Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YQUYKYE0iLsE3zaTovky_BhgYKg.roa
File: YQUYKYE0iLsE3zaTovky_BhgYKg.roa (raw, json)
Hash identifier: 8QQiTkfe0excje0tYzyh5LGXL2DKNhgfpj2sGTfD0JQ=
Subject key identifier: 61:05:18:29:81:34:88:BB:04:DF:36:93:A2:F9:32:FC:18:60:60:A8
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01885872486AAD07B7E954FE482CCFB53DF2
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YQUYKYE0iLsE3zaTovky_BhgYKg.roa
Signing time: Fri 26 May 2023 14:24:24 +0000
ROA not before: Fri 26 May 2023 14:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:72:48:6a:ad:07:b7:e9:54:fe:48:2c:cf:b5:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 26 14:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61051829813488bb04df3693a2f932fc186060a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:a5:7d:39:55:3c:1d:27:79:03:2b:b7:d4:
f9:a2:0e:f1:c3:7e:c6:1a:e3:2d:d9:34:b2:48:e1:
2f:a7:f8:94:50:b8:6f:43:4d:4e:49:4c:3d:7f:c7:
44:f8:ff:d7:68:d6:9f:f9:3f:aa:bb:fb:4b:dc:5a:
dc:aa:0e:e9:e2:f8:9e:f8:57:9f:f8:73:9f:6a:68:
e2:ec:0a:ab:09:d3:7a:ef:52:1a:6e:ef:f7:b4:fe:
e2:dc:31:d7:09:20:68:5b:51:8b:a9:24:6b:b7:65:
c1:30:bd:c3:e1:9b:41:b9:d1:6a:bf:1c:2b:96:7f:
86:31:60:82:05:77:c6:16:ea:71:02:39:4c:f1:b4:
7f:8f:57:3e:21:3d:9b:f2:be:1a:4f:5f:20:de:1c:
d7:b5:0e:1e:f2:76:34:6b:e8:c0:f7:b9:ee:3f:62:
78:28:24:2b:9c:57:e9:72:c5:83:34:eb:54:09:bd:
cb:e8:e7:fc:a2:de:0f:1c:4f:b4:0c:13:aa:7c:cb:
cd:39:01:a1:7a:d0:44:92:32:6c:ad:ce:43:ad:3f:
54:cc:cb:9b:1d:c6:b4:7c:53:da:90:f6:e4:cd:45:
b5:e3:8f:24:8b:26:37:f8:27:ab:7c:b9:c4:56:a7:
20:41:4a:c4:8a:26:32:8f:2c:9a:bb:81:40:d2:4c:
f3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:05:18:29:81:34:88:BB:04:DF:36:93:A2:F9:32:FC:18:60:60:A8
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YQUYKYE0iLsE3zaTovky_BhgYKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/24
146.247.112.0/23
146.247.118.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:39:00:53:0a:d9:4c:ed:f8:93:ad:f7:cc:01:41:ae:ee:56:
ae:af:dd:b6:f2:a9:a2:68:d4:c4:40:5c:b1:c8:4b:4c:85:04:
c1:26:a1:81:cb:d6:98:bb:b9:77:29:a2:94:96:2f:e8:0c:ac:
ed:b4:c0:f7:4e:c8:fc:44:4c:37:ef:c4:bd:d1:25:74:ce:d4:
e1:0e:a1:c7:fa:68:50:9d:a9:6c:27:2f:70:08:41:04:01:7d:
87:75:00:8e:86:a2:50:1c:e8:77:e3:f2:22:a5:0c:c0:7b:bf:
3f:ce:6d:bb:7a:62:b2:f5:80:b5:ac:e4:4d:3d:ad:b5:29:5d:
26:7f:d6:23:09:36:1d:c1:f0:7f:06:74:d1:4e:57:bb:fe:6b:
71:4a:8c:98:03:33:5c:b2:bd:45:94:1f:34:79:d3:ac:b9:5e:
3d:23:fd:b6:04:df:79:a0:97:bf:97:c6:9d:a4:4e:b5:96:f3:
c8:b7:85:79:f3:3a:93:24:e1:a5:4c:5a:0a:56:a6:f5:21:ba:
aa:10:87:49:85:8e:c3:25:d0:52:c5:30:97:7a:48:ea:7f:1e:
5c:db:81:8f:49:b5:17:cf:a5:1b:86:87:27:d1:1f:a1:1b:b0:
12:a8:a4:20:c7:d2:a2:f1:4f:21:fe:cc:13:a3:28:c1:8b:f4:
96:95:1d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org