Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PcbuPX7mCZ6HsHoFGaXkX7FFsuA.roa
File: PcbuPX7mCZ6HsHoFGaXkX7FFsuA.roa (raw, json)
Hash identifier: 37sx8XiOsvYK0kmbxeJmLwpTf57EnwQYPUlX7G4J45c=
Subject key identifier: 3D:C6:EE:3D:7E:E6:09:9E:87:B0:7A:05:19:A5:E4:5F:B1:45:B2:E0
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01897D6DFF2440DB6E7E203D4254033A5034
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PcbuPX7mCZ6HsHoFGaXkX7FFsuA.roa
Signing time: Sat 22 Jul 2023 11:48:27 +0000
ROA not before: Sat 22 Jul 2023 11:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7d:6d:ff:24:40:db:6e:7e:20:3d:42:54:03:3a:50:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jul 22 11:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc6ee3d7ee6099e87b07a0519a5e45fb145b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:7d:6d:f2:45:d5:13:66:2d:44:f2:7a:86:
a3:96:70:49:92:04:61:47:1d:3f:96:55:58:31:7e:
9a:fd:51:89:3e:9b:9f:9b:55:f5:1a:e1:c5:4b:86:
a2:e6:75:fe:a7:de:bf:05:27:3b:82:30:1e:a4:83:
ca:5a:2d:a9:c0:8b:fd:26:08:0c:84:5d:d1:60:b5:
09:9c:e2:b3:4c:e9:9f:22:21:ef:1f:08:18:0b:d8:
19:44:0b:bf:4c:88:ab:82:2a:76:82:51:d6:98:11:
17:f6:65:e3:25:05:8c:06:86:f1:55:1b:fd:07:4d:
d2:07:be:29:f6:03:ae:84:51:9a:e0:20:c8:a8:e6:
7e:fa:db:03:ee:16:63:e3:b2:82:03:53:4b:4f:f6:
b8:c2:b0:29:78:34:c7:93:0e:b0:62:63:7c:05:2a:
14:5a:54:84:15:a3:73:ec:7e:f3:95:d9:94:c8:a0:
03:59:52:80:e8:8a:e0:c4:8a:f2:cf:8d:6c:61:80:
91:7e:ad:25:3c:14:15:37:65:fe:8e:8b:5d:f2:31:
86:8d:c3:8c:ef:99:c4:d9:df:38:e3:b6:a7:6d:23:
61:b7:1a:46:ef:2b:09:75:1e:96:d6:2c:61:ce:17:
15:7f:05:fe:93:05:c1:01:64:5b:e0:3e:69:ef:a0:
1b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C6:EE:3D:7E:E6:09:9E:87:B0:7A:05:19:A5:E4:5F:B1:45:B2:E0
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PcbuPX7mCZ6HsHoFGaXkX7FFsuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.112.0/23
146.247.118.0/23
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c4:49:7b:a7:db:25:ed:15:46:06:e0:66:36:8a:3b:71:4f:
d9:ed:3a:36:36:29:99:ec:51:5a:c7:9d:ca:ef:b8:b1:12:c0:
cf:c1:26:04:36:4c:8a:9e:30:fe:cf:ac:57:79:71:b9:c4:c9:
f9:03:e0:91:69:ac:47:84:3a:4c:9c:b6:75:5e:40:5b:26:30:
45:83:98:6f:98:50:af:31:a1:db:0f:11:e3:6d:42:b1:a4:cf:
9d:bf:02:c7:48:9c:63:59:b1:b8:96:98:32:68:22:4a:c1:b3:
e0:88:54:a7:ad:8d:70:b9:3c:2a:17:f4:35:a5:02:a7:b2:b5:
ba:f5:1c:55:f3:c4:04:47:11:b0:5a:17:06:d0:bd:ff:13:a4:
d6:6b:dc:c4:b8:c3:aa:7d:8a:49:a4:9d:c2:b3:d4:e0:8c:35:
b1:13:30:46:8d:44:11:63:73:b5:7f:f4:e6:6f:db:e1:84:5d:
27:7d:5a:24:c2:f7:4f:1f:9f:ea:90:51:4f:29:0d:6d:fe:76:
ee:4e:0d:55:bd:81:d2:a2:a9:86:21:c5:c1:11:fe:19:ac:1e:
1b:22:81:18:0b:c2:ea:6d:51:ab:09:4f:47:38:68:92:fe:0a:
4c:5e:28:75:ff:a1:a1:cc:94:70:57:30:e3:5b:e2:bd:64:ae:
2b:4c:88:6e
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 31 14:53:39 2023 by rpki-client on console-fra.rpki-client.org