Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F4evt4Dicr4N0LSD-oPepww0uWM.roa
File: F4evt4Dicr4N0LSD-oPepww0uWM.roa (raw, json)
Hash identifier: 7uUUA4DE9LfJoNef7Dvy7eTJ1lWMAX4HzpFx5Cr8E5k=
Subject key identifier: 17:87:AF:B7:80:E2:72:BE:0D:D0:B4:83:FA:83:DE:A7:0C:34:B9:63
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0E57091BA4F68C0BC0508C4B8472
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F4evt4Dicr4N0LSD-oPepww0uWM.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0e:57:09:1b:a4:f6:8c:0b:c0:50:8c:4b:84:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1787afb780e272be0dd0b483fa83dea70c34b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:50:60:20:53:85:27:e1:93:04:36:90:06:
35:08:2b:93:3f:0f:89:dc:c3:11:25:10:d5:39:df:
54:04:8e:81:6d:94:b3:fc:6a:91:7c:50:25:f4:c9:
cb:de:d3:62:bd:a9:b4:a4:a6:0a:35:96:db:8c:0a:
b1:64:0e:65:04:e0:12:e8:b4:68:e4:84:1d:11:24:
00:65:70:c5:0c:f6:d2:2b:95:0b:86:b5:f6:e3:d2:
44:d9:c8:30:ea:20:15:75:35:22:6e:4a:da:63:7d:
5e:42:b3:f3:90:07:1d:32:f4:73:d9:a8:b0:07:5b:
20:b9:f6:09:50:3a:f9:86:39:72:83:83:07:c5:6e:
4c:83:5f:38:df:ca:ed:05:d3:d8:32:74:14:5f:52:
7c:26:cd:6d:eb:db:51:e7:76:10:e6:2e:d9:bf:cf:
d1:95:ef:99:f2:88:50:54:37:65:c9:14:d1:92:27:
82:4b:56:fd:97:8a:29:58:5b:66:e0:cd:78:cd:3f:
e0:51:e8:8f:63:ba:3f:7d:22:67:92:eb:7d:c6:f9:
86:38:d1:b8:19:dc:a9:67:0a:7a:17:55:cb:54:e5:
36:c0:79:1f:b1:48:a3:95:2d:c9:16:1c:42:d2:ac:
09:5f:88:6e:ef:c5:9e:33:da:55:3b:6b:ca:a1:4c:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:87:AF:B7:80:E2:72:BE:0D:D0:B4:83:FA:83:DE:A7:0C:34:B9:63
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F4evt4Dicr4N0LSD-oPepww0uWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ec:57:b2:85:73:1f:06:df:41:f4:26:e9:23:c6:89:5f:f5:
20:4d:ba:9d:2e:b9:82:9b:3b:07:20:1a:5b:d1:d6:b4:bf:f3:
45:5b:13:78:b3:d7:e8:55:7d:25:c0:2a:61:af:7e:39:36:3f:
48:34:1b:eb:6a:9e:59:cf:ca:07:c7:ac:8f:1d:73:bf:fa:1d:
33:82:f5:25:f2:a6:ee:7d:d5:62:67:0a:9b:4f:b3:c7:e9:32:
03:cb:26:b5:68:3c:2d:29:b3:5b:c3:a8:1e:18:24:9c:31:24:
c4:a3:1b:9a:cc:27:73:f7:d6:7c:fd:30:b3:ff:c3:b9:b5:47:
16:06:5b:17:f1:ed:90:06:b4:9e:33:94:52:48:ae:f3:d1:9d:
b8:ac:22:24:08:c6:1e:e8:2d:48:3e:a2:66:9e:9c:7b:66:42:
d7:99:ba:1c:c2:18:4e:42:e1:d8:ea:68:59:7e:4b:61:53:8c:
34:6b:76:29:8e:2e:aa:61:29:1c:eb:ae:62:61:c5:da:24:29:
f4:f9:ef:eb:6c:84:e5:ce:a7:bd:1d:3b:c5:42:d0:47:aa:a5:
9b:c7:30:d7:15:c9:62:88:95:c9:e7:80:ad:30:5d:bc:cb:cd:
3d:2d:76:b4:da:9a:c0:db:dd:8d:b4:0e:c2:ef:e4:99:06:eb:
34:10:c9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org