Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f-hS7BWuP-0y7iNauzw9irOduv8.roa
File: f-hS7BWuP-0y7iNauzw9irOduv8.roa (raw, json)
Hash identifier: F2ktOl3iC2eM5ag0z49hg7z3z4NXO0yiuEhtN9mkakI=
Subject key identifier: 7F:E8:52:EC:15:AE:3F:ED:32:EE:23:5A:BB:3C:3D:8A:B3:9D:BA:FF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018824961BE308A0F04C8F4750CF6CE3744E
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f-hS7BWuP-0y7iNauzw9irOduv8.roa
Signing time: Tue 16 May 2023 12:43:17 +0000
ROA not before: Tue 16 May 2023 12:43:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:96:1b:e3:08:a0:f0:4c:8f:47:50:cf:6c:e3:74:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 16 12:43:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fe852ec15ae3fed32ee235abb3c3d8ab39dbaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:1f:7d:41:28:d2:3d:9e:e1:a3:97:c5:a3:
80:72:69:50:f0:52:59:90:e7:40:7d:9a:41:31:df:
e5:52:f7:7a:bd:18:66:a2:98:1d:97:00:f4:46:5c:
fd:a4:92:5b:3e:ac:ad:b7:f3:f9:78:63:b1:e2:e8:
40:ae:f0:51:2d:8c:70:a8:8f:f1:23:42:82:6a:f5:
3c:2e:46:e3:0f:77:4c:6a:50:d6:ce:56:a0:64:d4:
cd:51:21:44:71:bc:54:2f:38:fb:1d:8c:71:e9:15:
00:79:74:44:cb:b5:ed:89:d7:45:a9:43:bc:20:9a:
b7:34:74:96:35:de:56:65:3f:13:7a:8b:d5:de:80:
de:c7:67:50:fe:72:0c:0f:0e:ee:b9:8a:17:66:6a:
1d:d7:a2:18:71:da:22:45:5b:b2:58:3d:f1:c7:18:
06:61:9a:b2:53:ca:21:b5:f6:a8:12:aa:01:18:58:
ec:ef:6f:3e:1f:44:c3:61:7f:6a:ee:1c:69:26:da:
d1:d1:8e:ef:ed:72:da:cb:1d:cc:37:f4:46:79:cd:
75:5d:5c:71:ce:55:93:0a:c9:ff:5a:3f:53:e8:4b:
87:1a:62:2f:1c:97:05:5f:9b:55:22:1f:87:31:fd:
59:4c:d2:a5:85:bd:50:b5:f7:b4:ce:ed:ac:99:c8:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:52:EC:15:AE:3F:ED:32:EE:23:5A:BB:3C:3D:8A:B3:9D:BA:FF
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f-hS7BWuP-0y7iNauzw9irOduv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d7:f1:f0:37:fd:02:64:29:20:c6:09:f4:b0:cf:65:80:e4:
09:bf:8c:6c:9e:f7:ae:2a:b8:89:73:d3:cd:49:8d:01:8c:72:
b4:4b:f5:c6:40:70:f3:2b:35:d8:e0:0e:15:13:25:f2:fd:a4:
d6:e7:3d:54:47:2a:d6:03:86:d3:1b:21:8b:11:4a:83:24:84:
b2:7a:a3:88:2b:8a:8f:67:fa:0c:46:76:23:b9:cb:d6:65:7b:
e5:b6:78:c4:92:91:fb:bb:07:10:3e:19:7b:8f:2a:c0:a6:18:
67:b2:ea:30:9f:e1:4c:81:17:a9:0b:18:50:be:56:31:2a:18:
c6:94:08:17:80:f1:df:9b:0f:2b:0c:7a:f9:fd:27:9b:d6:71:
59:ad:df:d1:97:6e:fe:48:34:1e:f3:c2:56:9a:aa:b2:e3:bc:
d3:db:b1:4e:68:a6:f4:38:16:33:4c:0d:50:ef:e3:b2:97:35:
ec:81:e6:11:b7:aa:da:d6:b5:d8:19:18:05:91:61:7f:ad:4b:
d9:8a:c5:25:2b:f5:01:bc:b7:9c:a7:a6:ab:66:82:50:95:c9:
68:16:e5:30:c1:94:22:2a:37:32:e1:2f:f3:60:d4:43:0d:cb:
94:98:4f:4d:1b:11:89:72:5a:9d:67:10:d6:2d:b7:7e:3f:24:
bb:f2:5e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org