Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/b7y6Sc3ipuT53P_yyz2KH2_z3bQ.roa
File: b7y6Sc3ipuT53P_yyz2KH2_z3bQ.roa (raw, json)
Hash identifier: BQt8amIiTipwGY1LZi5xuLLovUxVdALE9YRFvd/Sgmw=
Subject key identifier: 6F:BC:BA:49:CD:E2:A6:E4:F9:DC:FF:F2:CB:3D:8A:1F:6F:F3:DD:B4
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018C413A15CEE6307D4955438D7B20056979
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/b7y6Sc3ipuT53P_yyz2KH2_z3bQ.roa
Signing time: Wed 06 Dec 2023 22:22:54 +0000
ROA not before: Wed 06 Dec 2023 22:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.247.105.0/24 maxlen: 24
146.247.124.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:3a:15:ce:e6:30:7d:49:55:43:8d:7b:20:05:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Dec 6 22:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fbcba49cde2a6e4f9dcfff2cb3d8a1f6ff3ddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:fd:e5:d0:15:34:83:26:69:67:58:37:6b:
b4:1a:47:fa:dd:80:38:99:1a:da:75:ad:9e:9d:83:
61:03:b8:13:e1:23:3e:df:68:96:f7:60:44:31:22:
b0:c6:67:15:b7:75:e4:de:ab:7c:ba:d3:1f:f1:71:
be:f2:44:a1:f6:9f:e3:a1:16:90:41:f5:64:dd:7c:
c5:a2:0f:bb:23:ae:ff:2e:bf:12:09:df:cc:dd:70:
e6:9e:e4:04:57:86:3d:0f:44:be:21:cb:9c:27:e4:
ce:3f:9d:61:63:31:ad:2b:33:46:6b:41:ec:bf:42:
5f:52:49:84:67:05:a1:86:3d:7a:c8:f8:ec:c8:5b:
e9:de:7e:d4:0f:05:b9:4a:66:ed:0b:19:f1:f0:37:
b8:e6:1e:28:ff:61:fd:a0:39:1d:5c:6d:04:34:1c:
52:f0:3b:ad:72:68:df:74:84:2c:79:1a:74:f0:0c:
7b:6d:9d:0b:e2:15:bd:b7:26:57:b7:fe:fe:17:35:
59:3d:53:78:7c:38:77:e3:3e:ed:13:15:21:d5:e8:
bd:a7:82:83:d8:8d:7f:44:9b:81:2b:cf:ea:18:3e:
63:67:11:ba:b3:56:f7:3c:65:b2:92:1d:b5:17:00:
33:1f:a2:db:aa:d8:1c:85:35:39:84:ad:12:1f:42:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:BA:49:CD:E2:A6:E4:F9:DC:FF:F2:CB:3D:8A:1F:6F:F3:DD:B4
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/b7y6Sc3ipuT53P_yyz2KH2_z3bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
146.247.124.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a2:e0:85:55:e7:4c:f7:56:64:4d:fe:a1:1e:07:8b:ad:a6:
dd:76:67:09:66:6e:7f:25:30:6e:b1:30:c0:d5:75:7b:bf:dd:
ca:83:e2:b9:8b:c6:6b:15:9d:d8:1c:dd:fd:85:9e:58:1c:18:
71:ce:43:f3:bd:38:37:34:8d:a3:34:71:50:5e:9d:e0:be:a5:
2c:c2:4b:88:e7:a0:bb:4e:2f:05:49:09:f9:a6:23:29:44:a8:
ed:e7:be:a2:55:ac:7c:aa:39:5d:a0:69:41:69:a7:69:6a:78:
eb:81:1c:23:7c:54:f6:22:9e:a5:05:fb:df:26:03:45:92:61:
a9:6d:d2:fb:57:4d:7f:0d:67:ac:07:b0:88:a5:c6:19:f0:66:
27:a5:bf:53:46:1c:85:c6:e6:b7:11:88:c0:bb:57:40:12:3a:
71:67:ac:56:58:7c:d6:48:67:52:93:98:31:81:7b:88:d5:93:
79:31:ce:2a:b2:a2:b5:c6:35:0e:48:03:1e:99:57:cb:1f:b9:
a3:b0:1a:97:37:bb:f2:43:f0:9b:72:52:0d:9d:33:37:38:48:
71:0f:99:e0:67:c1:a7:59:41:b2:30:b9:1c:ac:3a:da:9a:17:
2a:da:db:4b:f1:ab:d7:b6:8e:f7:b3:27:00:c6:02:19:69:e4:
d3:ab:50:80
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 8 10:27:26 2023 by rpki-client on console-fra.rpki-client.org