Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0gK15DVi9JnmRxVIfCDMyptMC0c.roa
File: 0gK15DVi9JnmRxVIfCDMyptMC0c.roa (raw, json)
Hash identifier: 1yJBk2IrHcGO0nauwKF1HDM/SWNpI6pMVyiDdHP7BbA=
Subject key identifier: D2:02:B5:E4:35:62:F4:99:E6:47:15:48:7C:20:CC:CA:9B:4C:0B:47
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01867514A273EA3A86612BFAF43860DCF136
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0gK15DVi9JnmRxVIfCDMyptMC0c.roa
Signing time: Tue 21 Feb 2023 17:45:31 +0000
ROA not before: Tue 21 Feb 2023 17:45:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:14:a2:73:ea:3a:86:61:2b:fa:f4:38:60:dc:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Feb 21 17:45:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d202b5e43562f499e64715487c20ccca9b4c0b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:0e:d4:6b:98:79:dc:a0:99:2b:d0:36:25:
20:44:f3:66:1b:2e:ee:76:e2:96:a7:dc:73:02:15:
4a:75:30:c3:35:19:23:9b:21:81:4d:ff:63:d1:00:
dd:f0:ea:aa:db:ae:49:c6:84:66:fa:70:d8:8c:bb:
a9:9f:8d:34:d5:cb:75:4a:df:0f:99:a0:61:b7:ba:
c6:fb:84:61:94:b7:20:1f:e1:a4:f7:03:01:4f:89:
83:01:38:3c:6f:fa:f3:ea:97:5b:7c:7f:fe:f2:e8:
df:5c:cf:2a:de:21:e2:5b:c3:7f:bd:01:c1:dd:33:
e8:25:1a:de:38:21:d5:1b:88:fa:c4:3a:ca:1c:f4:
01:35:81:cc:bd:f3:4f:ce:a6:cc:94:47:37:a0:b5:
33:bf:8a:04:0d:ad:5c:cd:4e:14:58:1b:71:ac:b8:
bc:3b:f7:1c:93:ca:41:f0:48:71:f4:c6:80:39:0e:
ce:15:cc:ae:b5:fb:8f:88:0c:e8:1b:1b:fa:f1:8c:
d8:57:d4:3f:30:a7:85:73:5b:8e:a7:e7:2a:ba:fd:
96:b9:ca:ba:aa:98:07:9d:16:b8:2e:7f:9f:34:53:
69:70:06:8f:c3:51:c3:4f:7b:af:fb:40:2d:e4:5b:
01:9c:3a:74:d2:65:f6:96:c7:8a:e3:47:bb:fa:38:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:02:B5:E4:35:62:F4:99:E6:47:15:48:7C:20:CC:CA:9B:4C:0B:47
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/0gK15DVi9JnmRxVIfCDMyptMC0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
Signature Algorithm: sha256WithRSAEncryption
44:8c:55:80:af:fb:38:97:10:8b:04:f4:dd:33:c5:a9:49:b6:
1c:86:b6:d0:72:48:84:98:16:14:75:e6:11:d9:70:5c:9f:18:
a5:77:cb:4f:ff:16:fa:8c:e4:b8:59:70:40:be:be:1e:5b:12:
38:39:4b:8f:49:bf:2f:55:63:64:58:0a:c9:3b:c8:ed:bc:0c:
48:7a:8b:b5:42:be:bb:63:33:75:cc:72:df:70:a9:4b:fd:3e:
40:41:d9:2b:df:32:e9:ef:2a:18:f3:d4:e8:78:8d:0a:02:6c:
a6:e5:07:6a:c0:6e:2d:a8:52:44:b8:44:99:74:a1:ea:23:1d:
2b:67:70:31:8f:03:bb:c8:88:6d:c6:89:f2:e8:59:a9:02:68:
0e:a3:38:6f:67:7e:a5:a6:b5:f4:42:d0:a3:ba:76:0b:e1:d0:
bb:71:8e:3f:55:2e:2b:4d:2c:e0:e1:66:fe:a8:bd:f7:e2:46:
ca:47:7b:d0:a0:72:3d:05:a8:24:07:4d:12:c8:bd:9a:17:73:
d9:b4:bd:5f:0f:18:c3:84:fa:a1:01:91:f7:61:19:df:91:5c:
07:be:70:47:e8:6a:a0:3f:47:6d:2a:3b:67:ae:dc:cc:23:f2:
07:7f:6f:a3:7c:73:13:01:28:5a:23:5b:38:33:b8:82:a9:e5:
08:30:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 12:32:34 2023 by rpki-client on console-ams.rpki-client.org