Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SaQrLgFE-gn5pekoMNPjo4_QLu4.roa
File: SaQrLgFE-gn5pekoMNPjo4_QLu4.roa (raw, json)
Hash identifier: obEKtOZGE8w0tFKCzwyBWakOQFexUW44jNm6zETeqyw=
Subject key identifier: 49:A4:2B:2E:01:44:FA:09:F9:A5:E9:28:30:D3:E3:A3:8F:D0:2E:EE
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01873CE46AF9D7E1FE5718D2EAAC2401F02A
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SaQrLgFE-gn5pekoMNPjo4_QLu4.roa
Signing time: Sat 01 Apr 2023 12:56:54 +0000
ROA not before: Sat 01 Apr 2023 12:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 21:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:e4:6a:f9:d7:e1:fe:57:18:d2:ea:ac:24:01:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 1 12:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49a42b2e0144fa09f9a5e92830d3e3a38fd02eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:32:db:5f:d8:9d:fb:99:17:f7:47:03:16:
06:8d:16:38:25:7c:6c:c2:1d:54:ba:be:bb:72:01:
35:9a:6c:10:f8:be:ab:58:4c:bd:b4:af:db:c7:d7:
18:25:1d:5b:b9:6f:b6:e3:aa:c4:5c:1d:43:9f:fb:
6c:62:b2:77:e9:f1:4a:34:cd:cd:05:b9:d7:e2:51:
6c:5b:fe:7a:53:55:55:b1:98:18:84:e6:4f:04:d3:
84:b3:82:c4:53:28:9e:66:a4:0f:dc:43:ac:03:a9:
28:e5:64:1b:06:48:70:71:c9:37:8c:3e:d5:62:8d:
5a:e7:c5:2d:b5:48:ab:31:8d:e4:bd:8b:4a:e7:c7:
cc:fe:77:89:35:07:e3:1b:9e:86:2e:f0:72:33:fd:
a7:c5:c5:4d:2f:ec:e2:ba:e7:9f:14:02:6c:c6:6f:
1b:14:36:77:a0:af:74:eb:39:84:ca:40:37:21:c3:
ed:09:ae:0b:32:0c:8a:32:bf:24:0e:f2:d8:91:e1:
a4:41:2c:ba:3e:0a:c4:cf:41:59:3b:42:f9:44:e4:
2b:65:0c:b9:32:d1:fc:cd:6e:b1:5e:f7:69:6a:57:
8a:b7:8c:d7:f1:e4:16:c0:3d:f5:39:1e:c4:dd:7a:
f4:8e:ad:0d:ab:b1:c9:28:b7:0b:4c:1c:91:2d:f0:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:2B:2E:01:44:FA:09:F9:A5:E9:28:30:D3:E3:A3:8F:D0:2E:EE
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SaQrLgFE-gn5pekoMNPjo4_QLu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.120.0/24
Signature Algorithm: sha256WithRSAEncryption
19:57:72:b2:29:81:e8:fe:da:dc:aa:73:f1:d1:25:05:c5:79:
84:7f:22:bd:f2:f8:6d:df:76:67:a7:45:05:ab:f3:51:65:ed:
9a:af:26:b8:3d:a0:82:87:c6:2d:61:40:33:c5:52:d2:c7:71:
4b:60:17:bb:f0:50:ea:ab:72:11:ff:b4:42:a9:b6:9b:3b:7c:
26:6b:f3:db:94:43:e4:8b:65:61:19:7c:d8:ed:3f:ef:2a:cf:
8a:24:e2:4b:c5:9e:85:ac:c1:14:e7:7c:ea:44:71:b2:25:56:
ca:ba:ea:c2:08:95:95:55:d8:0a:e0:76:2e:3d:a0:55:25:8e:
ab:63:16:30:f4:52:41:32:c5:52:9a:73:7b:cd:77:7a:ee:fc:
a6:59:b0:54:55:d4:1b:ce:4e:8e:6c:bf:c9:02:4d:51:b3:09:
c0:50:7e:a5:8e:87:b1:64:c4:9d:09:33:a7:09:e5:f7:d8:0a:
69:d6:a3:f0:0f:38:80:cb:03:cc:2d:2f:41:2f:91:51:9c:1c:
68:27:dd:0f:70:6b:4e:78:11:cf:58:75:9a:ee:09:1e:df:ad:
46:78:b0:a8:de:33:b1:2b:97:88:ae:44:c3:2b:b2:6c:a6:b5:
9f:ca:5f:6e:43:7f:61:2f:a2:83:5c:22:29:ea:50:8f:6f:d9:
26:11:55:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org