Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mXHey4KL77P8zrB4bXZKnfcth6U.roa
File: mXHey4KL77P8zrB4bXZKnfcth6U.roa (raw, json)
Hash identifier: 8Owa12prbArNZuL1I8/FU/AHZ4w5rtsax8dh8juGedQ=
Subject key identifier: 99:71:DE:CB:82:8B:EF:B3:FC:CE:B0:78:6D:76:4A:9D:F7:2D:87:A5
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF10D6B0D2507BFF36AD4CA14B161B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mXHey4KL77P8zrB4bXZKnfcth6U.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 146.247.103.0/24 maxlen: 24
146.247.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:10:d6:b0:d2:50:7b:ff:36:ad:4c:a1:4b:16:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9971decb828befb3fcceb0786d764a9df72d87a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:ce:ad:81:ba:af:b3:cb:02:c0:f9:4d:26:
5a:8c:6f:9f:a2:b7:c4:51:b9:0b:49:f7:e2:37:cd:
1c:b9:86:17:aa:18:07:f4:16:41:e5:cd:1b:ef:32:
51:67:66:25:21:48:5b:c5:2f:46:d4:7e:45:2a:e6:
df:12:73:e7:56:03:81:53:ae:92:7d:4f:9e:f7:17:
c5:9f:d1:d0:3d:72:d1:53:dd:50:61:cf:9d:71:3b:
aa:50:9e:11:3e:fd:5c:6f:d8:9a:38:b8:2c:66:d0:
57:43:2e:97:d2:33:f1:9a:ba:c3:63:f0:e0:e0:e5:
9c:75:51:6c:5a:02:e5:2d:64:da:4b:bd:81:79:91:
46:ef:ce:7e:5b:cb:3d:86:a9:5b:a4:ba:ad:9b:35:
9b:aa:c3:03:c7:0d:60:a1:ee:2b:ac:b1:a3:cd:3d:
53:49:3f:f3:cc:b1:a8:6c:d0:67:25:e8:25:62:38:
97:06:1d:b8:12:de:37:00:19:65:11:50:70:63:f6:
63:a9:0a:44:15:a6:b8:ba:30:49:35:71:10:ad:4e:
17:31:80:b7:25:f9:68:9c:86:d7:56:70:ef:58:26:
a8:af:69:4f:e7:14:84:32:2a:6d:8e:52:07:b6:41:
2e:4d:83:ae:1c:4e:b9:e3:3e:60:7c:5a:d2:a4:8d:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:DE:CB:82:8B:EF:B3:FC:CE:B0:78:6D:76:4A:9D:F7:2D:87:A5
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mXHey4KL77P8zrB4bXZKnfcth6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.103.0/24
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
03:32:e6:16:1b:4d:94:fd:fa:55:d2:fb:37:ff:8d:f9:dd:7f:
cf:f0:ce:f0:bc:ca:1c:f5:7c:9d:92:0c:46:f3:c4:3d:76:0d:
3c:9e:e4:6c:78:a1:72:c6:ee:70:3a:21:20:9b:39:0c:61:c9:
fa:9d:60:a7:ae:d3:31:c9:df:1e:23:c2:23:e9:53:57:3f:c8:
50:d7:5c:62:c7:29:75:28:2a:82:48:38:93:06:e2:95:f2:b1:
0b:94:07:a3:e9:dc:57:7d:dc:a9:ff:23:11:a9:a3:a4:d1:e6:
a4:40:e6:96:42:7b:89:86:53:60:27:79:ba:7e:83:ee:6c:a2:
6b:55:61:34:48:97:78:00:95:51:de:85:ef:54:e0:14:c0:1f:
2e:63:c1:7f:25:3a:aa:b5:c0:b3:a4:78:57:7a:80:95:de:5c:
b6:5f:b8:05:48:af:64:e7:51:b9:69:12:64:16:33:e0:8d:d0:
19:d7:02:9b:4c:83:07:be:a8:b0:36:92:48:79:af:03:9e:47:
b3:92:b6:fe:74:30:75:1d:96:74:8a:4c:e9:ef:bf:57:55:c6:
15:18:c9:de:59:fa:2f:c5:f1:8e:d8:ea:b2:f5:f3:67:05:92:
dc:66:0f:88:5a:a5:2e:f8:ec:25:9d:a6:bd:d0:05:03:fd:b7:
ee:15:20:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org