Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Slo1RQfv0RDYpURpmNWXPTZ1Arw.roa
File: Slo1RQfv0RDYpURpmNWXPTZ1Arw.roa (raw, json)
Hash identifier: /dPbuTp/WRP9oRYy7XtK7eSyIZsxhDGCOaTeoEnU30E=
Subject key identifier: 4A:5A:35:45:07:EF:D1:10:D8:A5:44:69:98:D5:97:3D:36:75:02:BC
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0189AC4EB609F8E574894E9868837230D9A7
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Slo1RQfv0RDYpURpmNWXPTZ1Arw.roa
Signing time: Mon 31 Jul 2023 14:16:26 +0000
ROA not before: Mon 31 Jul 2023 14:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:4e:b6:09:f8:e5:74:89:4e:98:68:83:72:30:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jul 31 14:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5a354507efd110d8a5446998d5973d367502bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:54:20:ef:6f:9c:cc:0b:4e:e1:e9:af:8f:
35:62:a7:3b:6a:3e:f3:c9:e8:f2:a9:8f:2e:43:34:
c2:e5:2f:1b:82:f2:32:d4:25:87:08:9b:90:f5:9f:
44:66:e5:68:2c:28:90:07:7f:0a:84:06:32:dc:d8:
a2:c3:de:8f:c0:77:f3:34:26:3f:bb:a1:56:ec:39:
67:94:4d:c3:a7:f1:3b:da:29:e6:94:1c:64:7d:22:
53:4b:2b:d9:c0:83:b6:01:52:37:06:37:1c:fd:19:
af:ce:39:75:cb:a6:5d:ce:00:dc:7f:eb:08:f6:3d:
a7:ee:3c:4f:d0:2e:f3:2b:93:5e:41:77:8f:c9:8e:
eb:08:e9:5b:b7:76:e8:12:fa:1e:32:7f:46:a0:2d:
73:d9:b4:a8:b0:5b:88:8c:13:02:cf:24:f7:cc:f6:
9b:45:87:8b:1f:04:e4:e0:39:a1:d6:58:89:a7:33:
c0:30:b5:7b:08:c3:77:51:69:41:c1:4a:ec:bd:cf:
77:7e:6b:f4:e3:87:6d:ed:99:dc:d2:c3:c3:a8:4d:
62:3f:ad:c2:2c:a5:05:b1:bf:ea:46:e4:16:14:50:
44:bd:82:bd:e3:78:53:d6:65:7f:96:f2:3a:a4:15:
76:68:d3:46:a0:e4:ae:43:7d:f8:e9:b4:db:f5:02:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:35:45:07:EF:D1:10:D8:A5:44:69:98:D5:97:3D:36:75:02:BC
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/Slo1RQfv0RDYpURpmNWXPTZ1Arw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.111.0-146.247.115.255
146.247.118.0/23
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
48:09:fe:cd:2d:af:45:fb:6a:ae:a1:48:30:5c:a9:2e:fd:40:
7f:e8:8a:0a:34:ec:78:77:36:8e:24:a9:7e:c7:e7:c4:7a:8a:
95:07:d1:76:c4:b7:fc:96:16:ec:ed:41:01:a1:56:3d:e8:cb:
8c:b9:e0:ff:d1:c8:1c:68:22:85:76:0b:bd:c0:cd:da:bf:e4:
c6:df:e1:76:a6:46:c9:0f:c5:d5:e3:13:28:65:d5:21:17:69:
b7:50:87:54:c3:9b:ae:ff:94:4a:f6:70:b5:a1:49:23:e4:ba:
a4:5d:65:ee:45:b9:fe:da:11:28:2b:86:3b:73:db:bf:ec:10:
ff:01:23:99:5f:60:80:d7:53:71:a7:eb:35:4f:37:b2:1b:3b:
b2:ab:93:8d:bd:85:f3:56:b1:87:7c:f5:08:83:da:ab:80:c9:
07:72:2e:3f:60:de:84:e7:85:8f:8d:a5:88:93:87:59:97:31:
e7:59:ac:55:27:59:d9:75:af:f8:a2:04:73:b7:eb:e6:bc:de:
a6:90:c0:b0:30:b5:25:2d:57:87:bd:41:07:fc:6f:28:33:c1:
69:23:0f:48:d3:2a:9d:67:f0:b7:fd:b8:cd:01:5e:f9:ee:50:
56:a0:8a:33:6a:f5:dc:59:90:be:28:d5:a1:85:33:30:93:c9:
ac:ff:45:7d
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 21 12:30:52 2023 by rpki-client on console-ams.rpki-client.org