Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/x3BCTl-bQ6mL-vVs3EYsypyN888.roa
File: x3BCTl-bQ6mL-vVs3EYsypyN888.roa (raw, json)
Hash identifier: c/1SmKNmyO2wxay0BCohulbq+Zz4y+Q/A2sQOVWlZ7Q=
Subject key identifier: C7:70:42:4E:5F:9B:43:A9:8B:FA:F5:6C:DC:46:2C:CA:9C:8D:F3:CF
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018B0AC4131B31DFC621065C0C326C2F0BFB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/x3BCTl-bQ6mL-vVs3EYsypyN888.roa
Signing time: Sat 07 Oct 2023 15:31:43 +0000
ROA not before: Sat 07 Oct 2023 15:31:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.106.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:c4:13:1b:31:df:c6:21:06:5c:0c:32:6c:2f:0b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 7 15:31:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c770424e5f9b43a98bfaf56cdc462cca9c8df3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:67:4e:34:62:8f:06:ab:bd:15:11:58:58:23:
6a:3e:50:b9:82:7f:1a:bf:3d:ca:a3:7d:2d:2c:df:
c6:1d:01:c8:7b:35:c8:18:b5:2c:e4:35:c5:c2:df:
f9:61:14:86:6e:44:d8:8a:f6:6b:a7:38:64:9f:2c:
7f:af:71:66:5e:a2:c0:59:f0:6d:79:d2:d0:03:49:
30:d8:88:34:c3:0a:25:58:43:a8:6a:ac:d1:b6:4d:
14:19:4b:b9:91:93:2d:cd:99:e7:70:3a:62:d5:39:
23:44:47:29:b0:f1:7f:88:e2:ce:ea:8c:24:d7:6a:
67:9d:9e:d7:1d:02:40:3c:71:79:69:9a:6d:15:88:
a7:9c:12:a7:47:83:e7:d6:1d:d5:02:ec:07:d5:0b:
f4:0f:e7:6e:02:f2:fe:15:dc:59:7c:8e:2b:26:1c:
bc:50:1f:6a:71:d9:71:da:25:59:82:a8:90:db:57:
11:13:20:b6:17:d5:7b:e6:b9:c5:01:c0:59:37:8b:
5c:ca:03:92:d5:a4:e6:c3:c2:31:9f:06:89:94:f5:
2d:d3:73:01:61:8e:e1:f4:b0:52:87:f4:cb:03:d6:
ca:ab:7a:b8:87:40:33:73:6c:26:34:b9:49:40:72:
bb:a0:10:66:53:f8:6d:30:e1:31:c6:14:5e:35:ed:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:42:4E:5F:9B:43:A9:8B:FA:F5:6C:DC:46:2C:CA:9C:8D:F3:CF
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/x3BCTl-bQ6mL-vVs3EYsypyN888.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0-146.247.108.255
146.247.111.0-146.247.122.255
146.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9f:4a:94:b5:c8:55:6f:a9:af:32:1a:66:d1:16:50:00:42:
8c:79:4c:53:a3:49:6a:7b:53:8c:df:ba:25:af:31:ed:a5:14:
3b:0e:45:65:21:1a:bf:44:0d:c3:a6:7e:da:7a:da:a9:3c:be:
ca:a1:d3:6a:35:63:8d:01:9e:8f:67:f1:fb:78:00:db:cc:b1:
ee:34:2b:f9:1c:f7:06:20:a6:06:61:86:b5:85:13:33:03:22:
f8:f7:31:b6:b7:5d:9d:e7:71:f9:8a:83:ac:d6:a6:c6:ec:b1:
4e:03:e5:be:36:ea:f7:8f:27:a5:e8:03:80:3c:86:94:80:57:
2e:26:ba:a7:97:fb:a1:05:16:8f:f2:fa:be:cb:f7:ac:99:2c:
46:a9:fa:40:59:fc:f1:b0:4a:1d:34:4f:3c:fe:f7:c5:ed:7a:
f5:04:a9:d6:0e:12:e3:b5:63:64:33:c5:29:5a:d3:cf:d5:05:
c8:70:2f:37:9a:7f:9c:ad:2c:a5:9e:2a:9c:8a:39:3b:fc:4a:
0f:8d:49:ae:0a:43:e2:1e:16:a0:aa:1f:38:e2:94:b8:a9:d1:
9d:60:5a:b9:5f:0c:a2:c2:85:b3:ec:10:e7:02:e7:4c:2d:96:
6e:bf:c2:2f:43:ea:b8:cc:9b:de:ab:e2:00:86:9a:9d:02:e5:
f5:cb:46:33
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 6 13:42:37 2023 by rpki-client on console-fra.rpki-client.org