Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/yhYi2CVX1PLo9_74C6UXBAQRaso.roa
File: yhYi2CVX1PLo9_74C6UXBAQRaso.roa (raw, json)
Hash identifier: m+ssK9b0LgtcAgS/28pLTUAjA1TsoUR2ZgdvbcUOScs=
Subject key identifier: CA:16:22:D8:25:57:D4:F2:E8:F7:FE:F8:0B:A5:17:04:04:11:6A:CA
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0189551CB5E16066DF65E7A76E6677FD0382
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/yhYi2CVX1PLo9_74C6UXBAQRaso.roa
Signing time: Fri 14 Jul 2023 15:54:52 +0000
ROA not before: Fri 14 Jul 2023 15:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:1c:b5:e1:60:66:df:65:e7:a7:6e:66:77:fd:03:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jul 14 15:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca1622d82557d4f2e8f7fef80ba5170404116aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:be:63:7f:23:08:c7:7c:51:76:f7:54:23:
f8:2d:f9:f1:d9:99:fb:b2:c6:e3:b9:c6:e7:06:f0:
00:d3:65:85:01:c3:ab:fd:30:28:d2:97:12:46:c0:
8f:08:af:ad:1f:98:f7:1f:fc:b4:89:ec:c5:83:7b:
b0:87:73:bf:4d:32:f8:8c:94:ba:8c:e0:f7:7c:13:
c3:d1:39:c8:c5:b3:cf:c3:42:ad:df:a7:13:1b:51:
9c:2f:f4:b1:6a:a2:9d:5e:1b:69:40:1a:29:f5:93:
a0:ec:98:ce:cf:49:df:d2:53:cb:b3:4b:e6:3b:e0:
72:82:39:f4:e0:fa:0f:03:38:46:91:4e:0a:10:d9:
55:1d:81:52:25:50:1f:47:55:3c:8a:46:c9:49:95:
8b:a2:73:c0:cf:d6:98:a5:95:db:59:6c:35:12:fa:
d2:5d:f6:b4:47:83:f7:b1:cb:71:15:15:83:0d:5b:
c3:b0:e7:02:cf:f1:96:a4:7b:0c:a8:fa:19:40:f0:
6b:b1:2a:8a:68:43:94:81:09:05:ab:a7:8f:58:77:
73:0e:e2:ba:8a:ab:87:59:af:ba:27:23:ec:58:f0:
6a:f1:ae:17:2c:80:7e:04:ae:12:ac:50:d9:66:08:
94:b4:01:09:8b:69:ec:dd:46:ea:0a:5b:8b:49:15:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:22:D8:25:57:D4:F2:E8:F7:FE:F8:0B:A5:17:04:04:11:6A:CA
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/yhYi2CVX1PLo9_74C6UXBAQRaso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c1:df:76:50:78:aa:37:d2:55:cb:d2:54:b7:73:b0:f3:1a:
ad:a2:51:cc:81:3a:fa:41:9e:28:8d:35:ab:40:26:91:44:b7:
ae:2f:8f:03:6e:8a:32:73:32:6f:49:c7:ba:94:8a:a1:20:85:
44:c0:0a:90:8c:ca:05:b5:8e:4c:5e:27:d5:2f:4d:6f:48:3b:
16:0b:19:3f:f9:43:30:ee:f1:f1:da:0f:d2:89:c7:93:8e:ca:
73:bf:8e:f6:26:0a:d6:4d:bd:71:7b:11:69:2d:63:43:b2:ad:
a6:07:4b:7f:65:97:8e:9c:e8:bd:f1:e7:cf:0c:09:d0:e6:fc:
1c:0c:52:46:57:56:7f:ca:fd:c8:1a:4f:e5:eb:ef:08:15:59:
32:ac:92:24:65:90:75:90:7c:55:c6:24:90:f6:34:e1:20:f3:
9a:d5:e5:22:87:87:bb:4b:92:0d:9b:3f:b1:45:87:6d:10:36:
1d:20:fb:6e:55:d9:db:8c:bd:c2:7a:73:e6:f1:86:1a:e5:87:
b3:9a:5a:c1:e4:0c:62:f1:d4:8c:ff:97:ca:d4:25:ad:61:98:
25:4c:5a:d2:c5:2c:43:22:12:71:f8:80:32:61:fc:32:9d:56:
eb:a2:cd:b2:83:c9:6b:86:68:8c:65:2a:51:c6:39:a6:06:e7:
6d:54:04:ef
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 12:36:29 2023 by rpki-client on console-fra.rpki-client.org