Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IEbsgJCVgrgINFhXV2fRdFv9ies.roa
File: IEbsgJCVgrgINFhXV2fRdFv9ies.roa (raw, json)
Hash identifier: 3ZlkR555UlQHC7WeaMbtLNb8PhIj7bpm7yOGXpbV7/4=
Subject key identifier: 20:46:EC:80:90:95:82:B8:08:34:58:57:57:67:D1:74:5B:FD:89:EB
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0186DAE661FAF8294E4B59384F4B5AD184BE
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IEbsgJCVgrgINFhXV2fRdFv9ies.roa
Signing time: Mon 13 Mar 2023 12:16:16 +0000
ROA not before: Mon 13 Mar 2023 12:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 146.247.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:e6:61:fa:f8:29:4e:4b:59:38:4f:4b:5a:d1:84:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 13 12:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2046ec80909582b8083458575767d1745bfd89eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a6:61:b4:86:dd:8a:f4:30:8e:2f:4a:43:a1:
30:15:3d:50:49:72:95:00:49:dc:9f:bf:eb:5f:bc:
5b:bc:65:3d:cd:fa:99:23:cd:21:a7:6b:b7:63:00:
21:8a:85:e8:44:15:da:bd:02:74:d7:a3:83:88:ae:
fe:7f:b2:77:08:1f:bc:79:4e:a7:dd:87:f0:d6:4a:
bc:b7:d2:f8:2e:76:1b:90:2a:1d:1e:2c:3d:a4:a1:
a2:4f:d2:45:2d:b4:eb:c5:13:13:82:4f:29:2c:76:
a0:8c:62:74:fe:46:11:18:3c:14:34:b6:dc:c0:59:
d6:5e:0a:f9:45:8d:40:2b:db:d7:db:89:72:0d:bd:
fa:8c:f2:09:2d:be:af:36:ca:46:da:fb:d0:cb:f3:
7c:c2:7c:8b:88:bc:55:a4:05:5f:20:db:73:73:00:
86:2e:0b:1a:cc:56:ed:1a:ba:de:89:a0:cb:87:8c:
cc:06:a2:df:46:2a:9e:67:61:72:f5:8a:c2:e6:e4:
32:b4:f6:c4:8b:dc:18:3b:82:45:80:7a:84:0e:74:
2f:1a:3b:0c:f6:56:db:14:16:c4:27:ef:28:c3:36:
f8:73:3c:f9:76:49:c6:45:24:aa:08:80:5c:d3:7c:
6e:e6:d5:1e:b4:2a:6d:a6:9c:ae:ff:7f:f4:2d:de:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:EC:80:90:95:82:B8:08:34:58:57:57:67:D1:74:5B:FD:89:EB
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/IEbsgJCVgrgINFhXV2fRdFv9ies.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.114.0/24
Signature Algorithm: sha256WithRSAEncryption
91:02:8e:99:8c:56:79:74:96:4d:05:21:b4:c0:f6:6e:64:08:
9c:ce:07:d6:47:e6:ce:89:ea:9b:31:6a:a7:90:86:18:58:1e:
43:d4:94:07:7d:c4:cc:a6:31:9b:6a:9b:8c:3e:4f:68:9f:cd:
a9:e8:39:3e:dd:ae:7f:94:04:18:67:a6:41:24:e5:2f:df:e8:
12:d1:0b:0e:ee:9d:66:f4:6e:0d:ab:dd:85:2b:93:12:5c:57:
9b:b0:48:06:da:94:16:7d:c4:18:e7:b2:7e:24:58:d6:56:dd:
e2:91:01:42:f6:66:22:40:0f:7f:a9:ba:dd:66:6b:77:8d:de:
b6:ad:53:35:1b:7d:1e:3a:53:bb:d9:2a:a3:42:f0:52:e3:0b:
64:ba:84:62:cb:ff:df:58:aa:29:fb:10:61:29:fe:0a:2c:d1:
bb:77:8d:bb:42:86:a6:d0:b8:90:97:7e:97:98:90:4c:df:f8:
64:14:ea:9a:0a:bb:da:d2:ba:9b:db:13:fa:b1:42:45:d5:0f:
1c:43:ef:31:8b:79:d8:5e:9a:a0:1f:ef:5f:79:c4:ae:85:ce:
8d:5d:08:c3:d8:b6:b2:08:e4:cf:c5:16:d1:ee:e6:76:80:50:
d4:5a:8d:fb:b2:06:58:d0:15:ec:2e:ff:64:ce:5f:d3:2a:87:
c2:50:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org