Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/DJWofeWcTzNgvd0ysvVy62qIAAE.roa
File: DJWofeWcTzNgvd0ysvVy62qIAAE.roa (raw, json)
Hash identifier: pp8vJdrx1tXtfvc8LnzOUiMnW6rqraLAUqkOg/MTlwk=
Subject key identifier: 0C:95:A8:7D:E5:9C:4F:33:60:BD:DD:32:B2:F5:72:EB:6A:88:00:01
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 01876D3A7C3AC62879C21DBBCC742D5C2C91
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/DJWofeWcTzNgvd0ysvVy62qIAAE.roa
Signing time: Mon 10 Apr 2023 22:12:42 +0000
ROA not before: Mon 10 Apr 2023 22:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 146.247.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:3a:7c:3a:c6:28:79:c2:1d:bb:cc:74:2d:5c:2c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 10 22:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c95a87de59c4f3360bddd32b2f572eb6a880001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:e8:4c:69:49:98:98:03:d4:ca:97:2b:42:
99:fd:6d:58:c8:06:c6:21:c0:df:ac:23:f3:6c:fa:
c5:1e:ff:3d:c2:2e:d4:16:cf:0d:3c:34:51:05:d7:
72:9c:2a:18:3e:8c:fe:e7:bd:f8:9f:fe:5f:12:5f:
b7:12:08:02:3b:22:63:3d:03:f7:39:d5:2c:54:ed:
c3:46:7f:a3:9d:e3:f1:1a:c8:fc:fd:00:8e:b4:fe:
d6:c5:f8:74:9f:24:57:bf:23:3e:bf:f3:1c:6e:27:
79:78:74:50:6d:89:e6:06:1d:82:ec:ab:3d:31:86:
c0:f9:87:32:d6:e5:fe:7a:3c:51:a7:e1:4c:9e:19:
58:9b:ed:b6:e1:d7:8c:2d:72:d4:03:f0:95:3a:c7:
36:4b:e1:9f:87:0f:75:e8:33:ca:e4:22:58:b7:d5:
0d:37:b9:d9:dd:6d:c1:cf:82:61:1b:64:2c:ad:4a:
57:50:32:01:44:16:3f:0e:2d:fb:c8:5b:2e:3d:33:
0f:6d:58:ce:2e:59:4d:a3:96:b1:48:be:3a:74:d8:
d7:49:33:5a:f3:52:76:8d:ef:6f:33:e7:79:44:35:
9c:2d:70:84:d1:5e:d0:e9:f3:24:c6:3d:41:42:65:
b7:ef:c4:aa:c4:9c:2a:6c:6f:bd:8f:e0:d2:ea:ef:
c4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:A8:7D:E5:9C:4F:33:60:BD:DD:32:B2:F5:72:EB:6A:88:00:01
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/DJWofeWcTzNgvd0ysvVy62qIAAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:95:e4:0d:f4:94:dc:56:36:b7:3e:57:92:25:47:e7:81:8e:
b7:a4:30:8c:fc:4a:7b:2f:66:e3:e0:65:a2:df:3b:ce:7a:f0:
b3:10:6d:4e:16:c0:9a:19:77:7a:8c:55:20:c6:3b:2b:45:f5:
7d:2a:39:b4:19:8b:7e:5c:ad:71:7e:ac:09:3c:f5:ac:21:53:
56:3d:1d:d3:9e:34:a3:d9:96:19:81:aa:e6:01:13:42:6f:de:
2a:7f:cb:d7:10:f9:cc:39:d9:23:4b:6f:1f:c4:55:0c:8b:1f:
d3:9d:21:bb:2b:36:20:72:14:b6:d7:a0:16:3c:0d:66:e1:b9:
23:9a:55:64:d3:a8:f0:ce:99:bc:ab:c3:5a:28:cd:9f:32:ec:
70:a2:a6:c7:7f:a7:9a:ba:2a:20:76:9f:69:3c:48:b3:2b:44:
47:05:fa:e8:f2:74:63:b5:0b:92:85:29:8e:79:3b:b4:27:01:
7b:f5:35:58:03:e1:47:b9:9b:09:b8:a9:55:f5:c6:1d:68:f1:
e3:92:a0:cb:e6:d5:66:7a:72:10:4c:ea:2c:9d:28:a3:cb:c8:
bf:36:bc:16:90:d3:88:23:ee:ec:08:fa:a1:41:6e:e7:3e:25:
c2:fd:ee:bb:5d:12:1a:b4:74:56:34:6d:5d:6d:db:22:b2:df:
cd:51:29:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdtOnw6xih5wh27zHQtXCyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwNDEwMjIxMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzk1YTg3ZGU1OWM0ZjMzNjBiZGRkMzJiMmY1NzJlYjZhODgwMDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdDoTGlJmJgD1MqXK0KZ/W1YyAbG
IcDfrCPzbPrFHv89wi7UFs8NPDRRBddynCoYPoz+5734n/5fEl+3EggCOyJjPQP3
OdUsVO3DRn+jnePxGsj8/QCOtP7Wxfh0nyRXvyM+v/Mcbid5eHRQbYnmBh2C7Ks9
MYbA+Ycy1uX+ejxRp+FMnhlYm+224deMLXLUA/CVOsc2S+Gfhw916DPK5CJYt9UN
N7nZ3W3Bz4JhG2QsrUpXUDIBRBY/Di37yFsuPTMPbVjOLllNo5axSL46dNjXSTNa
81J2je9vM+d5RDWcLXCE0V7Q6fMkxj1BQmW378SqxJwqbG+9j+DS6u/E6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyVqH3lnE8zYL3dMrL1cutqiAABMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvREpXb2ZlV2NUek5ndmQweXN2Vnk2MnFJQUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdtMA0G
CSqGSIb3DQEBCwUAA4IBAQAMleQN9JTcVja3PleSJUfngY63pDCM/Ep7L2bj4GWi
3zvOevCzEG1OFsCaGXd6jFUgxjsrRfV9Kjm0GYt+XK1xfqwJPPWsIVNWPR3TnjSj
2ZYZgarmARNCb94qf8vXEPnMOdkjS28fxFUMix/TnSG7KzYgchS216AWPA1m4bkj
mlVk06jwzpm8q8NaKM2fMuxwoqbHf6eauiogdp9pPEizK0RHBfro8nRjtQuShSmO
eTu0JwF79TVYA+FHuZsJuKlV9cYdaPHjkqDL5tVmenIQTOosnSijy8i/NrwWkNOI
I+7sCPqhQW7nPiXC/e67XRIatHRWNG1dbdsist/NUSll
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org