Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rBV-JIIEKRL0zzYfG2weusf79FY.roa
File: rBV-JIIEKRL0zzYfG2weusf79FY.roa (raw, json)
Hash identifier: 1Z34HnP7uYgg27q+DmxRMohy9eJ9h1KYbGbDQ1LrMcY=
Subject key identifier: AC:15:7E:24:82:04:29:12:F4:CF:36:1F:1B:6C:1E:BA:C7:FB:F4:56
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018CC7937DC7A4E70945C0A56FCA3EA597D7
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rBV-JIIEKRL0zzYfG2weusf79FY.roa
Signing time: Tue 02 Jan 2024 00:29:41 +0000
ROA not before: Tue 02 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 146.247.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 23:55:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:7d:c7:a4:e7:09:45:c0:a5:6f:ca:3e:a5:97:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac157e2482042912f4cf361f1b6c1ebac7fbf456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:c8:07:0b:73:a9:a3:c1:75:19:fe:59:1f:
70:1e:30:26:f8:27:25:52:46:6a:dc:c3:fe:43:31:
af:f5:e3:f5:83:02:ac:a9:28:75:c4:24:9b:36:28:
cc:0f:a4:b4:01:c0:0f:1c:b5:27:17:a4:1d:40:52:
44:85:0e:d7:5f:85:c2:73:95:78:e5:51:ca:c7:c0:
27:bc:af:ff:37:f9:ce:28:f7:df:3f:8f:b0:4b:3b:
22:e3:73:73:8e:ad:91:5f:96:f1:54:1b:2c:ac:1e:
f7:37:89:c6:ba:a9:30:f9:10:da:f3:cd:6a:5d:cd:
64:2c:33:53:cb:33:de:14:31:ac:3f:e6:22:3d:9e:
4d:ce:d9:0e:65:84:92:68:36:eb:90:d6:3e:4a:d8:
03:a0:14:22:cf:97:4c:fe:76:64:bb:90:52:37:b7:
93:a1:31:e0:88:e6:55:3d:bd:aa:44:a1:ae:fb:b3:
5d:2e:71:53:0d:ef:0e:b7:d4:ea:27:56:f9:6b:af:
72:75:bc:87:ee:b3:35:1a:ea:58:d5:73:15:21:09:
22:c3:d3:a6:7a:7f:f1:19:88:e6:99:ef:7e:da:07:
12:06:9e:1d:e1:fe:3e:d2:e7:dd:c8:74:68:59:7e:
f2:c1:4b:81:ea:34:b2:dc:92:34:0d:05:2a:53:16:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:7E:24:82:04:29:12:F4:CF:36:1F:1B:6C:1E:BA:C7:FB:F4:56
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/rBV-JIIEKRL0zzYfG2weusf79FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.110.0/24
Signature Algorithm: sha256WithRSAEncryption
79:71:c4:fe:c0:ed:52:6f:53:49:82:7f:41:4c:8d:5b:7c:83:
b0:ac:0a:a1:c7:f8:4b:47:c2:c8:0f:69:04:97:59:ba:41:92:
49:61:17:45:42:c2:1f:02:bc:51:40:d5:de:fa:07:01:28:9e:
89:b4:f7:a7:43:d4:00:7b:97:61:f6:80:c2:1f:79:37:8e:ab:
6e:80:44:07:92:1a:e4:ac:e9:dd:73:77:bd:7a:a6:1c:68:60:
81:21:e1:0f:61:68:74:f1:94:4a:ca:9f:1b:ec:f3:5d:3c:02:
9b:0e:8c:c5:d4:81:75:3d:98:af:48:a5:e9:ca:88:3f:f6:65:
03:4a:37:39:05:27:1f:f2:01:01:cd:41:d4:16:72:eb:0e:d9:
a9:78:f9:e1:fc:a3:43:f3:b0:fb:eb:04:a7:bb:d8:d0:37:e3:
c8:4d:5b:8c:21:96:ea:a0:6b:52:6c:7f:9d:ee:7f:52:a6:9a:
f6:ab:df:6e:d6:1e:cc:45:f1:60:9e:22:6a:3f:05:ea:ee:cc:
80:b5:aa:cd:b0:e5:cd:d7:63:69:63:12:9c:fc:ac:23:9b:a9:
93:53:96:fb:e5:37:49:49:85:0b:be:ba:20:f1:71:da:e8:8b:
4b:59:87:27:f6:e7:67:b9:97:5a:31:b1:e7:5a:ad:29:c4:a3:
c7:0a:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 01:18:20 2024 by rpki-client on console-fra.rpki-client.org