Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f_gC6wKfEJtcJERgMqcGJRRyEX0.roa
File: f_gC6wKfEJtcJERgMqcGJRRyEX0.roa (raw, json)
Hash identifier: zRRtOLa5YR5OWNrvFm1xjtLTcRoW3P2gv6vjcTvLP60=
Subject key identifier: 7F:F8:02:EB:02:9F:10:9B:5C:24:44:60:32:A7:06:25:14:72:11:7D
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018581EA6BBF42DA36711807EAA46D487164
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f_gC6wKfEJtcJERgMqcGJRRyEX0.roa
Signing time: Thu 05 Jan 2023 12:31:41 +0000
ROA not before: Thu 05 Jan 2023 12:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.101.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:ea:6b:bf:42:da:36:71:18:07:ea:a4:6d:48:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 5 12:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff802eb029f109b5c24446032a706251472117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:08:86:48:02:ed:80:3a:10:21:01:58:4e:
df:b6:46:61:95:b5:50:fe:b2:9e:33:c2:91:69:cd:
3c:25:8e:09:29:ca:11:bb:b5:6e:42:8c:03:ed:c6:
09:86:b8:8c:11:f7:df:21:8f:20:75:81:0e:2a:0d:
8e:73:0c:f1:e5:f2:d9:75:f8:0c:af:db:75:12:54:
c4:15:9b:d4:85:f9:6e:87:fc:fb:38:cd:82:90:fb:
c2:dd:3e:a9:ad:6f:56:29:d8:74:b2:05:50:22:fd:
fa:74:3c:be:0d:da:41:02:b8:cd:d5:81:e7:e7:f2:
2b:a0:7e:a4:e3:f3:fc:f0:34:c7:76:b9:41:8f:15:
16:a9:79:36:b9:a9:35:10:e1:5b:e5:87:16:16:0a:
1d:6e:e2:a4:b5:3d:15:96:14:34:b7:9f:08:9a:54:
5e:70:39:60:cf:8f:d1:fc:87:13:00:7b:ba:9b:64:
4c:d6:7c:f0:58:f5:ad:c4:88:a2:14:62:c3:df:2a:
4a:f4:96:b2:ca:8f:6b:09:31:af:86:13:9c:4c:e7:
07:a9:d4:30:8e:2f:aa:4c:1d:0c:17:8b:f0:f1:81:
dc:7e:b4:19:0f:6c:9b:9b:34:b4:15:ba:29:f4:06:
fc:d9:65:00:8f:67:6d:6b:3f:30:41:09:6c:04:a5:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:02:EB:02:9F:10:9B:5C:24:44:60:32:A7:06:25:14:72:11:7D
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/f_gC6wKfEJtcJERgMqcGJRRyEX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:c5:d2:d9:08:e0:fa:f3:eb:c7:fe:0f:05:db:54:5d:8a:9c:
f9:79:1a:dd:ea:24:e5:ef:8e:e9:89:ed:26:44:2e:65:fc:19:
8f:4b:89:db:17:5d:7a:e2:35:aa:27:5a:da:97:d1:b2:6e:e2:
a7:02:c0:1b:c2:6c:01:2e:95:01:52:1e:28:45:f1:e8:29:76:
e4:c3:2c:ad:b0:bb:d2:6f:a0:5c:56:35:03:3d:73:b1:48:38:
04:93:53:71:03:6d:84:dd:46:7e:d4:a7:3e:f1:38:94:5d:77:
4d:c0:b9:f0:90:ef:b5:8f:30:97:24:5d:8f:64:ca:96:43:8e:
fc:7a:f3:95:71:70:83:60:da:33:3a:73:01:64:6d:69:48:cb:
fd:95:0b:2d:f3:15:39:01:f0:f5:a6:e8:e1:67:7c:7c:3a:66:
72:50:9b:e0:f1:46:bd:05:93:b6:95:37:c8:27:ca:c0:58:10:
a6:55:59:fb:2a:0a:fa:54:06:dd:fa:84:8a:e4:27:89:2f:22:
76:ad:f5:58:46:20:17:bf:c2:f6:37:46:cc:bc:9e:e4:24:2f:
c3:44:1c:87:e0:a1:6e:dc:c5:7f:47:fb:34:d3:56:a2:8c:b3:
38:91:6a:59:d2:6d:ac:2d:0d:5e:85:7e:6d:4e:9c:60:85:8e:
c2:65:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org