Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PrIYSkVoH-sGMV_nDtAhKRNHYuE.roa
File: PrIYSkVoH-sGMV_nDtAhKRNHYuE.roa (raw, json)
Hash identifier: VxVdZTvJclcgOIVqzcU5K2bsuDx+jYxDUE9pCz8Z3A8=
Subject key identifier: 3E:B2:18:4A:45:68:1F:EB:06:31:5F:E7:0E:D0:21:29:13:47:62:E1
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018596A11D3DDA17F04D86F10632897D3FAD
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PrIYSkVoH-sGMV_nDtAhKRNHYuE.roa
Signing time: Mon 09 Jan 2023 13:03:39 +0000
ROA not before: Mon 09 Jan 2023 13:03:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 146.247.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:a1:1d:3d:da:17:f0:4d:86:f1:06:32:89:7d:3f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 9 13:03:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3eb2184a45681feb06315fe70ed02129134762e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:76:0d:3f:d2:f8:66:62:62:47:41:d3:ae:
ea:97:9d:72:d0:d4:68:a4:b0:9e:79:b8:48:7e:6b:
53:de:3e:c1:d1:33:be:69:bf:e4:c6:81:ba:69:10:
18:dc:5a:7e:ec:30:48:f0:19:54:36:fa:81:6c:8b:
aa:64:5d:7b:40:ee:8b:5b:26:41:9f:c3:56:cc:7b:
40:75:26:f7:0c:ec:1b:da:d2:20:45:45:05:7e:70:
b5:4c:9c:57:ad:f8:86:19:83:77:47:03:70:03:9e:
83:9d:ca:55:f0:3d:ef:67:b7:4e:3d:a0:88:1c:e3:
ab:e7:9e:0c:e9:dd:ec:f3:29:48:3f:86:c8:24:c4:
6b:56:24:e8:8b:c9:e0:ea:c3:7b:53:7e:1b:ae:e3:
68:f6:03:f7:73:39:15:40:fc:6c:1f:8e:5e:43:91:
b4:7b:72:eb:f7:78:96:2d:36:77:d9:aa:da:4e:ca:
88:86:4e:7d:f7:a5:a2:ee:12:ff:01:03:f6:ef:ca:
15:1a:27:90:b0:00:59:57:53:3b:ee:19:dd:c9:50:
77:eb:d4:b6:a9:d4:b5:72:85:fa:6c:77:57:de:95:
59:5e:2c:32:dc:77:44:96:35:39:fa:fa:29:ea:49:
1c:93:db:38:5a:16:1b:5a:1c:3f:a1:4d:5d:54:ed:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:18:4A:45:68:1F:EB:06:31:5F:E7:0E:D0:21:29:13:47:62:E1
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/PrIYSkVoH-sGMV_nDtAhKRNHYuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.110.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3f:cb:ed:c9:07:ac:30:b9:8a:ca:3b:05:91:f8:f4:f4:71:
04:ad:49:35:08:31:ad:4c:cb:fb:51:ab:41:f4:38:cf:d9:de:
69:ed:fe:61:1b:6a:04:6f:ff:c5:f2:48:20:78:98:fe:c3:f8:
7d:d5:f1:01:33:f7:c8:92:a7:74:35:c9:36:b6:c1:a5:c5:d0:
dc:a3:a7:86:d8:fd:62:2b:d7:3d:77:bc:ac:16:91:73:0c:85:
bb:e5:2f:35:2b:5c:b1:1a:25:18:ae:37:30:e1:85:06:8f:87:
46:31:58:8a:8a:29:7b:10:d1:4a:3d:fe:51:2d:6b:f0:28:25:
a4:e1:b6:62:86:28:79:f7:b8:5b:81:e4:b6:c7:99:9d:ef:a3:
a4:d5:3b:70:36:1e:18:04:4d:0a:1d:38:e9:af:9c:ca:a2:19:
87:d6:b2:2c:83:fd:be:08:66:55:d9:0d:61:a6:b9:80:af:78:
75:58:76:a0:88:04:d4:fe:a4:ce:60:95:f1:37:41:3f:4f:9a:
3a:7c:7a:04:e1:46:35:cb:c2:17:da:1b:fd:f3:4b:22:1a:1d:
63:10:6a:d5:0b:5c:df:65:b5:43:55:a9:fe:64:a0:3b:48:52:
5a:9f:46:f1:10:c0:a5:ad:dc:de:01:6d:28:cf:97:c5:24:25:
e0:c7:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:49 2024 by rpki-client on console-fra.rpki-client.org