Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/t6jwcv3VMaNNV_sVWPtnGyDTXw8.roa
File: t6jwcv3VMaNNV_sVWPtnGyDTXw8.roa (raw, json)
Hash identifier: LGQbjnPldSl8DYSv4QtB/MVdm8+hqyp7eMhXTIEUBs8=
Subject key identifier: B7:A8:F0:72:FD:D5:31:A3:4D:57:FB:15:58:FB:67:1B:20:D3:5F:0F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF11E21CEB056C2AA9F956FDD0166F
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/t6jwcv3VMaNNV_sVWPtnGyDTXw8.roa
Signing time: Mon 02 Jan 2023 14:24:59 +0000
ROA not before: Mon 02 Jan 2023 14:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212384
IP address blocks: 146.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 00:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:11:e2:1c:eb:05:6c:2a:a9:f9:56:fd:d0:16:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7a8f072fdd531a34d57fb1558fb671b20d35f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:82:53:cf:a5:f8:39:f3:e1:f4:42:13:91:
e8:ab:fa:87:f9:cf:63:d6:d1:09:2d:1f:74:d2:70:
3a:1a:dd:7b:80:fd:ac:f5:ed:62:0e:38:da:56:14:
6b:06:44:fb:ad:37:42:41:42:75:84:5c:10:59:35:
b2:9b:ae:3c:27:4a:62:12:00:dc:fc:e7:72:88:f1:
c4:93:cb:fd:f3:1c:0a:83:ab:e1:77:c7:5d:0c:fa:
60:bf:92:c8:c6:15:39:e1:b0:30:94:e9:7a:9e:6e:
d4:dd:61:59:40:45:75:87:76:7b:15:51:ef:ca:df:
7d:d2:7b:93:3c:e3:83:59:c2:12:23:a4:2f:93:73:
ed:60:fa:b4:c7:62:07:64:d4:ad:3b:54:a1:ce:f9:
cc:ff:ee:52:b5:57:26:06:e9:64:bf:15:67:6d:14:
b6:af:8f:36:90:56:34:23:bb:ba:b5:a3:0c:dc:bb:
41:a1:04:a5:7e:a0:51:0a:03:ee:0a:dc:94:f4:3f:
1d:8d:82:61:7c:e9:f2:c0:09:77:af:0a:4c:67:c4:
e9:c5:cf:e0:2e:94:f4:a3:6b:80:cf:c3:0c:dd:66:
70:44:d4:73:a2:9e:95:31:2b:ec:9c:99:6b:57:fa:
be:b5:5f:40:aa:d9:48:17:df:cc:a0:33:b6:32:9c:
ad:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A8:F0:72:FD:D5:31:A3:4D:57:FB:15:58:FB:67:1B:20:D3:5F:0F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/t6jwcv3VMaNNV_sVWPtnGyDTXw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0/24
Signature Algorithm: sha256WithRSAEncryption
89:df:23:c5:5b:a1:77:ba:c7:74:74:ae:51:bb:bc:08:77:64:
6f:fd:16:68:92:93:f6:be:90:f6:0b:f8:80:f3:8b:8b:92:ab:
62:64:6c:fa:c7:69:03:5a:95:fc:52:f5:d8:db:cf:3b:0a:df:
82:67:95:a2:08:f3:44:78:b0:a2:2d:10:db:f1:1d:34:c8:a3:
38:4a:8f:17:b4:1e:53:30:e2:76:91:e3:cc:39:2e:e1:81:62:
65:06:35:30:19:01:36:7c:4d:25:5b:7a:08:d1:9c:54:ac:74:
ec:72:17:0c:8c:5e:18:a9:03:66:e4:21:4e:e8:fe:82:2a:15:
99:2b:32:7f:a8:10:b0:48:a4:61:cf:6a:26:d2:a2:19:5e:aa:
ec:05:ad:a4:3c:61:5e:7a:c6:01:e8:0b:f5:52:00:00:6c:8a:
b7:13:78:93:a4:98:64:1d:82:d5:d4:1d:0b:2d:45:e3:dc:97:
d4:fc:b1:6e:e2:9a:1a:e5:d6:68:0b:52:8a:cb:03:1f:82:c7:
50:9e:31:19:6c:93:53:27:4f:31:c0:a7:e1:1e:d4:23:46:ee:
65:58:83:f2:df:51:f1:3b:ba:f6:e8:d9:9d:d8:ad:96:02:a2:
35:6a:6f:30:14:90:19:7d:6c:15:74:4c:96:e0:28:0a:f3:39:
69:2f:46:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org