Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IDzSyHhsFDZ1RMiUjrIpyMqvP1E.roa
File: IDzSyHhsFDZ1RMiUjrIpyMqvP1E.roa (raw, json)
Hash identifier: Mm1PtVAAZPAm9em51DvRo2Ol2T9KGFMuhHK1ydW7g2c=
Subject key identifier: 20:3C:D2:C8:78:6C:14:36:75:44:C8:94:8E:B2:29:C8:CA:AF:3F:51
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01866EEA0BF50C41E9314361F2F1551411A6
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IDzSyHhsFDZ1RMiUjrIpyMqvP1E.roa
Signing time: Mon 20 Feb 2023 13:01:17 +0000
ROA not before: Mon 20 Feb 2023 13:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 146.247.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 21:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:ea:0b:f5:0c:41:e9:31:43:61:f2:f1:55:14:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 20 13:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203cd2c8786c14367544c8948eb229c8caaf3f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:11:e6:2c:a5:84:71:e3:60:f0:4b:80:94:
21:0f:4f:11:ed:78:8f:21:9b:56:bd:43:da:52:dd:
42:bd:d2:e5:df:25:33:32:be:4c:0b:98:8e:7e:69:
a1:9c:7c:7f:91:69:46:8c:cc:af:75:d2:f3:00:5e:
fb:a6:ee:9c:49:a1:4d:37:cd:ef:44:85:18:79:b5:
74:5c:3e:c6:31:ff:45:46:00:73:c9:8d:94:2a:9a:
98:2f:eb:c0:16:d7:08:17:38:a8:4a:30:e1:b1:20:
18:71:50:4b:b7:82:0f:96:6f:18:00:79:f5:2c:49:
ab:20:3c:d9:bb:72:87:e0:12:60:4f:cb:85:57:5d:
7f:05:cd:b7:ca:8b:da:19:ad:d5:90:a3:a6:20:ea:
4a:ff:c2:d6:5d:42:5b:2b:2a:37:e8:55:80:0a:0c:
19:32:fe:12:71:15:c5:cc:39:e5:fc:32:5d:ea:2e:
97:5c:3a:42:4f:5d:6d:73:42:a3:21:9b:69:c6:ba:
d0:9f:58:d3:4b:00:b2:9c:3c:e3:98:44:7d:79:0c:
3a:1e:39:49:af:61:f2:87:c2:fb:17:56:32:ed:9f:
55:e5:98:b1:4e:34:af:71:2d:c6:ce:8f:5d:c1:42:
6d:00:b1:62:29:e3:53:78:98:0b:dd:be:bb:6a:bb:
67:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3C:D2:C8:78:6C:14:36:75:44:C8:94:8E:B2:29:C8:CA:AF:3F:51
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IDzSyHhsFDZ1RMiUjrIpyMqvP1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:8b:4a:d5:ee:e2:64:55:e2:c2:9d:26:1a:6c:49:a6:94:b9:
a0:4c:b5:d2:8c:cc:3a:66:59:9c:fb:c3:bb:7c:dc:31:ed:88:
50:a9:2f:22:54:dd:96:77:dd:6e:c0:2c:f0:ce:37:d6:55:18:
11:dd:ee:d3:d3:5e:0f:b9:68:33:97:4f:34:38:87:e2:71:df:
1c:95:a4:84:52:44:13:6b:4a:03:ed:02:8a:e8:59:15:d4:95:
3e:7a:83:1b:37:b0:7e:09:ea:e3:56:4e:ca:e5:ad:be:3a:97:
b8:82:da:7f:a4:1d:1a:34:1b:ab:4d:4b:62:08:88:dd:25:ab:
82:e3:09:60:bf:5d:d5:98:79:b0:3e:d4:73:c2:df:3b:97:8f:
be:86:23:93:60:22:9c:0c:9e:3b:04:de:f9:3c:2d:6b:02:9d:
f5:ec:ac:07:a7:bf:a3:c5:41:5f:83:12:57:43:d5:8a:8d:cb:
e2:70:bc:a4:75:46:19:b3:45:1d:08:ee:c4:3f:27:64:ac:86:
27:57:c1:8d:99:d1:12:12:5f:76:7e:4d:44:40:6b:f7:f7:04:
f7:0a:67:70:04:d2:53:1c:8c:7d:b2:fe:67:58:37:02:85:c4:
28:8c:e3:e9:0b:1d:19:b8:b6:6e:e5:fe:31:a0:ef:c7:f2:00:
d1:09:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org