Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/R7WloV15wIJT-Xzld-6mgUbAZPc.roa
File: R7WloV15wIJT-Xzld-6mgUbAZPc.roa (raw, json)
Hash identifier: SldOtTrhaU5wUzwBjRhlUaAubbcnqUfFQWFOM/qZ2Tg=
Subject key identifier: 47:B5:A5:A1:5D:79:C0:82:53:F9:7C:E5:77:EE:A6:81:46:C0:64:F7
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0186E60A693057655D8F341E0EC96BB067C5
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/R7WloV15wIJT-Xzld-6mgUbAZPc.roa
Signing time: Wed 15 Mar 2023 16:11:27 +0000
ROA not before: Wed 15 Mar 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 146.247.116.0/24 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 12:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:0a:69:30:57:65:5d:8f:34:1e:0e:c9:6b:b0:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 15 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47b5a5a15d79c08253f97ce577eea68146c064f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:d1:af:93:bc:e2:4f:be:7c:88:6d:82:b4:
9d:8a:7f:c5:f2:ce:82:11:18:f1:fc:07:4c:4d:8f:
d2:55:50:0e:9a:3d:06:7d:3a:c3:d3:a0:d2:77:81:
c4:dd:ef:c6:60:30:74:31:f1:27:20:40:0a:27:a5:
2c:01:78:1e:20:d4:c2:44:cb:2c:d0:9a:6e:c8:93:
b6:88:75:09:69:30:3e:e7:1b:b1:f5:f9:10:ab:24:
cc:40:b3:9f:f4:96:fe:e8:5f:67:ce:23:a1:4f:99:
db:8a:db:3f:8e:3c:bd:46:62:78:0e:ed:20:ec:2d:
1a:dc:27:2e:ce:aa:e2:86:35:06:84:57:d2:28:c6:
da:4f:93:6b:a0:01:09:a0:9f:55:8f:4c:e3:c4:e9:
7e:09:75:92:63:81:b8:c0:82:7f:61:f7:8d:e4:e7:
3b:ff:34:7b:b3:e2:41:02:b3:e7:8d:91:01:51:2b:
e1:0b:a8:2c:2c:21:c0:1c:8c:e4:f6:31:82:1f:90:
44:96:c6:42:a3:07:6d:e2:ea:04:67:b0:99:a1:1e:
f3:4c:22:f1:93:1e:25:e8:62:df:34:17:45:a1:34:
b4:04:86:4a:21:e7:e5:d0:65:69:b5:45:49:e3:2c:
dc:ad:b4:6f:12:20:26:3e:5b:ba:f0:70:dc:27:64:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B5:A5:A1:5D:79:C0:82:53:F9:7C:E5:77:EE:A6:81:46:C0:64:F7
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/R7WloV15wIJT-Xzld-6mgUbAZPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.116.0/24
146.247.118.0/23
Signature Algorithm: sha256WithRSAEncryption
73:97:b3:e1:2e:ec:4c:a6:7e:86:9f:b3:91:66:cd:1f:92:e2:
92:a5:23:39:47:fe:1a:5f:e7:11:8e:da:e9:dd:8e:3a:38:72:
98:36:83:a3:c9:67:d1:8b:61:a7:28:93:8d:95:fe:66:8b:4e:
2f:7f:e2:07:c8:e0:1b:41:18:2d:8a:a9:76:54:0e:2e:33:1c:
22:89:11:22:d2:0c:93:dc:fe:96:36:9a:43:24:d6:bc:f4:53:
af:06:8a:67:bd:8d:8d:bd:92:3f:69:2c:95:aa:fc:14:19:d9:
8b:87:05:21:b0:dd:db:e9:7e:70:c6:51:46:2a:99:26:99:90:
05:99:b0:b9:4a:78:0f:3c:2f:52:dc:86:56:c0:53:c1:06:99:
55:60:ad:9b:c6:1d:fc:ca:b5:fd:04:2f:39:05:fe:17:6f:3f:
34:13:1a:75:2e:cb:d3:72:69:b4:ba:1e:68:df:2f:27:b3:ca:
5f:d6:d6:78:90:47:2a:62:f0:a1:30:96:db:7b:7e:7b:b8:21:
8c:2a:51:08:7d:7b:55:6b:d2:a5:03:e5:cb:de:e5:c8:c2:1a:
d2:e5:1d:4a:66:5f:cd:c3:8f:61:a4:05:61:73:d8:66:1c:3d:
b5:40:3e:b1:09:88:bc:fe:18:f4:7c:9a:06:6b:db:59:0d:c9:
5e:4e:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org