Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mG8meJxxv5fJmqzy_0uoAdoI-PA.roa
File: mG8meJxxv5fJmqzy_0uoAdoI-PA.roa (raw, json)
Hash identifier: f/XUKxwTXMyxdidwqj9qUlV+EAcxyfut6Rd1HB2RJcQ=
Subject key identifier: 98:6F:26:78:9C:71:BF:97:C9:9A:AC:F2:FF:4B:A8:01:DA:08:F8:F0
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01884E4C04420CC3CDBE8D413183D82727AF
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mG8meJxxv5fJmqzy_0uoAdoI-PA.roa
Signing time: Wed 24 May 2023 15:06:24 +0000
ROA not before: Wed 24 May 2023 15:06:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 146.247.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Jun 2023 14:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:4c:04:42:0c:c3:cd:be:8d:41:31:83:d8:27:27:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 24 15:06:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=986f26789c71bf97c99aacf2ff4ba801da08f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f9:84:83:a9:12:f6:44:ce:55:2e:9e:30:54:
54:c2:47:b6:df:37:63:a7:d0:bd:83:12:91:8b:93:
90:ed:ed:19:d3:1a:a1:e0:00:c5:9c:72:9f:a0:0b:
87:f3:b1:db:ac:63:00:29:75:e3:36:00:1c:6b:85:
ea:65:89:76:3d:66:76:54:d0:3f:83:27:8f:e0:c2:
77:e4:c8:87:83:72:1d:80:5a:b5:af:62:1f:7f:06:
e6:f3:f8:5b:20:31:3c:47:93:e9:c2:74:74:99:a7:
17:0a:2e:43:da:7f:c4:e4:57:2b:1d:5b:3d:3a:46:
57:d8:b5:f2:07:03:67:ec:ca:c3:fb:37:bd:84:6c:
17:c4:a8:9c:eb:5d:d5:d0:b1:e4:fc:2f:11:25:69:
33:4d:b3:c0:16:47:1c:6f:5a:39:e6:80:8a:25:48:
32:52:0c:00:19:24:55:c0:5c:99:99:7d:4b:14:b8:
c4:51:09:64:77:f0:f3:ea:1c:83:c6:1a:14:24:c4:
10:c6:3f:06:15:b2:78:36:56:2d:63:6f:55:ad:b5:
e6:15:db:e2:7a:d5:bc:b8:06:44:d3:c7:86:38:bd:
97:dc:52:db:d4:c1:78:3a:f9:22:ab:02:6e:35:30:
d5:9e:f5:52:2e:e9:cc:32:3d:fa:98:76:64:29:00:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6F:26:78:9C:71:BF:97:C9:9A:AC:F2:FF:4B:A8:01:DA:08:F8:F0
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mG8meJxxv5fJmqzy_0uoAdoI-PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.117.0/24
Signature Algorithm: sha256WithRSAEncryption
71:65:c1:70:62:1a:0e:0f:f4:23:66:1d:54:c9:8c:1d:0a:97:
85:e5:0b:29:c0:c9:c9:d6:cc:4e:67:eb:6f:3d:04:67:e7:7a:
36:c5:33:18:89:b8:be:7b:13:9e:ee:39:4e:ea:6c:e3:8c:a9:
68:2e:85:ab:a3:f7:32:97:f5:56:2c:b0:3d:b4:06:2f:cc:99:
f8:ea:31:aa:30:11:15:f3:32:61:dd:ef:ea:62:0d:69:99:ae:
45:ae:db:ed:36:8d:cd:b7:83:49:85:ab:63:be:0b:88:d1:84:
ee:f5:43:ed:b8:ce:2a:03:50:d5:bb:73:12:53:85:94:44:af:
1a:7a:f3:87:68:ff:5e:74:f3:e2:18:5e:9c:ad:cb:e7:82:35:
37:79:7b:d6:e4:af:7d:f3:0c:0b:f0:63:cf:a5:bc:ca:36:78:
92:db:33:41:65:d9:9a:8c:2b:4b:8d:18:91:80:7e:4b:e0:be:
42:cc:5a:f8:9a:f0:b0:31:99:89:88:ff:28:ae:20:5a:0a:44:
bd:3d:d3:06:e0:fb:0b:9a:62:b1:81:19:9b:3e:85:18:0d:3e:
f3:76:46:1c:69:18:c1:9f:42:60:84:72:04:c1:03:e8:bb:6e:
7a:6d:d2:94:35:7c:64:e4:fa:82:63:86:a3:2c:da:43:4c:d8:
da:8e:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org