Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ApbPNF25WAvzzWFTJ6sCV7OuENo.roa
File: ApbPNF25WAvzzWFTJ6sCV7OuENo.roa (raw, json)
Hash identifier: cF7g0PlBG7DYbniYGBjage0bovpTDuKCc0Mr8zcut3U=
Subject key identifier: 02:96:CF:34:5D:B9:58:0B:F3:CD:61:53:27:AB:02:57:B3:AE:10:DA
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A98CC251CDBF5AFCD8152B12CB8FA758D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ApbPNF25WAvzzWFTJ6sCV7OuENo.roa
Signing time: Fri 15 Sep 2023 12:23:50 +0000
ROA not before: Fri 15 Sep 2023 12:23:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 15:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:cc:25:1c:db:f5:af:cd:81:52:b1:2c:b8:fa:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 15 12:23:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0296cf345db9580bf3cd615327ab0257b3ae10da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:15:ed:23:b1:0c:d1:f0:a5:63:0c:94:e0:
3e:b3:4c:f7:5e:07:18:c9:aa:d7:c0:3c:b6:4d:83:
49:7f:87:d2:b9:8a:3a:64:6f:a3:2e:e4:d7:99:bc:
6e:4c:fd:71:34:e9:ba:9b:65:f8:89:a9:76:5e:5a:
a1:dd:89:04:60:2e:8f:a7:75:30:31:66:7f:4b:76:
e4:fa:3e:c1:a5:c2:c2:55:4c:f1:f8:33:7a:7a:2b:
43:57:9e:fb:bb:bd:89:86:50:ad:e5:a6:82:2a:2a:
ca:8f:f9:08:34:40:a0:0b:3e:12:89:20:a2:56:f0:
d8:f4:c3:fd:03:9d:fc:80:5b:d1:3e:c6:a8:8f:d0:
67:73:4f:9c:40:cd:fb:50:d9:0b:00:a9:04:9c:ce:
79:22:f7:15:93:c2:7b:de:e7:77:98:f8:1d:4e:8f:
ea:68:33:12:ce:4c:ed:13:ac:df:08:fc:79:7a:8f:
a6:72:c7:c8:1b:9b:ee:3d:6e:bb:9a:e1:8c:af:86:
1a:7c:6d:1c:8b:a7:32:42:cf:88:9e:d5:b7:b7:e8:
1e:c4:0f:16:fe:04:d8:dd:80:95:57:4d:e1:30:e5:
aa:bc:bd:05:54:92:ba:6a:97:27:51:66:84:f1:71:
59:34:f5:2e:ce:af:1c:a6:13:91:ce:6c:73:5b:3d:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:CF:34:5D:B9:58:0B:F3:CD:61:53:27:AB:02:57:B3:AE:10:DA
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/ApbPNF25WAvzzWFTJ6sCV7OuENo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
146.247.121.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fe:70:37:34:af:0b:a9:82:84:1b:05:0a:60:f7:5e:05:ff:
66:64:d6:a8:65:72:6d:71:44:0d:9f:4c:12:ba:c8:13:00:4c:
7c:28:5d:8a:fb:b1:b3:06:4f:79:c7:e2:bc:2b:dd:ff:cb:57:
0d:ce:ff:82:48:c6:d8:8a:50:83:29:00:9a:b9:a5:50:70:8f:
aa:b9:2f:cc:05:17:2b:bc:a4:f3:02:a1:67:73:d1:52:ed:15:
bc:15:29:db:ab:2e:6a:35:4d:92:de:da:8e:cf:01:c4:e9:d9:
74:d0:44:d3:29:4c:39:cc:6c:38:00:32:62:88:ee:2d:df:c8:
1c:98:60:48:b1:33:5f:e9:8a:5e:07:e2:dd:85:8f:a4:e9:f4:
a7:36:5c:8a:60:b3:c0:57:cf:66:5c:15:1b:2c:14:54:73:2c:
a8:2e:b7:f4:72:fc:0e:54:1e:e4:ea:68:4c:4e:4e:67:66:77:
4b:a9:2b:0e:0d:69:27:db:60:d6:44:e6:44:28:1a:c3:2f:bd:
de:72:92:ad:b8:39:c8:76:0e:a6:f4:da:4d:b0:3f:0b:90:19:
bb:40:de:69:21:f5:96:11:58:8f:c5:58:8b:1a:b7:1b:ce:16:
37:d5:a4:cf:a5:71:08:9d:63:99:e6:85:cc:1f:9a:30:7f:12:
f7:f5:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org