Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/qfh8qgsCoMFPoHfzJqUXWi12-XY.roa
File: qfh8qgsCoMFPoHfzJqUXWi12-XY.roa (raw, json)
Hash identifier: kIKhFI0dnjDUIi7PLCgptT4xzq+30faqVAxujmLC8s8=
Subject key identifier: A9:F8:7C:AA:0B:02:A0:C1:4F:A0:77:F3:26:A5:17:5A:2D:76:F9:76
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF100F3C5604DA00FC364B86627263
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/qfh8qgsCoMFPoHfzJqUXWi12-XY.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 146.247.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:10:0f:3c:56:04:da:00:fc:36:4b:86:62:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9f87caa0b02a0c14fa077f326a5175a2d76f976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:b7:17:d8:14:82:f4:6b:3e:33:4c:8d:61:
80:24:4c:6e:32:09:27:38:d2:c3:b5:fe:28:5b:9e:
07:f4:09:3a:ba:e3:f8:e9:9f:ea:06:ae:5b:78:ce:
62:99:fb:b0:21:69:bd:93:bf:77:ee:d8:26:18:9e:
c9:98:eb:7a:b7:af:dd:ed:01:b3:f8:f9:81:b6:ff:
b5:56:8a:a1:bc:bc:9b:05:c3:63:11:f4:61:ae:65:
25:a8:34:38:b5:97:5f:98:ee:c2:d1:2a:1e:c0:20:
35:51:30:05:8f:c1:9e:89:3e:be:9d:c7:54:ad:c8:
d8:8f:41:82:be:ff:8d:d7:cd:6d:6e:2d:b9:c0:72:
5a:5d:f4:e4:a3:49:ab:95:35:35:2f:a6:63:7c:95:
47:77:41:4d:7b:9c:80:40:04:5a:e8:2d:2e:2e:c7:
fa:e5:ba:07:be:0e:0a:35:be:e0:20:9e:05:74:03:
d9:65:31:aa:af:6f:e8:4b:53:56:6e:68:79:5b:00:
e3:00:01:b9:26:c2:9c:ea:1c:3f:a0:e7:9c:ce:c3:
2d:91:f1:26:92:b7:1f:0c:c5:2f:cb:1e:ed:66:ef:
ff:32:2a:3a:c9:13:7a:38:87:03:8c:29:c2:9d:b3:
2e:88:dd:9e:ee:61:af:6b:21:46:7c:ee:d5:e5:e1:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:7C:AA:0B:02:A0:C1:4F:A0:77:F3:26:A5:17:5A:2D:76:F9:76
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/qfh8qgsCoMFPoHfzJqUXWi12-XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d3:f9:96:17:72:03:51:1f:46:71:78:d4:ad:b0:fc:b6:2c:
2b:86:53:37:c7:32:6f:82:13:4e:c7:13:76:2a:14:e4:71:d4:
f1:0c:0a:94:ba:bb:2b:3e:5c:39:c6:ac:6d:54:62:ce:e1:29:
76:e3:cb:64:33:16:81:eb:c1:a4:40:f4:46:37:34:59:a5:93:
c5:47:1b:de:a0:c6:6d:98:a2:45:d3:bf:24:ad:86:9d:55:2e:
99:cc:bd:ff:21:c9:24:35:c4:e3:a0:20:ce:c8:5c:34:bd:b9:
37:50:9b:1e:a5:51:46:ba:b8:59:1a:f6:a8:ad:5f:c5:13:b4:
4d:94:4a:e7:b1:28:ba:b4:08:d1:89:ff:3f:de:27:02:d0:99:
68:55:16:fa:23:37:0c:15:60:18:27:83:17:88:b4:ee:90:46:
5c:02:d5:3d:6f:de:c4:1d:bb:51:e7:df:a8:9c:e5:e2:34:18:
8e:36:e6:84:f6:2f:23:31:60:5b:69:c9:06:5e:b8:7e:69:55:
fe:4a:58:e2:f5:8d:61:b5:bd:be:d6:da:80:7a:ef:a2:89:27:
42:ac:ed:8f:65:8f:66:4e:43:f1:8d:f3:34:f5:0a:b3:4d:08:
77:8b:5d:11:bd:d6:dc:6b:9b:a4:b7:bb:bb:9a:89:c6:a0:6b:
fe:fd:c4:15
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 15 12:13:00 2023 by rpki-client on console-fra.rpki-client.org