Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/xKiuqtFZ8kRjMPC787PKZymj8xo.roa
File: xKiuqtFZ8kRjMPC787PKZymj8xo.roa (raw, json)
Hash identifier: 2Klxal3ugWjUHfZo4kZWAYGNOo6OBPZjJ8iiUh84qpE=
Subject key identifier: C4:A8:AE:AA:D1:59:F2:44:63:30:F0:BB:F3:B3:CA:67:29:A3:F3:1A
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018692FD17F9BE3E054662375EAB474920E9
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/xKiuqtFZ8kRjMPC787PKZymj8xo.roa
Signing time: Mon 27 Feb 2023 13:08:25 +0000
ROA not before: Mon 27 Feb 2023 13:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 146.247.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:fd:17:f9:be:3e:05:46:62:37:5e:ab:47:49:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 27 13:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4a8aeaad159f2446330f0bbf3b3ca6729a3f31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fb:8e:c1:b3:58:74:0e:c5:cb:83:e5:70:31:
b2:2f:26:eb:84:cf:7f:1f:f1:08:91:63:67:56:4e:
74:10:b4:4f:f4:3a:fd:75:f1:24:bc:25:e7:1b:c5:
11:d9:83:c2:0a:3d:26:11:9d:52:bb:9e:67:68:4b:
95:53:b2:2a:6f:14:7b:a3:27:04:b8:64:f0:fe:3c:
af:b7:ec:d5:af:f4:7d:fd:fc:ae:63:9a:34:c9:77:
01:72:7f:2e:94:ab:32:03:7d:e1:88:3e:bf:13:65:
f5:9d:da:ba:e1:c1:aa:aa:9d:47:2b:91:63:cc:5f:
40:d4:42:74:ab:0b:6d:55:01:2d:6d:47:fc:a0:40:
59:9d:cb:5e:b8:90:dd:8e:c7:24:a1:66:cb:65:df:
02:16:21:55:8d:d5:db:7f:e1:98:51:ed:d1:a9:52:
9c:e8:24:cd:ec:42:a3:6b:23:75:cf:1b:0f:9a:89:
bd:cc:25:e0:71:91:a4:0a:82:9d:76:b5:5d:05:a8:
00:c2:da:e0:bf:42:8e:63:3b:09:f3:c2:d9:43:71:
b3:13:85:3b:db:34:d6:b0:30:c2:06:4e:4f:b7:a3:
df:fd:6f:ad:1f:ea:2d:c0:17:07:d3:9e:37:2c:cd:
48:7c:1f:b7:44:95:9c:5f:6e:c8:f8:99:dd:dd:d3:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:AE:AA:D1:59:F2:44:63:30:F0:BB:F3:B3:CA:67:29:A3:F3:1A
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/xKiuqtFZ8kRjMPC787PKZymj8xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:54:ce:1c:76:b1:fb:fb:ff:f0:a8:76:68:9e:e2:3c:db:ca:
70:70:53:da:5d:39:70:f9:b5:43:57:1f:45:34:0e:72:7d:3b:
b4:4d:53:0d:1a:ba:9b:b3:03:28:b6:04:d3:3a:7a:42:a2:8b:
9a:1c:fa:ed:35:fe:37:33:7f:01:24:5a:df:cd:e9:76:06:58:
84:3a:12:84:89:d1:81:db:ed:84:c3:52:8e:58:94:05:5c:05:
30:e8:aa:0f:b2:50:7d:ca:a2:c5:a8:17:59:29:0b:1d:50:18:
b3:b4:52:cf:91:94:5f:16:55:0f:65:e1:e2:07:60:28:fd:d6:
2b:cd:4a:1c:5c:ed:0e:73:4e:75:3a:55:48:c2:ee:c0:21:19:
45:80:31:10:7c:eb:12:23:d8:12:95:e5:bb:67:1c:40:9d:96:
68:bc:9a:46:3b:42:d7:55:f1:88:0e:ef:87:5b:fc:f7:c8:4d:
37:57:cd:61:68:4e:ad:1e:b4:7f:11:a8:3d:67:8f:be:53:55:
76:ff:8f:13:5d:cc:2e:43:99:59:f4:bb:1f:da:4f:5f:55:f8:
f4:7f:6a:0e:9e:09:42:85:80:d1:0f:71:a6:e1:6a:cc:b0:5a:
7e:ce:19:bc:2f:00:f3:a6:46:c9:dc:a8:ce:43:a8:03:51:80:
fc:8b:8c:3f
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 22 12:19:24 2023 by rpki-client on console-ams.rpki-client.org