Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/jlf2VLA8lo6WMTBAomLiFDDsau8.roa
File: jlf2VLA8lo6WMTBAomLiFDDsau8.roa (raw, json)
Hash identifier: UZud8oJ88OfEaGQQq7WYZocWC6J+eR9gsYQWS1M4piU=
Subject key identifier: 8E:57:F6:54:B0:3C:96:8E:96:31:30:40:A2:62:E2:14:30:EC:6A:EF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A17E91075B674A4EC47F476CA76A7B85D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/jlf2VLA8lo6WMTBAomLiFDDsau8.roa
Signing time: Mon 21 Aug 2023 11:44:24 +0000
ROA not before: Mon 21 Aug 2023 11:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:e9:10:75:b6:74:a4:ec:47:f4:76:ca:76:a7:b8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Aug 21 11:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e57f654b03c968e96313040a262e21430ec6aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:72:62:0f:be:ca:ab:6c:88:ed:6e:98:47:
50:de:93:08:52:43:6f:d5:3e:37:fd:bf:5e:1e:3b:
d7:a3:46:3a:31:a9:2b:03:0c:55:96:d6:df:fa:15:
dd:da:f6:f5:5b:af:89:68:b3:8d:0a:3e:55:1c:9f:
30:1b:74:4a:0e:23:22:1e:7d:6b:bf:23:0e:ef:8e:
1e:fa:32:cc:10:3e:f1:b1:88:b5:56:10:44:f6:fc:
73:5e:c6:e7:45:d5:ce:e8:49:8d:fe:94:e0:fe:b9:
3e:3b:88:98:91:48:c8:cc:d4:4c:6e:93:ae:d0:0c:
06:d2:66:b8:72:10:1c:75:15:d8:29:d7:3b:30:59:
e5:d4:90:e5:48:15:0f:97:d1:0d:bc:b2:c5:52:82:
4a:1a:5a:a6:e9:55:86:8a:fa:36:c6:12:b0:b8:9d:
f3:15:bd:4a:6a:e3:7e:8a:d9:43:fc:66:65:7d:21:
15:3a:91:ef:1d:9e:4f:79:3e:6a:1d:db:d9:21:d3:
63:9c:aa:bb:bb:13:68:a5:8e:45:f4:9a:0e:6e:08:
7f:f2:a9:8d:2d:d3:05:49:c7:39:e8:de:de:a0:96:
b7:7c:b8:1c:42:a2:be:dc:cc:fb:2d:af:de:b1:20:
8e:a3:3e:18:d5:b3:69:b6:8a:2e:57:9c:aa:21:7b:
e0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:57:F6:54:B0:3C:96:8E:96:31:30:40:A2:62:E2:14:30:EC:6A:EF
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/jlf2VLA8lo6WMTBAomLiFDDsau8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.111.0-146.247.120.255
146.247.122.0/24
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4d:24:af:a6:4d:44:49:ff:e4:60:5b:8b:58:73:83:e7:95:
50:5e:a3:e2:f7:13:31:14:7e:b2:b3:86:dd:8f:21:ba:80:42:
44:58:cd:13:00:cd:0d:0f:c9:f5:1c:12:0b:cc:66:57:d4:56:
7a:7b:09:f1:46:03:f7:c6:1c:66:86:e5:9e:65:9e:20:d5:e5:
5d:6a:04:7c:7e:02:64:6a:62:82:0a:77:c3:f2:30:1f:f1:83:
96:54:de:eb:22:69:de:12:cc:87:94:38:b9:f2:35:a1:92:5f:
87:91:3a:df:e5:ea:13:5d:8a:03:89:13:da:f2:7c:9f:13:bc:
c4:e6:2e:24:94:ae:ac:1b:7a:dd:be:cb:38:f4:b3:b3:ca:fb:
90:9b:ff:c7:30:ad:7b:ef:26:b9:20:15:de:50:1b:92:58:b3:
8b:43:be:08:25:a1:90:24:e6:ff:17:a6:31:de:73:cf:10:1b:
b8:f2:0d:a6:9d:0c:97:87:9a:3d:5e:17:0c:64:c9:6e:95:69:
7e:8e:80:17:04:55:54:7d:00:b7:ae:c3:08:ce:f0:57:1e:eb:
f4:42:27:5a:08:a9:f1:4b:b4:30:2d:15:0d:b1:22:72:04:40:
07:e1:c1:ef:48:b4:1e:ad:5a:bf:14:47:30:fc:91:2f:38:8a:
c5:6a:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 12:59:05 2023 by rpki-client on console-fra.rpki-client.org