Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/K27hLxoOeoUZecO0G6GHb9PAnsE.roa
File: K27hLxoOeoUZecO0G6GHb9PAnsE.roa (raw, json)
Hash identifier: DqtIb8Cl7j5i9HCthvcUwHHvoriOlYVaOsyOTkxlArA=
Subject key identifier: 2B:6E:E1:2F:1A:0E:7A:85:19:79:C3:B4:1B:A1:87:6F:D3:C0:9E:C1
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018C48CCF4F0F5287D0974D694A438D51479
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/K27hLxoOeoUZecO0G6GHb9PAnsE.roa
Signing time: Fri 08 Dec 2023 09:40:40 +0000
ROA not before: Fri 08 Dec 2023 09:40:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.124.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:cc:f4:f0:f5:28:7d:09:74:d6:94:a4:38:d5:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 8 09:40:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6ee12f1a0e7a851979c3b41ba1876fd3c09ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:61:db:13:31:88:2d:52:10:27:4d:52:2f:45:
e7:5a:75:a0:a2:f9:7f:d2:38:5f:58:a0:85:27:04:
a8:fb:85:64:a3:02:2a:17:7c:b9:7b:87:9d:03:89:
23:ab:06:9f:a6:ab:b0:27:42:14:65:3f:b4:68:b1:
4b:9a:51:74:0e:77:ee:cf:97:c5:14:8f:2c:6d:f4:
fb:c8:bd:b9:08:90:ea:b6:2b:3b:1b:e5:4f:a7:b7:
3f:1a:62:b4:fa:3c:3f:07:1d:b2:ca:b0:10:af:61:
81:5c:b0:c6:af:17:27:7f:85:f1:09:46:9e:1b:5e:
6b:21:28:4e:5f:ed:eb:f4:1b:f3:51:ab:5e:24:00:
26:39:77:46:fa:58:2c:19:de:95:74:2f:25:b3:0b:
be:60:9b:f9:c4:52:70:1b:e0:d5:79:9a:d1:d3:f6:
47:17:59:d5:61:3d:c4:71:57:f4:ff:f6:35:7c:63:
ab:f3:20:f6:5c:fe:31:6a:80:5c:1a:ed:80:2c:76:
f2:04:a7:11:43:9b:28:19:18:84:2c:da:b6:0e:d0:
77:be:96:c3:67:b1:c7:d7:20:22:d9:7d:75:d8:97:
42:63:aa:44:e4:1e:c7:85:a0:ab:86:bb:ab:44:05:
60:12:02:7b:74:b2:eb:62:14:e3:95:3b:32:d2:20:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:E1:2F:1A:0E:7A:85:19:79:C3:B4:1B:A1:87:6F:D3:C0:9E:C1
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/K27hLxoOeoUZecO0G6GHb9PAnsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
146.247.124.0/23
Signature Algorithm: sha256WithRSAEncryption
81:bd:67:8c:97:12:77:68:b1:2e:df:6b:b3:cb:0e:45:bf:84:
e8:ea:6c:08:c1:ce:1c:66:64:a5:4b:7a:dd:db:99:7c:44:3f:
8e:df:3d:66:75:42:0b:f4:7a:45:b1:3b:6d:37:59:4c:18:1e:
2c:2b:d7:d8:1a:9c:8a:f9:29:34:f4:a1:54:c9:ab:90:8e:8e:
52:c9:27:3a:55:3b:1e:56:dc:e5:21:23:1c:21:63:71:78:5c:
fe:0c:b9:d7:58:c3:df:b0:dc:71:01:18:28:ff:49:b3:7c:f7:
23:29:91:8c:65:e6:d1:74:4f:be:e5:03:4e:c8:c4:f9:24:ae:
0e:8b:0c:fd:2e:5b:30:cc:3a:fd:45:78:74:01:04:61:13:f8:
bb:45:e8:39:90:63:de:ec:b2:a6:27:ac:ac:3a:78:a0:ea:90:
38:ee:5b:c1:5b:dc:3b:c9:c8:7c:bb:5e:27:9f:b5:0e:e9:6d:
dd:9d:20:a3:54:d4:db:b8:0a:d9:17:2b:b4:f7:d5:6f:05:9e:
66:9e:e8:e8:91:5e:07:64:dd:0d:2b:cc:bc:b3:df:67:2b:bd:
14:6d:da:e0:78:61:ca:bc:f5:8d:38:5f:f0:89:ca:4d:80:5b:
f0:30:08:73:09:22:d0:19:11:bc:bd:c7:6f:03:84:15:39:00:
59:32:c3:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxIzPTw9Sh9CXTWlKQ41RR5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMxMjA4MDk0MDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjZlZTEyZjFhMGU3YTg1MTk3OWMzYjQxYmExODc2ZmQzYzA5ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2HbEzGILVIQJ01SL0XnWnWgovl/
0jhfWKCFJwSo+4VkowIqF3y5e4edA4kjqwafpquwJ0IUZT+0aLFLmlF0Dnfuz5fF
FI8sbfT7yL25CJDqtis7G+VPp7c/GmK0+jw/Bx2yyrAQr2GBXLDGrxcnf4XxCUae
G15rIShOX+3r9BvzUateJAAmOXdG+lgsGd6VdC8lswu+YJv5xFJwG+DVeZrR0/ZH
F1nVYT3EcVf0//Y1fGOr8yD2XP4xaoBcGu2ALHbyBKcRQ5soGRiELNq2DtB3vpbD
Z7HH1yAi2X112JdCY6pE5B7HhaCrhrurRAVgEgJ7dLLrYhTjlTsy0iBrhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCtu4S8aDnqFGXnDtBuhh2/TwJ7BMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvSzI3aEx4b09lb1VaZWNPMEc2R0hiOVBBbnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkvdpAwQB
kvd8MA0GCSqGSIb3DQEBCwUAA4IBAQCBvWeMlxJ3aLEu32uzyw5Fv4To6mwIwc4c
ZmSlS3rd25l8RD+O3z1mdUIL9HpFsTttN1lMGB4sK9fYGpyK+Sk09KFUyauQjo5S
ySc6VTseVtzlISMcIWNxeFz+DLnXWMPfsNxxARgo/0mzfPcjKZGMZebRdE++5QNO
yMT5JK4Oiwz9LlswzDr9RXh0AQRhE/i7Reg5kGPe7LKmJ6ysOnig6pA47lvBW9w7
ych8u14nn7UO6W3dnSCjVNTbuArZFyu099VvBZ5mnujokV4HZN0NK8y8s99nK70U
bdrgeGHKvPWNOF/wicpNgFvwMAhzCSLQGRG8vcdvA4QVOQBZMsNY
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:11:00 2024 by rpki-client on console-ams.rpki-client.org