Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/VYXfz_r54wV8R4PjdPhwdTvjUfE.roa
File: VYXfz_r54wV8R4PjdPhwdTvjUfE.roa (raw, json)
Hash identifier: Sk42ooelv4RFjQJUbTa9nm8Yc4I5kTieKbNfmGMDQPk=
Subject key identifier: 55:85:DF:CF:FA:F9:E3:05:7C:47:83:E3:74:F8:70:75:3B:E3:51:F1
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018B04E870EBE98F38B88DF3EA6F22344B11
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/VYXfz_r54wV8R4PjdPhwdTvjUfE.roa
Signing time: Fri 06 Oct 2023 12:13:43 +0000
ROA not before: Fri 06 Oct 2023 12:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.106.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:e8:70:eb:e9:8f:38:b8:8d:f3:ea:6f:22:34:4b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 6 12:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5585dfcffaf9e3057c4783e374f870753be351f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:ca:5b:5e:58:97:b4:3a:d4:a1:6a:f0:1b:
37:3b:fe:16:3c:84:e6:3e:34:84:29:c2:01:9d:5b:
f3:e8:03:77:bf:fe:3c:7b:8e:42:f8:cd:72:f3:a7:
bc:a0:74:3d:02:f2:51:56:66:b9:92:98:87:5b:e4:
03:7e:e5:f5:27:44:1c:85:7b:7d:8b:76:3d:0f:35:
2d:c8:5c:a3:5b:67:1a:45:59:6b:32:de:b5:0b:aa:
5f:47:48:a1:df:99:ef:db:1d:5a:41:4c:35:93:07:
58:56:a4:58:3b:58:5d:ac:00:91:7a:00:18:32:e1:
95:a4:4b:6c:8a:e5:84:a2:64:01:40:fb:a3:31:ca:
08:b5:ae:96:6d:e3:5b:e8:38:97:52:89:39:52:f1:
3e:66:9e:d7:bd:41:b2:41:c2:13:8f:3e:fc:2d:02:
30:8f:6f:90:19:18:bc:9e:32:ab:e7:3a:15:ff:92:
73:c1:3c:fa:f9:b0:50:39:60:4e:5f:4d:2e:13:a9:
fa:0b:48:a8:74:02:80:11:74:82:c1:0e:fd:9e:f3:
85:13:e6:2e:94:88:a3:05:ef:2a:6a:8b:01:a7:1b:
74:11:54:24:52:d7:b6:d6:48:c6:59:c5:58:e1:90:
08:a1:c0:37:b8:61:c7:70:96:0b:f3:c2:5b:5e:7f:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:DF:CF:FA:F9:E3:05:7C:47:83:E3:74:F8:70:75:3B:E3:51:F1
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/VYXfz_r54wV8R4PjdPhwdTvjUfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0-146.247.108.255
146.247.111.0-146.247.120.255
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
90:00:76:92:e2:e6:c4:66:78:3c:b5:e4:6e:f3:ea:7e:d7:10:
61:c8:4d:31:ad:d4:e9:62:b2:c4:ec:cb:cb:4e:8c:94:f6:95:
3f:e9:36:f3:70:b6:23:ee:98:75:c0:74:6f:03:ee:45:d1:3d:
2f:ac:61:ad:b0:b0:63:ea:bc:58:c9:f4:3b:2f:62:fc:3c:41:
51:29:70:b1:e6:f7:f9:4a:c4:66:3b:47:5c:ef:56:c7:71:ad:
42:a0:e1:37:8e:41:71:7b:24:21:ec:e9:f8:86:24:fd:bb:f1:
8a:b3:c6:5a:fb:e2:03:83:2d:85:21:83:91:e9:f1:81:60:1e:
5d:49:b4:e1:6e:38:46:0c:49:fe:80:6e:08:09:17:d4:80:cd:
54:be:10:88:04:b0:c8:33:d1:81:a2:01:3d:e7:56:90:71:0d:
bb:b1:4e:1d:36:cc:e8:9f:75:c1:e8:72:1d:16:d0:23:e6:b4:
a8:af:10:b9:2a:78:0e:1a:c1:43:7c:87:a2:9d:37:a6:6f:13:
1a:2e:03:58:fa:89:7e:89:47:d2:07:98:cd:03:d0:89:81:3b:
56:72:83:47:5a:7e:4e:93:4c:c7:30:46:8f:a9:8d:0c:5f:4d:
a1:af:7f:66:1a:4d:30:c1:e8:4b:9a:de:8c:d1:c1:e5:34:42:
a7:05:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 15:57:45 2023 by rpki-client on console-fra.rpki-client.org