Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/RFGOPLcwMkzwqw4G3ulTWhqje9c.roa
File: RFGOPLcwMkzwqw4G3ulTWhqje9c.roa (raw, json)
Hash identifier: undnKTKy7cFbi+U8Iqx7exRXK3BqQbjvvW2Zd9O58Ic=
Subject key identifier: 44:51:8E:3C:B7:30:32:4C:F0:AB:0E:06:DE:E9:53:5A:1A:A3:7B:D7
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A862A3E95CCD7E64F18F01BC625C984F1
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/RFGOPLcwMkzwqw4G3ulTWhqje9c.roa
Signing time: Mon 11 Sep 2023 21:33:50 +0000
ROA not before: Mon 11 Sep 2023 21:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 146.247.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 14:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:2a:3e:95:cc:d7:e6:4f:18:f0:1b:c6:25:c9:84:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 11 21:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44518e3cb730324cf0ab0e06dee9535a1aa37bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:48:9b:dd:10:67:a9:6c:1b:15:9d:7d:e4:
c4:19:fb:11:b0:23:9a:ff:c5:64:bc:67:04:db:38:
0c:76:51:d4:42:9b:d7:35:7d:83:e2:6e:d1:90:75:
f4:30:8a:7e:b0:a6:f0:98:0d:5b:52:61:dd:f1:3f:
10:87:ad:36:30:91:8c:98:94:47:4e:58:4a:3d:77:
10:a2:9d:44:41:e4:31:79:b9:27:50:cb:6c:ba:8f:
e5:98:08:f1:d3:07:76:e1:44:fc:bd:ea:9f:c5:64:
b3:c2:db:4b:ab:1e:1b:d3:55:87:eb:d1:2f:b6:76:
6d:51:0d:5d:b3:30:9a:4f:2a:45:82:17:1f:86:9d:
07:6d:c2:95:5e:f4:4f:6d:ea:8f:cb:9d:fe:09:35:
4a:3a:a7:98:87:93:6e:67:bd:ba:b6:e9:a1:ea:2d:
f8:f1:2d:b4:80:bf:b2:8f:5c:47:6c:73:68:31:c2:
13:70:b7:2e:3b:44:db:21:78:55:04:e0:b5:cf:70:
4e:09:1c:57:c7:b3:9a:7c:c1:98:86:0c:2a:d1:61:
36:7e:2d:98:38:ea:ab:e9:13:f4:4f:d0:a9:5a:79:
eb:a1:4b:11:04:b2:f4:e5:a2:22:71:32:a1:4b:d5:
66:38:66:5f:9b:3f:bc:b4:27:f4:56:4d:63:7b:b8:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:51:8E:3C:B7:30:32:4C:F0:AB:0E:06:DE:E9:53:5A:1A:A3:7B:D7
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/RFGOPLcwMkzwqw4G3ulTWhqje9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:0d:11:97:1d:93:2c:f5:72:0a:f1:3e:fd:4e:8e:32:a0:
86:93:22:4a:f3:e2:51:2f:28:b6:20:0d:d9:2d:88:e0:5f:18:
76:e9:f5:d5:79:0b:d1:a7:54:1d:6d:b0:ae:44:c1:3b:b8:ad:
c5:36:82:8b:6a:01:59:59:56:ab:96:3b:04:60:e9:de:9c:0b:
1b:2d:26:d8:d7:b8:9b:57:bb:a1:97:dc:8d:8a:00:22:f9:6c:
d9:b9:8f:2f:f4:9b:87:2f:d7:88:b7:98:b9:be:5f:e1:8c:e7:
76:80:22:58:af:60:d1:ff:db:36:79:2d:4a:6f:27:9c:4a:21:
55:81:2d:49:05:19:15:75:60:b6:41:c3:75:01:28:f9:27:52:
19:ce:dd:66:35:37:f2:c1:c3:34:5b:8b:83:08:58:b9:ff:eb:
83:de:d8:97:ae:56:48:2f:45:03:1c:95:a0:fb:55:f6:0d:dc:
57:86:3d:29:15:69:01:cc:b9:13:7a:8a:c6:d5:2a:6c:e7:90:
c3:32:20:7e:77:e2:6a:6c:76:71:6f:d0:5f:61:c5:f2:00:91:
35:0e:e4:74:4d:e1:9a:dd:23:e6:5f:f2:45:e7:af:f2:94:43:
53:4f:e2:5d:28:a6:8d:4a:20:fd:93:d5:84:2b:82:1f:cf:65:
99:fd:9e:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqGKj6VzNfmTxjwG8YlyYTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwOTExMjEzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDUxOGUzY2I3MzAzMjRjZjBhYjBlMDZkZWU5NTM1YTFhYTM3YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa1Im90QZ6lsGxWdfeTEGfsRsCOa
/8VkvGcE2zgMdlHUQpvXNX2D4m7RkHX0MIp+sKbwmA1bUmHd8T8Qh602MJGMmJRH
TlhKPXcQop1EQeQxebknUMtsuo/lmAjx0wd24UT8veqfxWSzwttLqx4b01WH69Ev
tnZtUQ1dszCaTypFghcfhp0HbcKVXvRPbeqPy53+CTVKOqeYh5NuZ726tumh6i34
8S20gL+yj1xHbHNoMcITcLcuO0TbIXhVBOC1z3BOCRxXx7OafMGYhgwq0WE2fi2Y
OOqr6RP0T9CpWnnroUsRBLL05aIicTKhS9VmOGZfmz+8tCf0Vk1je7gfcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFERRjjy3MDJM8KsOBt7pU1oao3vXMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvUkZHT1BMY3dNa3p3cXc0RzN1bFRXaHFqZTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdlMA0G
CSqGSIb3DQEBCwUAA4IBAQAKHw0Rlx2TLPVyCvE+/U6OMqCGkyJK8+JRLyi2IA3Z
LYjgXxh26fXVeQvRp1QdbbCuRME7uK3FNoKLagFZWVarljsEYOnenAsbLSbY17ib
V7uhl9yNigAi+WzZuY8v9JuHL9eIt5i5vl/hjOd2gCJYr2DR/9s2eS1KbyecSiFV
gS1JBRkVdWC2QcN1ASj5J1IZzt1mNTfywcM0W4uDCFi5/+uD3tiXrlZIL0UDHJWg
+1X2DdxXhj0pFWkBzLkTeorG1Sps55DDMiB+d+JqbHZxb9BfYcXyAJE1DuR0TeGa
3SPmX/JF56/ylENTT+JdKKaNSiD9k9WEK4Ifz2WZ/Z5X
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org