Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_EL-I8Gy_rOS13UetL4Avk1tZjs.roa
File: _EL-I8Gy_rOS13UetL4Avk1tZjs.roa (raw, json)
Hash identifier: GWCUoi/5bpsTN697aYhfqzYrnRmlFLDQy4FtzLw8l60=
Subject key identifier: FC:42:FE:23:C1:B2:FE:B3:92:D7:75:1E:B4:BE:00:BE:4D:6D:66:3B
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018710CE9436992621131828BA0144A81155
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_EL-I8Gy_rOS13UetL4Avk1tZjs.roa
Signing time: Thu 23 Mar 2023 23:29:46 +0000
ROA not before: Thu 23 Mar 2023 23:29:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:ce:94:36:99:26:21:13:18:28:ba:01:44:a8:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Mar 23 23:29:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc42fe23c1b2feb392d7751eb4be00be4d6d663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:f6:5f:0e:37:24:80:ad:22:18:dc:af:0d:
f8:d4:8b:c3:0d:0c:79:44:27:2b:85:b3:1e:18:fe:
4f:b9:cb:bd:33:c5:3d:c8:9e:3e:bb:19:4f:94:23:
8d:c0:e1:fe:63:b3:5c:45:5c:72:86:3d:a9:08:8d:
41:7c:19:04:30:43:43:39:36:88:d9:87:39:e3:94:
c5:a1:c0:ac:82:81:82:c0:46:28:8b:34:5c:9d:c5:
b8:ec:b3:3c:bc:dc:d8:c8:22:e4:1e:21:af:f8:94:
8d:47:24:33:31:19:6a:4f:d1:9c:28:a1:45:29:70:
2b:41:48:16:f8:a3:b7:d7:32:cc:5e:7e:2e:60:bc:
c5:16:70:b7:56:48:7f:fc:4b:3d:eb:02:8a:21:ac:
fc:b9:1d:f5:37:74:23:b8:7c:b0:ac:78:4a:a1:62:
58:b5:e1:05:bb:06:f1:c0:5c:53:9f:5b:d4:e2:04:
90:d4:ee:1f:9b:c9:f0:66:15:08:7f:e1:06:c3:7c:
a0:77:9c:c9:32:81:24:26:40:f4:f2:c2:25:23:7f:
49:a1:56:45:e0:b5:63:02:a1:ae:cf:25:b1:23:ce:
7c:c7:a1:fd:c0:82:1b:b4:f0:ff:3e:b5:95:ae:90:
94:f6:f7:ba:0b:22:21:03:b8:e0:f2:c4:d3:3e:e7:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:FE:23:C1:B2:FE:B3:92:D7:75:1E:B4:BE:00:BE:4D:6D:66:3B
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/_EL-I8Gy_rOS13UetL4Avk1tZjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.108.0/24
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:b7:05:84:81:45:83:c5:3b:dd:4c:e5:ae:48:85:51:c2:cf:
94:71:76:59:33:d9:08:88:01:d8:fc:3d:75:96:8a:4b:5f:31:
1c:80:a4:97:2e:10:58:67:c1:51:6c:d7:74:76:68:3e:b9:b2:
04:fd:cf:b0:57:b7:0c:1f:46:e3:e2:c3:05:dd:43:c1:a7:ae:
ad:f3:15:c2:e5:21:d8:b7:b4:55:57:cb:6b:b2:83:ee:63:0d:
36:d4:9f:b0:a1:5c:a3:da:a2:30:a1:68:68:26:b9:b9:73:ae:
a2:8c:cc:9e:51:05:34:46:0c:ac:c0:d4:ca:06:02:a4:36:54:
d7:98:3d:39:b5:a4:47:e1:51:3f:ff:05:f5:9d:bf:bc:0b:b4:
2d:aa:02:dd:a0:49:2c:cc:fb:d8:eb:fc:8c:b9:31:7c:d2:99:
1e:f8:c7:8f:1d:fd:9e:02:57:d0:5b:97:f8:fc:1d:4e:8e:eb:
86:35:06:6a:2b:5c:fb:39:b0:6b:99:9a:c2:5f:6e:f5:a7:9a:
c5:5e:5a:1e:06:8b:ba:aa:d1:7f:2b:c2:11:dc:9f:03:b3:7d:
96:14:4b:86:1c:3d:88:9b:96:d2:a2:54:71:09:00:31:6d:06:
65:0b:8b:e3:e0:dd:cb:16:33:06:d9:29:a5:7b:ec:13:fd:c7:
19:69:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org