Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/L2TidzpStztfJgsBO6t96tJ8zhw.roa
File: L2TidzpStztfJgsBO6t96tJ8zhw.roa (raw, json)
Hash identifier: IvBheqnZ9eAxgwKMr4mY4S9lZCv2cRjw0i5BH37KOxM=
Subject key identifier: 2F:64:E2:77:3A:52:B7:3B:5F:26:0B:01:3B:AB:7D:EA:D2:7C:CE:1C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01886CCAB86BA0EB7DC62A84A71B8FDB3A5B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/L2TidzpStztfJgsBO6t96tJ8zhw.roa
Signing time: Tue 30 May 2023 13:13:24 +0000
ROA not before: Tue 30 May 2023 13:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:ca:b8:6b:a0:eb:7d:c6:2a:84:a7:1b:8f:db:3a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 30 13:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f64e2773a52b73b5f260b013bab7dead27cce1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:56:40:18:0c:96:df:ab:23:fa:6c:24:a8:12:
70:7d:24:e5:6b:4c:f2:73:76:07:ee:41:44:b1:74:
80:63:34:f4:29:82:b4:3c:31:db:0f:ed:8e:d0:18:
28:83:d8:59:32:2a:f0:2a:ea:62:7a:c6:71:b9:1f:
7a:e6:5c:c8:27:b5:88:55:82:b3:b9:4f:1b:bd:ff:
83:d8:e1:30:a0:14:43:3a:7e:8c:34:70:76:d4:0f:
68:f5:53:e8:26:78:61:17:2b:1e:2b:75:c1:2e:af:
d8:7c:3c:52:15:f4:a0:54:d9:71:fb:c3:9f:5d:c8:
ac:12:a6:7e:27:1b:87:ff:36:bb:a1:9b:e5:89:91:
fa:29:ad:7b:24:66:36:8d:68:46:97:9a:b5:e6:90:
1e:7e:e3:00:73:f5:59:2e:10:37:61:cd:80:59:2f:
e6:dd:7b:ab:94:ec:16:13:e2:33:42:7f:64:c9:dd:
8d:dc:0b:f8:56:63:6b:f0:5c:2d:d6:2b:fe:3a:a1:
1a:88:a1:67:d5:60:73:49:2e:75:72:59:1a:d8:81:
d3:6a:22:8b:66:dc:91:db:70:58:f4:5d:72:03:87:
77:c1:16:3f:0a:fc:cd:35:b0:31:a1:9e:57:d1:af:
08:2a:3f:9b:cf:d6:11:c3:b3:b3:e5:52:5a:15:c4:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:64:E2:77:3A:52:B7:3B:5F:26:0B:01:3B:AB:7D:EA:D2:7C:CE:1C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/L2TidzpStztfJgsBO6t96tJ8zhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.112.0/23
146.247.118.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8f:8f:af:05:95:6d:64:ef:07:27:91:25:3d:9d:90:14:74:
36:bb:e0:7f:3e:7e:d2:57:3e:9d:d4:c7:57:fe:9a:a8:10:05:
ad:bd:1b:20:95:d7:55:59:fb:38:1d:8d:de:12:2a:2a:5c:5f:
24:64:19:36:40:73:bd:11:8f:4e:82:22:f1:85:cd:bf:64:69:
7b:86:c9:75:2e:21:77:bc:55:73:86:73:36:ed:08:b1:95:a0:
de:78:1d:4c:10:e5:aa:aa:1a:4b:18:37:ad:60:05:e6:b0:ab:
d6:63:15:b6:86:ae:f0:70:eb:f1:b3:c3:ac:c5:27:66:58:07:
fe:34:43:29:1e:51:d3:1b:8c:d7:b0:6d:a2:6b:22:da:16:f4:
25:60:e8:61:36:65:8b:e7:6c:56:02:49:bc:da:27:0b:f0:fc:
85:53:19:ff:b9:cd:47:ef:54:9d:a0:a4:54:06:83:48:5c:98:
5d:aa:03:f7:0e:51:0d:29:3c:2f:9b:62:25:c8:b1:6c:a9:a0:
74:4f:26:4d:02:14:34:50:5d:b5:2e:97:1c:79:c6:dc:4b:5b:
81:83:4e:f1:ea:ce:3f:1e:55:87:4b:00:d5:e2:c2:c2:76:7e:
46:8d:f9:13:e2:53:62:80:69:c5:23:73:4e:24:be:e1:e0:c1:
c1:b0:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org