Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/y0GkZ3ypM7C8G7ge8pKYHzjaklU.roa
File: y0GkZ3ypM7C8G7ge8pKYHzjaklU.roa (raw, json)
Hash identifier: 5PsOJtJSuA1YVZmzsqW/Q28wekdKYEXs1uFaIRbjTlw=
Subject key identifier: CB:41:A4:67:7C:A9:33:B0:BC:1B:B8:1E:F2:92:98:1F:38:DA:92:55
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018772452E626B341AF9247A83EAE21E8CD9
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/y0GkZ3ypM7C8G7ge8pKYHzjaklU.roa
Signing time: Tue 11 Apr 2023 21:42:29 +0000
ROA not before: Tue 11 Apr 2023 21:42:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 146.247.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:72:45:2e:62:6b:34:1a:f9:24:7a:83:ea:e2:1e:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 11 21:42:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb41a4677ca933b0bc1bb81ef292981f38da9255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:37:42:90:aa:35:a6:54:76:f9:40:b3:e9:
4c:88:c7:b4:8a:0e:ce:e0:0e:99:a6:8e:ca:cd:ca:
2f:4f:20:d9:bc:40:4d:1f:db:fd:61:ed:d3:a5:f4:
5f:2f:8c:3a:97:98:51:58:eb:59:38:94:49:c1:ad:
9b:c2:da:fc:2e:1a:11:05:bd:d6:68:8d:77:9b:7e:
6a:22:16:5f:eb:fd:c3:9e:b9:53:b7:6c:f0:71:c8:
ac:2a:31:af:d2:61:03:ea:98:5e:c5:87:de:ff:eb:
ea:da:24:5e:db:79:67:d2:70:b5:ff:1a:28:d3:ed:
1f:fc:b2:f2:09:ab:2d:f7:01:cb:8f:3c:96:b5:2b:
c1:05:40:87:31:b1:5b:b9:09:d3:a7:b7:08:e9:a8:
78:3c:25:bf:19:81:60:a2:30:8c:9b:9e:d8:bf:04:
5e:8c:7c:5e:8b:65:69:8a:4a:95:98:59:d0:fa:92:
ba:88:53:1e:ba:2c:e8:74:0b:47:d1:71:af:37:e3:
87:77:cf:4b:2b:bf:3d:8e:b9:28:56:90:2a:cf:57:
0d:b0:5a:fa:42:34:a7:00:05:76:f4:41:64:71:85:
7a:cf:6a:02:7c:91:45:ce:2f:de:e3:b4:4c:af:44:
23:d4:7a:a2:c1:74:cb:25:b8:1d:56:9b:e9:c6:67:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:A4:67:7C:A9:33:B0:BC:1B:B8:1E:F2:92:98:1F:38:DA:92:55
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/y0GkZ3ypM7C8G7ge8pKYHzjaklU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
37:23:79:47:22:77:a9:a0:95:10:0b:19:24:80:fb:91:7f:00:
79:58:ea:30:e8:b3:4c:7c:d4:90:ca:db:ed:31:26:f5:6d:3b:
eb:f7:b9:69:df:3d:73:00:96:51:b5:3e:6c:b3:a1:ab:21:ea:
4a:23:37:1d:d5:b3:82:4d:62:25:97:b7:3a:6c:bc:07:b2:89:
95:bd:70:ea:38:04:14:d2:4c:30:37:bb:f2:3b:57:bf:e2:4b:
fc:b2:a0:bf:e0:47:d7:34:37:c6:0b:f9:88:b6:a4:8d:96:8e:
92:e8:5b:27:10:89:a4:99:63:bd:61:2d:37:33:d0:2e:fa:6c:
9c:07:ea:7e:87:eb:80:14:a2:3d:64:0a:11:47:a4:05:97:8f:
d1:71:83:96:a5:49:80:f3:ee:20:fa:c5:8a:f8:9f:5e:a1:24:
c9:63:ad:35:db:ba:1f:4a:c8:e2:a4:f8:f4:82:86:db:c5:6e:
0d:89:4e:04:e1:65:be:a4:71:28:91:a3:34:ef:29:58:a9:58:
9a:9f:ae:8a:a4:aa:20:49:06:f3:cf:df:90:be:42:f5:0e:a8:
cb:15:a5:57:7a:7a:7f:8a:95:a7:7f:0b:0a:31:a4:a4:5e:fd:
9b:5c:2c:fa:63:ac:e9:d3:76:28:69:06:ce:a7:46:15:2d:0b:
e8:c0:d6:d9
-----BEGIN CERTIFICATE-----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Generated at Wed Dec 6 23:14:37 2023 by rpki-client on console-ams.rpki-client.org