Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/n-WaAKjtkxSXaNWStGN9gWRbmYI.roa
File: n-WaAKjtkxSXaNWStGN9gWRbmYI.roa (raw, json)
Hash identifier: 1rC29EadkF6aXbMSaQsDf1EqpgDe9/ijHMj/SiG4o8Q=
Subject key identifier: 9F:E5:9A:00:A8:ED:93:14:97:68:D5:92:B4:63:7D:81:64:5B:99:82
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A900AEE8A1034BC330E109362A19E826B
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/n-WaAKjtkxSXaNWStGN9gWRbmYI.roa
Signing time: Wed 13 Sep 2023 19:35:50 +0000
ROA not before: Wed 13 Sep 2023 19:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:0a:ee:8a:10:34:bc:33:0e:10:93:62:a1:9e:82:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 13 19:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fe59a00a8ed93149768d592b4637d81645b9982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d6:91:35:30:12:38:ae:b1:c8:fb:05:0a:4b:
13:57:50:35:6a:1b:87:5e:06:98:4d:90:9a:5e:f5:
08:9f:91:4b:8c:44:2c:42:4d:26:7b:93:41:c8:69:
53:b0:3d:b1:97:5c:03:6a:b5:e1:a0:ba:da:a9:0e:
0c:ce:95:83:39:5f:3c:59:f1:24:d7:5c:7e:2b:40:
c1:c6:e8:0b:a3:3e:7a:13:e9:c4:57:8c:a0:12:21:
26:a5:29:c1:67:2d:8e:95:d9:1e:46:23:a4:1e:4a:
9e:75:89:81:a7:9e:1c:9a:0a:d5:e5:f3:27:bb:29:
6f:4b:db:85:6d:21:ba:f5:38:fc:65:4a:d4:5f:6c:
0d:81:08:c9:a5:85:4e:b1:3c:ef:5d:02:8e:89:cc:
2c:2a:13:b9:c5:50:11:ee:06:f8:53:f0:54:01:33:
6b:87:10:bb:58:ab:93:4f:18:b7:e4:60:c1:32:b9:
d9:b8:04:a7:55:1d:2c:f9:07:1c:67:c9:d7:2e:43:
eb:64:3c:e3:58:89:82:9f:e9:1c:41:e6:97:ba:dc:
0b:45:f8:05:64:8e:d5:84:7a:b0:cf:96:2e:b2:a4:
53:51:f8:6b:d9:c6:a0:0f:90:7f:c9:d2:7d:fd:30:
50:e3:82:e8:fc:05:77:c5:f1:3c:f4:9d:4a:72:64:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E5:9A:00:A8:ED:93:14:97:68:D5:92:B4:63:7D:81:64:5B:99:82
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/n-WaAKjtkxSXaNWStGN9gWRbmYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:58:d2:9d:7f:65:78:af:ce:9e:3e:12:49:fc:14:a3:ac:32:
59:7d:60:f0:8e:fd:06:c3:42:f5:28:36:f6:43:a6:5a:9a:58:
63:ea:9e:f6:66:5a:c0:18:7c:d8:bd:69:b5:cc:1c:1d:85:d3:
06:96:dd:9b:fc:d3:67:0a:7a:75:3b:1e:bd:fc:ab:f8:1d:d8:
95:e4:3b:1b:d2:f2:75:3d:8c:c6:95:ef:4e:ad:be:e3:73:34:
68:f0:68:ae:5f:de:2a:7c:62:4a:c1:1f:4e:ba:56:2c:07:c7:
2c:20:9a:d0:b9:66:94:9c:86:13:01:89:58:90:5c:e0:6a:a0:
72:03:aa:86:af:08:9b:62:6b:8e:4a:45:70:52:7f:09:7e:44:
d2:5b:4b:f3:20:a9:14:8e:a4:6a:38:df:0f:07:e2:b9:6b:28:
10:8a:c0:44:4b:c2:11:1c:59:03:01:5f:d1:7b:49:72:00:5c:
f7:cf:96:6b:57:b0:fc:b5:a2:03:81:13:86:84:5e:61:b3:58:
63:5b:5f:18:32:67:ed:0f:8e:ac:86:ef:42:f0:d8:c6:f7:0b:
33:1e:fd:2b:9f:82:13:81:73:04:99:ee:1a:f1:fa:18:63:51:
14:6c:4c:ec:77:cf:c6:8b:af:64:1d:d6:f4:84:02:ef:4f:43:
74:ca:9a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:11:00 2024 by rpki-client on console-ams.rpki-client.org