Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NUQWEuDzPJJ-28b_g7qKRnyWt14.roa
File: NUQWEuDzPJJ-28b_g7qKRnyWt14.roa (raw, json)
Hash identifier: ghJdcs7NxYvx1uIsrln11TGR4l0EcdVjNgQuSQyjya0=
Subject key identifier: 35:44:16:12:E0:F3:3C:92:7E:DB:C6:FF:83:BA:8A:46:7C:96:B7:5E
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01872DFA468C8E4F329DD6143EE913ADF406
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NUQWEuDzPJJ-28b_g7qKRnyWt14.roa
Signing time: Wed 29 Mar 2023 15:26:29 +0000
ROA not before: Wed 29 Mar 2023 15:26:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 146.247.101.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:fa:46:8c:8e:4f:32:9d:d6:14:3e:e9:13:ad:f4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 29 15:26:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35441612e0f33c927edbc6ff83ba8a467c96b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:c5:3e:18:13:ea:cb:f8:26:ba:d2:38:bc:
1b:15:ce:4c:8c:b8:ef:55:80:e9:a0:bd:61:f4:86:
ed:6b:bf:b3:8f:f3:85:71:6a:82:96:78:dc:96:3f:
dc:72:b1:b7:4b:9f:5b:82:54:87:53:fd:dc:0c:44:
b0:90:ea:23:aa:99:c9:4a:90:4b:6e:f8:14:c8:ef:
e4:9f:19:70:59:9f:8d:2b:43:19:11:7f:e5:1d:e8:
b0:d9:9f:d8:e6:ad:b1:89:35:d6:42:d5:25:3b:c8:
dd:4f:56:ab:6c:c6:38:bf:db:a8:d7:39:84:40:b7:
e4:a8:25:ab:09:f5:68:3d:29:54:82:ba:17:a8:ac:
30:de:15:f7:ae:17:ff:0c:4f:03:46:26:9b:79:dc:
21:c2:6c:50:83:06:af:38:f8:e6:37:8c:cd:16:f6:
80:ac:3b:d0:11:ea:93:3d:fe:67:dc:e8:00:fb:a3:
64:85:44:e1:7c:32:48:57:0d:e4:f5:38:b9:3e:5d:
3c:3a:b0:1f:18:4d:a2:76:d5:68:9a:32:8f:41:33:
94:03:eb:cc:da:f5:3b:86:de:39:d9:a6:2f:00:64:
ad:4c:b4:1c:8e:fd:c6:64:38:d1:0e:a9:a5:26:9f:
03:5d:5d:20:1d:cd:b2:0d:86:1b:29:19:13:1b:4d:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:44:16:12:E0:F3:3C:92:7E:DB:C6:FF:83:BA:8A:46:7C:96:B7:5E
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/NUQWEuDzPJJ-28b_g7qKRnyWt14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c8:9c:4c:09:49:1e:35:00:f4:cd:a1:3d:35:d7:f6:a5:8d:
10:a5:fa:97:c2:83:14:b4:00:22:a6:fb:85:41:8d:d1:02:6c:
0f:94:f9:83:9c:4b:8d:bb:8c:eb:48:86:69:57:42:f3:88:8b:
b2:5d:63:3a:37:5c:14:84:46:c0:ae:92:0f:bf:47:fb:83:e4:
d5:46:63:58:a4:76:1b:19:5b:5e:0d:2e:66:d3:8b:de:c6:0b:
26:83:2b:96:ea:94:34:8e:e0:22:13:88:89:b9:f0:c4:65:6a:
d3:62:d8:93:01:b4:f9:b4:d2:cd:62:48:f7:8b:ec:e1:d2:43:
ff:4d:61:5f:bb:4c:36:43:34:2f:15:e1:60:35:83:f5:5f:c9:
71:e6:f9:ad:79:9a:bf:61:8f:88:91:96:95:91:89:4a:89:1b:
c7:69:8a:58:b4:9f:d3:60:3d:2b:c2:b9:d9:33:b8:2c:52:68:
dc:56:2b:a4:6c:bd:54:82:ab:5e:90:89:8d:ae:45:cf:40:12:
88:26:f4:f7:07:30:43:77:ab:b2:fe:72:18:91:fd:7c:0e:12:
67:b9:8f:7f:2c:18:6e:11:d5:67:95:0f:7a:04:08:cd:26:cc:
43:8b:c5:b1:3b:5a:5a:c9:e4:49:f1:00:6e:b0:ec:49:d5:12:
3c:8c:58:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org