Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uW0MbiMu5jByuNcgGl0ajwMX7wQ.roa
File: uW0MbiMu5jByuNcgGl0ajwMX7wQ.roa (raw, json)
Hash identifier: l7L+TzeJNfHAH6DpgQozvmM5h5f9TIkqRIobJBU4+Q8=
Subject key identifier: B9:6D:0C:6E:23:2E:E6:30:72:B8:D7:20:1A:5D:1A:8F:03:17:EF:04
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018CC7937DFC44EFAB0089A706A0373008D0
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uW0MbiMu5jByuNcgGl0ajwMX7wQ.roa
Signing time: Tue 02 Jan 2024 00:29:41 +0000
ROA not before: Tue 02 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:7d:fc:44:ef:ab:00:89:a7:06:a0:37:30:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b96d0c6e232ee63072b8d7201a5d1a8f0317ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:78:8d:28:4f:4f:e4:d1:37:c4:84:02:e6:
e3:09:9f:2c:db:0d:e6:89:28:05:8e:fd:68:23:d8:
b0:db:60:f5:95:89:6a:ee:86:c6:dc:75:73:ae:50:
8f:86:64:5a:e1:64:f8:ba:7f:b1:fa:da:6d:2d:f7:
16:e8:7a:46:4d:8f:20:16:de:9d:a4:0b:66:b7:27:
65:7d:56:cd:22:cc:a0:9d:3e:61:0f:6c:fc:cc:8a:
26:92:85:29:6d:9c:e9:e0:e8:37:0e:0f:0b:21:60:
0e:4f:13:ec:b2:fd:90:12:8d:70:ed:a5:ed:b8:ba:
d9:12:9b:06:6d:53:d6:24:23:43:e0:5d:36:d8:05:
29:d3:79:8b:fe:98:e4:c4:cb:7a:3f:6e:e5:f1:6e:
42:50:a9:e1:2a:c2:b8:ff:d8:2a:fb:45:36:a0:9c:
5a:d2:3e:11:4b:25:c7:88:02:0f:83:cd:44:3a:83:
8b:18:83:0e:07:4a:c9:26:ec:8c:7f:e8:51:b2:15:
be:b9:c8:b5:4d:cc:e9:65:87:39:0e:2e:50:b4:58:
84:60:96:7c:2d:9a:22:f3:4f:35:e5:3c:b4:13:8d:
32:9b:48:74:9d:52:0d:20:0a:07:b6:81:76:56:93:
8d:4c:ea:ae:ab:0e:00:76:19:a5:91:52:86:60:a4:
d7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6D:0C:6E:23:2E:E6:30:72:B8:D7:20:1A:5D:1A:8F:03:17:EF:04
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/uW0MbiMu5jByuNcgGl0ajwMX7wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:82:e9:68:d9:f3:ba:86:69:a7:09:59:aa:82:34:f4:b5:90:
92:ba:3b:2f:0e:ed:e4:62:7f:13:9f:c7:b1:58:e5:7c:bc:5c:
9f:3b:9a:67:20:d0:f2:f9:a2:d3:9d:e7:d4:de:66:23:28:9a:
af:2c:1e:f3:5c:ef:20:2c:81:f0:ce:dd:fe:f8:32:15:7e:e1:
81:96:5d:e2:e9:13:3c:2a:a6:26:22:b3:e9:06:9a:d3:2a:7b:
92:09:d7:68:61:84:00:46:02:a6:41:8c:8b:54:be:75:50:df:
f3:09:be:15:30:b5:d4:81:e8:84:8f:7d:9a:73:ee:fb:55:eb:
c9:87:c3:8b:1a:31:eb:48:9b:55:21:30:eb:39:e2:e4:aa:3c:
03:f6:d3:ce:fb:40:5f:04:5f:2a:ef:74:21:45:fe:7d:68:59:
f6:a6:ea:44:77:16:7f:1f:cb:02:83:70:86:9b:30:9d:a5:5d:
da:97:26:bf:0e:d5:a8:9c:8e:24:e7:8d:f1:7b:12:a7:bb:d5:
89:5c:fb:23:20:60:76:2e:36:eb:50:cc:12:8a:01:45:59:db:
01:ba:ee:52:12:64:bf:8b:28:a2:14:ba:f5:aa:fb:0f:09:bc:
ae:b8:5e:13:ab:46:0b:eb:d7:09:ea:56:64:76:86:f4:b8:0c:
e9:cc:aa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:34 2024 by rpki-client on console-ams.rpki-client.org