Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j4qS0Syb-IvPXZdDK5Mm-Dfo6VQ.roa
File: j4qS0Syb-IvPXZdDK5Mm-Dfo6VQ.roa (raw, json)
Hash identifier: vX5zVbePSmePWp4YowIn2e+A0eVPc+HJpbPpfVvyTeY=
Subject key identifier: 8F:8A:92:D1:2C:9B:F8:8B:CF:5D:97:43:2B:93:26:F8:37:E8:E9:54
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018B7B470F229E0BC3E83F46F7AB77AF453C
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j4qS0Syb-IvPXZdDK5Mm-Dfo6VQ.roa
Signing time: Sun 29 Oct 2023 11:52:16 +0000
ROA not before: Sun 29 Oct 2023 11:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
146.247.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7b:47:0f:22:9e:0b:c3:e8:3f:46:f7:ab:77:af:45:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 29 11:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8a92d12c9bf88bcf5d97432b9326f837e8e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:bb:d7:5e:a1:ab:51:c3:eb:be:b2:bb:e7:
c2:44:b3:d9:17:a4:76:65:77:10:72:bc:f2:87:a5:
54:88:a4:3f:3e:48:3a:21:9d:13:aa:b8:2b:66:f3:
c3:9d:9d:74:73:44:f8:f6:e8:a5:fd:c7:87:69:b2:
6b:7b:a1:f9:77:01:3b:ae:75:0c:6b:3a:ab:04:fa:
11:11:a2:54:fb:a4:79:ab:b2:80:d1:08:4c:eb:5e:
c5:7d:57:5b:34:03:9f:39:00:48:04:8c:a3:1f:30:
fd:c1:1b:09:f3:83:e7:41:bf:7b:40:0d:84:8e:64:
d2:5f:37:18:f3:34:08:0c:12:0d:e7:32:ec:29:f9:
a1:24:e2:1b:fb:12:5c:70:03:1a:0b:ac:86:1d:67:
d0:0d:46:94:40:bc:f4:aa:42:6c:04:5a:ec:20:8a:
95:de:e0:8c:b1:b5:54:8f:46:af:c3:d2:e8:f6:7c:
81:74:b1:a3:a8:3e:88:36:3f:a6:c9:f1:78:b1:7c:
66:bb:ac:d8:9d:3e:dd:1c:83:b4:42:7d:56:09:c7:
2d:f9:13:b0:03:df:e9:08:b9:1a:0a:f7:c1:ee:19:
38:52:b6:4c:6e:0c:8b:8f:4b:3b:4f:cc:2e:99:5d:
28:66:6a:93:13:07:88:2d:39:0f:22:2a:ab:53:77:
3d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8A:92:D1:2C:9B:F8:8B:CF:5D:97:43:2B:93:26:F8:37:E8:E9:54
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/j4qS0Syb-IvPXZdDK5Mm-Dfo6VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
146.247.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cf:aa:c4:96:6d:6a:48:25:bc:cb:56:e5:81:ad:d3:8c:ff:
37:6e:3b:0d:fa:05:35:aa:f7:87:17:36:6b:05:b9:95:07:90:
69:e0:8d:f2:4b:11:46:9d:19:35:43:3e:45:fb:0e:57:46:94:
bd:0e:02:92:32:f0:5d:c1:16:20:4d:74:dc:27:e5:cd:e4:0a:
f1:c9:76:00:2a:fb:4f:0c:01:50:02:6f:9e:fb:59:3d:96:a4:
09:df:ba:d7:18:55:b4:35:fc:8c:42:a9:4b:10:ec:bc:7a:33:
a8:c8:0e:a6:75:18:9c:ed:0c:47:12:0d:b4:b4:fb:20:57:6a:
d9:a6:d9:48:0f:1e:85:81:4f:6b:8f:13:b1:91:2b:d8:76:f2:
00:75:e3:04:8b:70:64:cc:23:34:a3:8c:31:6f:9e:ef:22:b4:
82:1e:74:65:e7:41:8d:8c:ee:19:f2:9e:af:aa:38:ac:1e:b8:
89:f9:2a:eb:9d:91:2f:d2:e4:e3:ab:1f:e7:10:20:0a:db:5f:
ac:ad:c4:4a:23:cc:b7:bd:a0:dd:ab:5b:e0:bd:12:67:e2:fb:
e3:fc:e1:7c:ee:ea:f2:2d:4e:aa:fd:ae:5d:86:1f:cb:7e:21:
66:c5:36:d0:a4:56:7c:3b:6d:39:a4:95:1c:2b:61:35:cf:b8:
9f:d8:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:11:00 2024 by rpki-client on console-ams.rpki-client.org