Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/di1BJ8jL7HE4ScVIlwKwr14HDPo.roa
File: di1BJ8jL7HE4ScVIlwKwr14HDPo.roa (raw, json)
Hash identifier: m3taJkDx5E0+cjNVOHP8sahN5SuKIMpAkq0wKyWA4nI=
Subject key identifier: 76:2D:41:27:C8:CB:EC:71:38:49:C5:48:97:02:B0:AF:5E:07:0C:FA
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0186121A78F557E48C1234920AFA313CA79B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/di1BJ8jL7HE4ScVIlwKwr14HDPo.roa
Signing time: Thu 02 Feb 2023 12:29:30 +0000
ROA not before: Thu 02 Feb 2023 12:29:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 146.247.117.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:1a:78:f5:57:e4:8c:12:34:92:0a:fa:31:3c:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 2 12:29:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=762d4127c8cbec713849c5489702b0af5e070cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:19:d3:e5:af:06:de:7a:fe:00:d9:98:e0:
53:b4:99:1b:e6:91:37:f7:1f:75:43:42:cc:ce:30:
dc:5a:b1:ee:e1:f9:26:05:10:bc:35:35:78:95:f6:
b9:19:58:69:93:4c:69:52:a3:14:1d:33:fe:86:e7:
72:7e:bd:8b:3c:6f:77:8d:96:e1:59:1e:41:6e:e3:
fe:1f:0a:04:d9:36:5f:48:4b:d6:ef:61:15:5f:ec:
13:a6:12:f5:bf:16:7e:b5:e0:20:c2:7d:79:2d:6f:
6c:a5:e3:a5:7f:fd:53:db:dd:a3:93:10:d1:eb:6d:
c3:f7:0d:04:2b:28:ae:98:a5:b5:59:30:a3:4d:77:
b6:a4:1a:b5:bc:f0:d2:64:a3:7f:de:6a:21:74:94:
1c:14:92:90:07:0a:65:92:da:b9:ed:ee:f3:74:82:
ce:bb:2c:19:0d:55:ea:43:4e:4c:93:dc:90:6f:c5:
a2:ff:0f:32:a5:9f:79:3d:8a:aa:26:da:15:66:a4:
76:62:41:95:8e:7e:99:43:a6:fe:90:8f:1a:e7:63:
26:83:43:55:a0:dd:dd:5b:11:36:98:bd:29:f5:ea:
e1:33:8b:a5:d2:e0:d8:14:13:b1:66:37:e3:be:10:
15:9d:95:14:c1:67:66:a0:79:79:4f:b6:ba:dd:42:
a0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:41:27:C8:CB:EC:71:38:49:C5:48:97:02:B0:AF:5E:07:0C:FA
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/di1BJ8jL7HE4ScVIlwKwr14HDPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.117.0/24
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b8:f0:4b:a0:ed:15:89:97:e5:f9:c1:85:63:e3:9b:a4:ef:
ff:33:0d:bb:30:28:6d:a1:6c:0e:de:75:28:27:97:cb:57:04:
05:65:a1:9e:da:ab:85:d7:24:3f:38:a2:64:0c:8d:0d:05:45:
53:23:ba:f2:4c:c5:3c:b0:52:2b:77:a5:d1:f5:dd:35:aa:da:
b9:18:53:34:0c:d8:d9:45:c1:e5:35:c5:1b:b4:6a:b7:f3:69:
32:c2:94:69:42:9b:87:53:0f:ae:c9:c6:d8:03:65:3f:93:f3:
6a:e3:64:08:5f:9a:ba:b1:f2:89:ae:66:e3:d7:45:8d:e6:80:
6e:ec:9f:61:3b:04:95:32:eb:57:ba:79:19:6d:0d:a8:63:d2:
ff:be:4b:ac:d0:0b:9c:c6:b2:dd:c4:4e:e4:83:31:c3:c7:0e:
23:3a:66:1e:1b:ef:b1:56:05:83:4e:eb:38:e4:18:67:3b:c1:
b9:84:3e:d9:d3:0b:c9:6a:65:db:1d:61:77:3b:50:b2:3f:43:
77:61:c8:44:ff:da:45:ae:a6:1f:77:32:e1:41:90:1d:d5:e9:
dd:3a:91:4c:0c:dc:37:85:6e:4c:95:20:cc:96:8e:64:3d:5f:
b8:21:74:bc:a9:1c:da:95:12:0d:2d:cb:55:38:87:9f:c1:9e:
0b:bc:f0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org