Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F5QrZDLJXdakafsmbRHRbjXmpMI.roa
File: F5QrZDLJXdakafsmbRHRbjXmpMI.roa (raw, json)
Hash identifier: /7paVfw+G9j0YNE6RfhjLnqbxbNTWO7b+FPmIJkrOLk=
Subject key identifier: 17:94:2B:64:32:C9:5D:D6:A4:69:FB:26:6D:11:D1:6E:35:E6:A4:C2
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018BA4BAEE372F2F49B8F9A53D33BD10F083
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F5QrZDLJXdakafsmbRHRbjXmpMI.roa
Signing time: Mon 06 Nov 2023 13:03:15 +0000
ROA not before: Mon 06 Nov 2023 13:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.106.0/24 maxlen: 24
146.247.111.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.115.0/24 maxlen: 24
146.247.114.0/24 maxlen: 24
146.247.117.0/24 maxlen: 24
146.247.116.0/24 maxlen: 24
146.247.122.0/24 maxlen: 24
146.247.121.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
146.247.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:ba:ee:37:2f:2f:49:b8:f9:a5:3d:33:bd:10:f0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Nov 6 13:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17942b6432c95dd6a469fb266d11d16e35e6a4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:e5:79:fb:d0:34:26:b5:d1:2d:1c:0e:35:
eb:fd:34:e9:d5:b5:b2:3a:13:7d:dd:33:c7:d1:b6:
69:82:ec:4a:13:24:e0:8f:70:3e:12:7a:19:d3:f6:
12:1f:d9:01:fa:07:bb:a7:55:2b:29:97:71:ab:aa:
55:0f:33:80:ff:75:17:a0:1e:63:24:f6:40:0b:72:
63:fb:f1:93:e6:e4:38:96:2f:71:15:9d:ba:8a:0f:
b6:c9:a1:bf:d0:c4:31:90:22:cd:a9:f0:ef:a1:28:
77:8d:39:e2:fd:c8:ba:bb:c4:4a:48:b1:49:78:62:
ff:91:9c:da:35:08:14:00:17:0f:85:f1:1d:ce:8f:
22:bf:b6:3d:01:6c:fd:e5:5b:bb:21:75:a7:25:fa:
7f:ae:be:6d:f8:e5:5d:6c:dd:31:30:3b:38:34:53:
17:4c:80:e6:dd:6d:43:47:c5:17:39:1e:75:25:c7:
81:84:4e:2d:77:05:04:5e:6b:cb:c9:f6:bd:8d:46:
3a:95:f4:c8:90:66:4b:02:20:b8:a1:9f:cc:fa:72:
61:fc:17:49:7d:97:56:82:13:2d:c8:50:30:72:95:
70:5c:64:fa:20:a6:6b:25:66:c7:bf:db:ba:5b:d7:
34:62:4a:d6:37:15:50:2b:30:1d:ab:a2:0d:b0:a0:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:94:2B:64:32:C9:5D:D6:A4:69:FB:26:6D:11:D1:6E:35:E6:A4:C2
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/F5QrZDLJXdakafsmbRHRbjXmpMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.106.0-146.247.108.255
146.247.111.0-146.247.122.255
146.247.126.0/23
Signature Algorithm: sha256WithRSAEncryption
09:db:d1:9e:8e:07:40:da:d2:58:ca:c7:94:d9:fb:39:dd:bf:
72:d3:1e:11:ed:87:44:65:b2:a3:cc:ad:e3:dd:39:c5:23:f6:
bf:38:55:d7:39:aa:8e:ab:c3:bd:29:3b:5e:22:a3:a7:4c:49:
0a:b8:d4:60:97:5d:63:14:d3:99:c1:5e:12:a3:72:78:03:c6:
43:91:ca:07:61:85:d8:bb:58:0c:6a:8d:42:ee:b0:f4:e6:73:
61:cf:71:e8:4b:9c:f9:a9:ca:e6:ca:bb:c5:58:e4:f9:54:d7:
7f:2d:3b:d4:50:13:70:1c:c3:c8:6a:01:f6:fd:5c:ef:46:91:
61:7d:34:31:b7:0c:42:58:b7:59:47:3e:10:ea:f7:b1:84:53:
ff:ad:b0:09:81:62:98:4c:20:d8:70:11:0f:ec:6a:e2:60:30:
b8:9e:cc:93:27:fc:ce:4c:c1:62:d6:03:51:c4:d6:23:9f:d6:
54:68:5a:af:d8:b3:c8:3f:59:d1:f2:d8:a6:0a:7a:8f:ab:22:
b2:85:84:66:53:46:96:43:70:57:06:b6:fe:13:aa:3a:e0:fe:
23:37:0e:18:0d:6f:d0:1d:fe:22:38:78:e8:5b:1a:71:67:a0:
c0:62:91:a4:a5:5f:ef:a7:af:04:2a:20:cd:33:a6:28:a8:1a:
3e:af:05:88
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYukuu43Ly9JuPmlPTO9EPCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMxMTA2MTMwMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk0MmI2NDMyYzk1ZGQ2YTQ2OWZiMjY2ZDExZDE2ZTM1ZTZhNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpvlefvQNCa10S0cDjXr/TTp1bWy
OhN93TPH0bZpguxKEyTgj3A+EnoZ0/YSH9kB+ge7p1UrKZdxq6pVDzOA/3UXoB5j
JPZAC3Jj+/GT5uQ4li9xFZ26ig+2yaG/0MQxkCLNqfDvoSh3jTni/ci6u8RKSLFJ
eGL/kZzaNQgUABcPhfEdzo8iv7Y9AWz95Vu7IXWnJfp/rr5t+OVdbN0xMDs4NFMX
TIDm3W1DR8UXOR51JceBhE4tdwUEXmvLyfa9jUY6lfTIkGZLAiC4oZ/M+nJh/BdJ
fZdWghMtyFAwcpVwXGT6IKZrJWbHv9u6W9c0YkrWNxVQKzAdq6INsKC4OQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBeUK2QyyV3WpGn7Jm0R0W415qTCMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvRjVRclpETEpYZGFrYWZzbWJSSFJialhtcE1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGS92oD
BACS92wwDAMEAJL3bwMEAJL3egMEAZL3fjANBgkqhkiG9w0BAQsFAAOCAQEACdvR
no4HQNrSWMrHlNn7Od2/ctMeEe2HRGWyo8yt4905xSP2vzhV1zmqjqvDvSk7XiKj
p0xJCrjUYJddYxTTmcFeEqNyeAPGQ5HKB2GF2LtYDGqNQu6w9OZzYc9x6Euc+anK
5sq7xVjk+VTXfy071FATcBzDyGoB9v1c70aRYX00MbcMQli3WUc+EOr3sYRT/62w
CYFimEwg2HARD+xq4mAwuJ7Mkyf8zkzBYtYDUcTWI5/WVGhar9izyD9Z0fLYpgp6
j6sisoWEZlNGlkNwVwa2/hOqOuD+IzcOGA1v0B3+Ijh46FsacWegwGKRpKVf76ev
BCogzTOmKKgaPq8FiA==
-----END CERTIFICATE-----
Generated at Fri Dec 8 10:44:48 2023 by rpki-client on console-ams.rpki-client.org