Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JQER0pcT8YKRQf7BR8ZBANRivmY.roa
File: JQER0pcT8YKRQf7BR8ZBANRivmY.roa (raw, json)
Hash identifier: IGttCSobaA7B/woBWdnHlPrLOH0OA2rhBtDpaSSMd+M=
Subject key identifier: 25:01:11:D2:97:13:F1:82:91:41:FE:C1:47:C6:41:00:D4:62:BE:66
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018CC7937EEF98D423DAF4C9ED8CA766F3E3
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JQER0pcT8YKRQf7BR8ZBANRivmY.roa
Signing time: Tue 02 Jan 2024 00:29:41 +0000
ROA not before: Tue 02 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 24 Feb 2024 21:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:7e:ef:98:d4:23:da:f4:c9:ed:8c:a7:66:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=250111d29713f1829141fec147c64100d462be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:c7:f1:d4:57:9a:21:32:bf:6b:d3:70:0d:
fa:43:7d:22:6b:d2:65:9a:bd:f1:bf:b6:7b:9f:37:
d3:a4:9d:2e:98:cd:54:24:3f:92:9a:1e:b7:58:ff:
c6:a8:80:a7:eb:8e:83:6c:cd:44:3c:9d:4a:bd:fe:
e7:25:f3:ac:35:da:41:d3:49:2a:f4:ba:c2:e3:50:
a2:29:80:09:8e:2e:e8:85:d3:c5:c5:60:e8:35:49:
22:35:12:01:51:2d:76:55:a8:43:45:1b:da:6e:bb:
ec:f2:f7:dc:7f:8e:19:6b:4b:6a:a4:1a:55:10:97:
05:b1:c1:d4:d3:ba:9e:bc:d0:d0:d9:5f:3b:16:77:
c7:33:91:22:6a:e1:b0:a8:08:31:36:d7:05:c8:e3:
d4:9f:a2:f9:73:c4:64:9d:cf:45:7b:83:5d:a8:ab:
50:b4:3a:31:8f:0c:75:6b:41:84:08:58:26:90:37:
76:dc:9d:91:e4:12:9e:25:76:a7:24:74:6c:d0:48:
78:1a:22:0c:7c:2f:bc:d4:19:f9:a6:18:ee:c6:95:
4f:2f:5b:86:5a:8b:d1:94:7a:4d:35:89:ab:c2:e0:
24:f4:9b:26:9e:1d:f6:8d:7d:ee:f8:12:17:aa:6b:
cb:4b:f4:eb:7c:41:78:52:52:79:d0:ec:fb:6a:1b:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:11:D2:97:13:F1:82:91:41:FE:C1:47:C6:41:00:D4:62:BE:66
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/JQER0pcT8YKRQf7BR8ZBANRivmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
146.247.124.0/23
Signature Algorithm: sha256WithRSAEncryption
90:08:c5:db:1c:06:12:8b:64:6f:d3:66:00:56:3e:a7:25:02:
39:76:9b:4d:b1:8b:97:fd:26:7d:10:98:4f:d5:47:ec:22:5f:
93:ba:3a:3a:db:05:9c:f5:0b:e9:a1:af:c2:28:00:90:97:db:
94:74:58:2a:f0:87:20:31:0e:8e:82:a7:71:41:c0:d5:9e:07:
51:1b:66:f5:4a:38:3a:0b:aa:69:2a:09:52:05:48:55:ab:11:
bf:62:16:63:cc:2b:17:11:da:15:ad:0a:c8:1f:d0:c5:ed:9b:
70:c1:a5:ed:c2:c6:6e:61:6d:9b:ee:04:29:f0:94:d6:b5:e7:
2b:d5:2b:9d:af:e5:b3:9b:a9:a0:e9:00:66:4e:93:1a:0a:97:
de:6d:65:ad:c0:aa:75:f7:2c:9d:80:68:16:2b:4a:ef:32:58:
99:0f:20:e9:76:99:a1:7e:9a:8d:54:6f:f8:2d:03:31:d0:a6:
47:37:90:91:2d:c1:4b:96:95:c3:cd:4b:15:53:c7:a7:2a:00:
de:7e:a1:07:82:e8:41:ec:e5:ac:f5:f4:42:8e:cf:46:dc:a6:
b2:9b:35:6e:3b:a8:c9:d8:9a:fd:66:04:0d:1f:b4:ab:bc:9b:
c6:2e:ef:41:53:7c:55:05:e3:da:7e:28:5c:aa:d3:10:c8:43:
d3:2b:81:94
-----BEGIN CERTIFICATE-----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Generated at Sat Feb 24 22:37:37 2024 by rpki-client on console-fra.rpki-client.org