Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YstBGyGFfxN6HvilZHZhzlQQ728.roa
File: YstBGyGFfxN6HvilZHZhzlQQ728.roa (raw, json)
Hash identifier: ZkZLlBsfFORN45nsk9JqIgizZSBhFiE+z3SUfAd64n8=
Subject key identifier: 62:CB:41:1B:21:85:7F:13:7A:1E:F8:A5:64:76:61:CE:54:10:EF:6F
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018AD7BDFD1AF7D8A7096CCCEEF4112BB48D
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YstBGyGFfxN6HvilZHZhzlQQ728.roa
Signing time: Wed 27 Sep 2023 17:44:27 +0000
ROA not before: Wed 27 Sep 2023 17:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:bd:fd:1a:f7:d8:a7:09:6c:cc:ee:f4:11:2b:b4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 27 17:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62cb411b21857f137a1ef8a5647661ce5410ef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:ce:06:18:a6:7e:c4:7f:f2:06:ea:16:3c:
01:73:fa:14:34:80:dc:25:9b:a6:20:26:01:4e:b1:
e9:85:b6:7d:a4:10:a0:86:30:6a:eb:75:0b:43:fe:
52:d5:de:a2:81:e5:c1:3b:cc:07:dc:04:17:d1:17:
46:5e:b7:b1:24:81:a2:dd:70:5c:15:a3:70:fa:24:
13:f5:34:bc:7b:85:8a:59:95:9b:93:f7:7d:e1:e1:
34:62:00:03:e1:09:21:a7:da:fd:a4:2b:aa:fb:43:
32:4f:ce:89:e9:26:29:38:61:f0:ce:43:6f:33:38:
3c:ef:dd:03:c3:d6:74:5c:e6:6b:02:09:b0:a2:26:
d3:ab:a2:3b:b9:88:1c:cd:99:f2:f8:f4:63:c7:8f:
b4:10:6d:a0:b9:f4:9d:4e:0e:d1:e9:f7:b4:f9:c0:
4c:97:bd:fe:48:ee:5f:75:23:3b:5e:2d:4d:1e:2b:
61:61:19:69:b1:bd:1e:d2:97:68:36:c5:68:7b:c8:
28:48:3d:aa:12:c8:86:11:17:1d:d8:f1:bf:a2:a1:
17:fb:97:00:86:a8:ff:70:d3:88:48:4e:47:56:58:
51:fa:25:27:b2:4f:c9:ac:25:df:8b:e0:50:9c:e3:
b7:7d:30:2b:6f:f4:82:7f:43:41:26:ed:94:af:f2:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CB:41:1B:21:85:7F:13:7A:1E:F8:A5:64:76:61:CE:54:10:EF:6F
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/YstBGyGFfxN6HvilZHZhzlQQ728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
Signature Algorithm: sha256WithRSAEncryption
95:f9:56:12:4a:86:fa:38:f8:13:db:12:fa:23:01:de:7f:50:
b2:bd:04:3f:c0:96:5b:e6:eb:91:2b:e3:73:39:18:a8:f4:fb:
a3:9c:42:6b:67:1e:79:dc:5d:67:62:1a:1a:8c:9d:87:a0:c9:
7b:56:ab:a3:a3:29:59:16:bf:d1:41:a1:bd:a6:e7:eb:1e:2c:
cd:66:fc:0c:49:c5:bb:42:28:6e:83:5c:08:3e:46:81:04:7b:
49:99:d5:c7:ac:41:43:f8:eb:44:fd:ae:3f:91:b8:c9:50:4c:
d8:77:35:3b:0e:1e:5e:e2:7e:58:88:18:5d:67:c9:8a:c8:48:
13:ae:bb:4e:0d:6e:12:b5:8b:05:8b:fd:8f:17:27:47:0e:81:
4d:3d:97:da:f1:f2:10:29:ff:f3:e3:9b:2b:a9:98:4b:bd:61:
0b:fd:05:7a:fa:69:7a:37:fb:9b:1d:ee:a1:ae:41:81:61:71:
bb:15:42:41:3f:d9:ce:11:74:55:35:c7:d2:25:86:81:5e:47:
b1:ef:1d:6a:eb:e0:dd:d3:f7:6e:aa:56:e0:2d:2c:b1:16:30:
e8:d6:b0:74:40:c4:4c:a4:26:4b:4b:d8:3f:10:8e:a7:ad:df:
d4:01:51:70:05:45:12:4c:4d:a7:42:4e:fd:9e:50:df:8a:58:
05:5f:c3:f2
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 24 19:52:57 2023 by rpki-client on console-fra.rpki-client.org