Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/N2bEgMlKRDmuXrBDg1MGtvKMreA.roa
File: N2bEgMlKRDmuXrBDg1MGtvKMreA.roa (raw, json)
Hash identifier: UuSokCOWaVnPSTaH1zrTNpzH9TMbJHhZJX2cD86Ol24=
Subject key identifier: 37:66:C4:80:C9:4A:44:39:AE:5E:B0:43:83:53:06:B6:F2:8C:AD:E0
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018593D70A21024769FEB269511BE9FF35C4
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/N2bEgMlKRDmuXrBDg1MGtvKMreA.roa
Signing time: Mon 09 Jan 2023 00:03:41 +0000
ROA not before: Mon 09 Jan 2023 00:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.120.0/24 maxlen: 24
146.247.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:93:d7:0a:21:02:47:69:fe:b2:69:51:1b:e9:ff:35:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 9 00:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3766c480c94a4439ae5eb043835306b6f28cade0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:48:35:20:7b:be:54:b6:5a:c2:77:c7:cc:
25:41:7b:7a:ca:56:9a:ec:4c:c0:f2:82:4f:56:b6:
e6:18:b5:ee:d1:28:40:98:dc:12:de:cb:c3:59:c2:
a7:d0:dd:c2:86:d0:58:a2:a0:40:b0:9c:9c:96:b8:
34:03:53:ee:54:9e:a3:b3:64:3b:91:60:11:d5:95:
0d:79:1d:94:fa:68:fc:19:40:8a:db:c2:12:a1:8d:
b3:dd:be:61:f8:cb:d9:82:03:89:0a:24:f8:e2:96:
6f:55:00:1f:9d:29:b1:d7:e1:d7:fa:9a:81:97:06:
f8:f4:db:03:27:c0:1e:5b:f7:f8:f4:b2:ea:55:68:
34:71:14:81:aa:ff:b7:fb:f8:d7:9c:82:1c:0e:90:
f4:9b:bf:cd:42:00:1c:75:bf:6b:be:0b:9a:4d:f7:
43:eb:5f:91:40:f9:9c:e1:f8:86:4b:b4:7c:05:e9:
26:73:5b:a0:12:3d:58:3a:c8:c3:50:9e:c9:5b:00:
45:71:7d:cd:7e:5d:fd:20:08:2e:18:27:0d:f1:a5:
bc:dc:bb:6d:d5:d8:58:b0:a8:0b:db:8d:9e:d5:b6:
ba:ca:af:d4:49:f4:71:48:bf:3a:c9:b2:12:06:e1:
de:cb:3f:35:17:0f:a4:6f:c5:cd:9f:78:22:4b:3a:
98:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:C4:80:C9:4A:44:39:AE:5E:B0:43:83:53:06:B6:F2:8C:AD:E0
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/N2bEgMlKRDmuXrBDg1MGtvKMreA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.120.0/24
146.247.125.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e3:c3:f6:1c:6e:9e:c3:12:d3:e6:e3:94:b4:29:94:eb:e2:
d1:77:5e:83:c3:84:ab:09:ce:1f:c3:24:57:77:52:9c:9f:7d:
15:5c:13:7f:2a:ac:d3:f3:79:c3:b6:14:8a:bd:f6:d4:bd:f6:
7b:ce:5c:4f:ac:d3:4b:f7:e6:55:08:e9:59:99:02:8f:de:d8:
3c:68:7d:46:39:b3:dd:55:f9:46:25:b0:3b:d8:32:e0:a3:25:
a2:9a:17:ab:64:0a:fb:92:ac:92:ef:79:0c:27:5a:8f:1f:75:
27:8e:ee:e6:68:de:78:13:a8:25:89:04:ef:18:23:0c:8a:f9:
65:fd:b9:7a:b7:91:42:7b:6c:3b:64:17:ca:07:77:f8:df:f8:
eb:7b:66:ca:5b:fe:2c:4a:b5:26:ed:b3:19:62:d4:33:e1:c3:
4f:a8:12:14:ca:0f:ab:28:56:44:19:3b:b6:82:8c:a6:98:cf:
18:85:fd:cc:06:e8:b9:a1:42:d5:a8:5f:16:26:f1:df:4c:15:
d1:43:c8:67:1d:77:28:42:f9:c1:42:7b:83:d3:a4:56:72:14:
99:cc:3b:0d:93:05:c8:a9:27:93:1e:c7:17:6c:75:fc:ee:75:
3d:1b:6f:f3:71:5a:a1:8b:d1:f3:85:94:3e:7b:32:cf:5c:fa:
6d:2a:c7:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWT1wohAkdp/rJpURvp/zXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMTA5MDAwMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzY2YzQ4MGM5NGE0NDM5YWU1ZWIwNDM4MzUzMDZiNmYyOGNhZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr9INSB7vlS2WsJ3x8wlQXt6ylaa
7EzA8oJPVrbmGLXu0ShAmNwS3svDWcKn0N3ChtBYoqBAsJyclrg0A1PuVJ6js2Q7
kWAR1ZUNeR2U+mj8GUCK28ISoY2z3b5h+MvZggOJCiT44pZvVQAfnSmx1+HX+pqB
lwb49NsDJ8AeW/f49LLqVWg0cRSBqv+3+/jXnIIcDpD0m7/NQgAcdb9rvguaTfdD
61+RQPmc4fiGS7R8Bekmc1ugEj1YOsjDUJ7JWwBFcX3Nfl39IAguGCcN8aW83Ltt
1dhYsKgL242e1ba6yq/USfRxSL86ybISBuHeyz81Fw+kb8XNn3giSzqYTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDdmxIDJSkQ5rl6wQ4NTBrbyjK3gMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvTjJiRWdNbEtSRG11WHJCRGcxTUd0dktNcmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkvd4AwQA
kvd9MA0GCSqGSIb3DQEBCwUAA4IBAQBG48P2HG6ewxLT5uOUtCmU6+LRd16Dw4Sr
Cc4fwyRXd1Kcn30VXBN/KqzT83nDthSKvfbUvfZ7zlxPrNNL9+ZVCOlZmQKP3tg8
aH1GObPdVflGJbA72DLgoyWimherZAr7kqyS73kMJ1qPH3Unju7maN54E6gliQTv
GCMMivll/bl6t5FCe2w7ZBfKB3f43/jre2bKW/4sSrUm7bMZYtQz4cNPqBIUyg+r
KFZEGTu2goymmM8Yhf3MBui5oULVqF8WJvHfTBXRQ8hnHXcoQvnBQnuD06RWchSZ
zDsNkwXIqSeTHscXbHX87nU9G2/zcVqhi9HzhZQ+ezLPXPptKse0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org