Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/fdtgUrW5nnWrlFJPyKiC2IKs-pQ.roa
File: fdtgUrW5nnWrlFJPyKiC2IKs-pQ.roa (raw, json)
Hash identifier: HjPsk9C0DXy9eBz58WwPzqRtBPGL9bWD1k307nO+fD4=
Subject key identifier: 7D:DB:60:52:B5:B9:9E:75:AB:94:52:4F:C8:A8:82:D8:82:AC:FA:94
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A95306015C36497D297C309D6E8AB13E3
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/fdtgUrW5nnWrlFJPyKiC2IKs-pQ.roa
Signing time: Thu 14 Sep 2023 19:34:50 +0000
ROA not before: Thu 14 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:30:60:15:c3:64:97:d2:97:c3:09:d6:e8:ab:13:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 14 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ddb6052b5b99e75ab94524fc8a882d882acfa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3c:87:da:1a:b3:8a:a9:ce:a3:ca:3f:59:c2:
fd:c2:ca:0e:78:58:2f:d1:18:4a:8c:63:f1:75:b0:
3c:0a:32:ca:8c:c9:56:20:80:2c:7b:d6:71:92:0c:
d0:15:03:4c:e4:94:eb:c9:9e:48:4f:23:c4:a8:7c:
13:0c:dd:2c:b8:08:dc:7a:05:0e:23:90:63:92:6e:
fa:5b:08:69:f1:0d:36:ca:c6:b4:65:6e:65:8b:a2:
d6:10:18:4c:87:3a:ac:79:47:0a:14:b7:a5:14:2a:
99:b2:85:5c:9b:d1:28:26:67:a6:a9:c3:2b:8c:fb:
ce:a2:a7:2e:9f:91:16:ed:f5:41:6d:40:87:0d:18:
e6:f3:7f:19:a5:2e:df:e7:8b:c5:c9:58:fa:d9:5d:
16:b6:73:24:ca:fe:58:dd:15:ce:d9:d4:fc:c8:bc:
4a:b3:e4:f4:87:11:6f:f0:5c:07:a6:75:cf:4e:c2:
d8:4a:fc:68:4e:44:53:92:d2:ba:eb:b5:41:b2:c8:
76:86:40:88:55:1c:7d:dc:d5:07:cb:c0:e1:f7:d4:
71:23:e8:9b:01:82:fb:4b:91:63:66:07:6a:e1:dc:
6e:ff:59:c7:e9:0e:1a:b8:44:cb:df:7f:37:22:57:
5b:bf:d0:62:1f:9b:7e:e3:a6:cc:14:b3:38:9c:a9:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:60:52:B5:B9:9E:75:AB:94:52:4F:C8:A8:82:D8:82:AC:FA:94
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/fdtgUrW5nnWrlFJPyKiC2IKs-pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:e1:cd:18:fc:cf:61:99:fc:da:b7:72:40:4b:81:7c:50:4d:
57:9b:70:eb:9b:30:c7:ee:06:d2:53:24:64:32:12:fd:9b:94:
4a:f0:15:0a:bc:54:77:a6:25:ab:a5:6f:3a:69:81:57:df:07:
6c:f1:e8:b8:84:ec:99:ac:19:a4:fe:2c:cc:3d:37:c8:e0:32:
57:00:22:53:e8:17:05:e1:2b:1c:61:7f:0e:22:76:d4:87:0f:
80:0d:e5:4b:72:1d:b6:83:05:2d:12:23:b9:15:f7:a3:46:d9:
2f:92:81:a2:0e:dc:4b:d6:58:98:bb:fa:f5:c7:35:fa:0c:d0:
24:a5:87:08:a2:92:70:2a:d9:2c:c8:45:d7:0b:ca:e4:99:f0:
92:76:ce:d9:2a:96:6f:77:66:35:eb:a7:92:85:f4:3a:8a:d1:
22:18:c7:4a:4b:55:21:02:ca:d8:93:de:16:75:f1:3e:e7:1b:
c8:06:56:ce:59:98:52:ec:de:bd:bf:24:e4:ba:20:21:17:d3:
99:a7:87:9d:05:5a:7e:5b:91:24:40:12:ae:c7:10:42:12:18:
b4:bd:c3:45:55:8d:24:25:3d:25:82:fa:b5:db:84:72:53:f6:
c3:b6:b2:76:05:b6:ec:a3:43:3d:71:20:04:79:d4:0c:b0:ec:
41:ec:3d:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqVMGAVw2SX0pfDCdboqxPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwOTE0MTkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGRiNjA1MmI1Yjk5ZTc1YWI5NDUyNGZjOGE4ODJkODgyYWNmYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTyH2hqziqnOo8o/WcL9wsoOeFgv
0RhKjGPxdbA8CjLKjMlWIIAse9ZxkgzQFQNM5JTryZ5ITyPEqHwTDN0suAjcegUO
I5Bjkm76Wwhp8Q02ysa0ZW5li6LWEBhMhzqseUcKFLelFCqZsoVcm9EoJmemqcMr
jPvOoqcun5EW7fVBbUCHDRjm838ZpS7f54vFyVj62V0WtnMkyv5Y3RXO2dT8yLxK
s+T0hxFv8FwHpnXPTsLYSvxoTkRTktK667VBssh2hkCIVRx93NUHy8Dh99RxI+ib
AYL7S5FjZgdq4dxu/1nH6Q4auETL3383Ildbv9BiH5t+46bMFLM4nKlwPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH3bYFK1uZ51q5RST8iogtiCrPqUMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvZmR0Z1VyVzVubldybEZKUHlLaUMySUtzLXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkvdmMA0G
CSqGSIb3DQEBCwUAA4IBAQCf4c0Y/M9hmfzat3JAS4F8UE1Xm3DrmzDH7gbSUyRk
MhL9m5RK8BUKvFR3piWrpW86aYFX3wds8ei4hOyZrBmk/izMPTfI4DJXACJT6BcF
4SscYX8OInbUhw+ADeVLch22gwUtEiO5FfejRtkvkoGiDtxL1liYu/r1xzX6DNAk
pYcIopJwKtksyEXXC8rkmfCSds7ZKpZvd2Y166eShfQ6itEiGMdKS1UhAsrYk94W
dfE+5xvIBlbOWZhS7N69vyTkuiAhF9OZp4edBVp+W5EkQBKuxxBCEhi0vcNFVY0k
JT0lgvq124RyU/bDtrJ2Bbbso0M9cSAEedQMsOxB7D0R
Generated at Fri Sep 15 13:08:52 2023 by rpki-client on console-fra.rpki-client.org