Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nFWgRgLy8fGJ7JOTAvQQTLbj7yA.roa
File: nFWgRgLy8fGJ7JOTAvQQTLbj7yA.roa (raw, json)
Hash identifier: +70DLBnkashsKE+D8ScVszM5owv1ogklo5siRJDFqRQ=
Subject key identifier: 9C:55:A0:46:02:F2:F1:F1:89:EC:93:93:02:F4:10:4C:B6:E3:EF:20
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0D53BEFE1A7FAF4CAA1AC4EB3C88
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nFWgRgLy8fGJ7JOTAvQQTLbj7yA.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 13:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0d:53:be:fe:1a:7f:af:4c:aa:1a:c4:eb:3c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c55a04602f2f1f189ec939302f4104cb6e3ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:26:31:e9:fd:19:f6:7f:c2:0e:6a:10:69:
30:ec:de:3e:74:3a:f0:55:0f:20:40:6e:95:4f:f5:
3a:84:63:04:93:fa:de:e6:68:44:c5:db:3e:3e:54:
36:cf:62:eb:6b:98:c8:6a:39:26:8c:d9:fa:0c:2b:
23:ac:38:4e:3d:d0:13:39:38:4b:a9:8e:95:c0:22:
f7:04:c6:67:22:04:d1:b7:87:1a:cb:ae:d8:0a:0a:
d3:f3:20:4c:43:05:24:e3:4b:76:52:ca:7d:6e:96:
62:07:60:8c:8a:a7:46:6b:dd:30:16:0a:9d:dc:38:
81:5c:91:93:dd:96:b6:01:b3:1a:94:08:15:1c:91:
b5:46:d9:e4:73:65:a1:88:17:f0:18:5d:c2:2f:10:
85:80:71:01:c0:f7:b2:df:6d:80:01:67:d1:1c:e2:
23:78:cb:c5:6c:f7:b6:72:69:76:dd:67:ae:65:11:
db:c6:53:3c:57:67:d5:1c:98:70:58:33:9e:77:79:
0f:e7:91:18:30:bb:bf:46:ca:02:1b:0f:77:7a:cb:
b9:56:f3:d1:e1:68:2c:9a:9f:ca:78:33:3d:88:ca:
95:a2:80:e5:44:c8:b3:4c:82:ca:09:86:7a:65:d6:
d6:04:47:d1:88:73:c5:27:25:9d:eb:ae:29:36:b0:
c5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:A0:46:02:F2:F1:F1:89:EC:93:93:02:F4:10:4C:B6:E3:EF:20
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nFWgRgLy8fGJ7JOTAvQQTLbj7yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:46:e8:f4:ad:0d:7e:85:f3:e1:f3:4c:97:82:e4:da:9b:51:
fa:cc:e3:ac:d0:cb:91:00:96:67:63:0d:fc:0d:f2:9a:66:3b:
db:af:25:db:77:d4:f4:39:95:5a:59:18:04:6b:09:35:83:91:
bf:5c:90:18:07:c2:a8:7c:dc:07:56:59:30:df:a1:9b:51:b6:
8a:66:2c:70:da:11:da:60:c9:0b:46:40:c5:2b:90:c6:f9:bc:
1f:35:6a:45:8d:6d:a6:a7:a0:0b:8b:07:01:38:f1:0e:db:0d:
2a:b2:fe:f6:f9:ce:41:f7:ce:6f:8e:ed:68:54:91:16:70:35:
75:e8:41:13:88:c1:18:24:8e:18:f5:a7:08:46:40:bb:fb:e1:
51:9d:bc:9d:09:cf:f4:62:b3:24:1d:bc:9a:26:c3:35:52:6b:
5e:77:22:9d:a9:01:11:3b:78:a4:80:1d:69:13:5c:9d:e3:8f:
ee:05:ce:c5:b9:a9:50:e7:b0:8a:f7:91:e7:0d:76:a7:d2:f4:
54:84:9f:63:69:c6:53:52:80:8c:4f:9d:e4:df:75:03:ea:af:
e7:4e:af:65:9a:37:b3:6c:c9:4a:b0:b8:04:f4:c1:33:50:28:
ea:55:bf:62:3d:88:fb:7c:03:a6:3b:83:5f:80:7e:06:ba:d4:
ff:01:50:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org