f0:99:92:28:a9:2b:
24:80:bb:05:15:48:a5:a8:fd:06:54:21:09:9a:f7:3b:2a:5a:
8e:38:97:a9:cb:10:31:b8:31:20:83:c0:20:4e:ae:6d:0e:c4:
94:40:26:8e:5b:dd:34:10:b3:43:de:60:d9:1b:d7:a3:9b:fc:
81:4b:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org