Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFd_dTSLGMcy8khI6b6xeJtPam4.roa
File: oFd_dTSLGMcy8khI6b6xeJtPam4.roa (raw, json)
Hash identifier: 7MYfLrN6Vz68M46WSaq1m5RWh/deRs8HmlJk3aToHHk=
Subject key identifier: A0:57:7F:75:34:8B:18:C7:32:F2:48:48:E9:BE:B1:78:9B:4F:6A:6E
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0AFD24DDE031E826DE177E9D29C0
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFd_dTSLGMcy8khI6b6xeJtPam4.roa
Signing time: Mon 02 Jan 2023 14:24:57 +0000
ROA not before: Mon 02 Jan 2023 14:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 146.247.111.0/24 maxlen: 24
146.247.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0a:fd:24:dd:e0:31:e8:26:de:17:7e:9d:29:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0577f75348b18c732f24848e9beb1789b4f6a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:89:e4:4d:e8:12:83:fa:39:01:fa:44:1e:dc:
d8:3a:ba:8e:21:10:aa:3b:ec:34:51:db:84:52:ee:
35:e5:41:1a:13:b6:c1:2e:93:d0:53:75:09:ac:8a:
87:4d:b4:c7:7e:da:0f:41:df:32:23:39:1b:dd:ab:
60:f1:57:e9:39:c7:d5:dd:86:b5:9e:54:d7:fa:ec:
1c:b9:0b:68:5c:1c:9b:87:45:12:9a:84:05:78:c6:
93:15:46:cf:a7:51:40:9f:9a:bc:cf:da:cb:f6:22:
a6:c5:3e:96:44:93:54:54:5e:20:4f:ee:79:b7:81:
7c:e7:d3:0f:9f:05:74:eb:a7:5d:b5:aa:48:66:f0:
b0:20:0a:16:b7:13:c2:c7:dd:3f:dd:47:ea:6c:23:
f1:59:58:19:da:aa:c2:dc:65:0e:f4:7e:87:fb:c2:
4e:18:e4:f8:b6:be:14:25:a8:66:4b:6b:0a:ed:0a:
87:dd:f1:02:8b:5e:0a:a4:33:f6:52:d3:14:52:c6:
7d:d2:b3:a9:16:ba:0a:36:4b:58:28:e4:e0:df:a6:
99:f1:63:20:57:e4:8d:7e:e5:7c:83:7a:ab:6f:7d:
d1:ed:ff:ca:c0:03:f6:fe:18:e4:c3:60:11:3b:4e:
6e:85:f9:da:c8:71:2b:fe:64:a6:06:59:12:d8:b0:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:7F:75:34:8B:18:C7:32:F2:48:48:E9:BE:B1:78:9B:4F:6A:6E
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFd_dTSLGMcy8khI6b6xeJtPam4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
07:2b:d8:f2:fb:ed:ce:36:73:6e:dd:e4:6b:ac:54:7f:23:58:
b5:52:7b:1c:fe:6e:fd:dc:25:4a:d9:b1:d7:c3:a5:88:3f:71:
4d:17:a9:08:ac:38:08:b4:9b:a1:fc:e8:7f:6f:09:c9:17:9a:
4f:e3:7e:d9:82:69:03:7e:b2:74:4e:2f:c7:1f:30:a5:52:6b:
d7:f2:ff:d0:b4:49:86:73:02:ee:58:d2:f7:1d:11:e9:5a:0a:
2a:d2:ad:48:4d:e6:0a:c1:1e:d6:e9:99:df:a1:84:68:f0:1c:
74:04:c8:54:f9:a0:06:9a:dd:9c:f0:1f:95:98:6c:56:4b:38:
57:34:6b:49:56:ed:74:4b:bd:71:f1:78:da:b5:31:74:0c:01:
66:98:43:4b:16:fa:2b:3d:e8:ab:e1:d5:9b:8c:84:bd:40:24:
ae:32:5e:17:ec:79:17:2a:6f:50:8d:f4:92:7f:c4:a1:99:d6:
1a:59:2b:75:fc:8f:24:7b:32:db:64:10:f0:af:c0:83:7c:9f:
28:ef:22:52:c0:a5:90:1c:d2:b0:c6:09:11:f6:af:d1:e2:5b:
29:8a:fb:e6:15:03:6d:a4:ff:b5:4a:f3:63:86:68:c3:21:47:
21:46:80:b8:68:48:a4:48:65:3e:f2:13:f2:81:77:a8:c9:8f:
e3:ed:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org