Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lhVoFFa88941zJXfU-gJxbCKcWU.roa
File: lhVoFFa88941zJXfU-gJxbCKcWU.roa (raw, json)
Hash identifier: OdmyvZvvCYypd5WwLOZYnoIPrOBZ28lX/ZvucrE+yUk=
Subject key identifier: 96:15:68:14:56:BC:F3:DE:35:CC:95:DF:53:E8:09:C5:B0:8A:71:65
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A8E69737EA854EBC8D6AD070C2971FA32
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lhVoFFa88941zJXfU-gJxbCKcWU.roa
Signing time: Wed 13 Sep 2023 11:59:50 +0000
ROA not before: Wed 13 Sep 2023 11:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.103.0/24 maxlen: 24
146.247.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:69:73:7e:a8:54:eb:c8:d6:ad:07:0c:29:71:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 13 11:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9615681456bcf3de35cc95df53e809c5b08a7165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:74:4a:a5:9e:a5:fe:41:d8:cb:56:a3:f2:
71:ce:50:1c:d5:17:65:92:48:bd:04:b9:90:23:55:
f0:48:2a:27:8e:ed:92:a6:67:be:2b:82:69:af:e4:
f1:c7:52:0c:dc:a6:51:cc:94:b8:50:fb:f4:e2:6c:
30:77:df:aa:67:3b:5d:c4:9e:06:4a:c3:b2:05:31:
e9:ef:40:65:14:ad:4d:46:4b:28:52:eb:2c:25:f2:
c3:3e:c8:f4:62:4a:5e:20:78:76:e2:e7:04:32:0c:
e3:08:84:66:32:d4:c4:c5:85:2f:e7:da:1a:60:6f:
a9:bc:3a:90:e8:5d:8f:03:26:63:06:fb:0b:27:16:
72:95:85:d4:62:26:e3:a5:17:0a:a7:23:b2:07:3d:
dd:e9:7d:2a:c8:2d:a5:a3:13:38:70:03:08:ab:29:
9b:3d:5b:f0:5e:06:04:53:ca:00:b5:31:ad:c4:b9:
07:5d:5c:07:a7:2a:1c:87:78:be:8b:d9:1f:43:54:
96:be:c8:08:a5:71:88:23:82:71:24:31:de:47:36:
17:34:ed:82:0c:0b:80:57:3a:ff:5a:2e:84:3e:34:
25:1a:ed:e5:3a:c2:ac:6d:fa:4d:1d:1c:3c:85:0c:
b7:9c:e6:86:97:df:19:66:d3:d0:f8:9b:9a:ef:d6:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:68:14:56:BC:F3:DE:35:CC:95:DF:53:E8:09:C5:B0:8A:71:65
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/lhVoFFa88941zJXfU-gJxbCKcWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
146.247.123.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:18:3c:ee:5a:2f:6d:7e:2d:e5:42:ba:e2:c9:7e:32:ec:fe:
a3:57:6d:b6:ab:6d:bd:02:b0:2e:62:62:4a:f6:61:92:89:ec:
ac:d9:a7:88:99:94:86:72:50:0f:d3:98:32:9d:95:a6:55:6b:
0a:b5:ee:4e:76:75:80:04:39:1e:7b:00:cf:31:88:d3:69:8f:
08:43:89:b4:a9:e9:25:6a:8c:8d:fe:d7:a3:2c:2b:97:62:1a:
e9:19:cc:e3:0b:c3:e6:7a:7d:2f:d0:cf:43:87:ba:b5:bc:4f:
7d:0f:1c:03:f0:71:9a:3f:cd:ee:8c:12:f5:de:b7:fb:ad:45:
19:3e:8c:90:19:8b:27:9d:2a:d5:d1:b4:53:5b:37:fd:33:60:
fc:8c:d8:8e:e6:a2:07:ad:61:9d:92:d9:46:a3:ec:c4:a9:99:
c3:28:de:75:0f:f1:76:dd:43:69:4e:5f:c1:f5:4f:b6:52:8d:
9d:b4:8f:a7:cd:2e:89:a2:14:97:e5:1b:ec:aa:8d:88:ae:67:
83:bb:93:b4:6d:6f:e1:fb:26:a8:1c:56:bc:f2:d8:2f:80:5a:
51:0e:eb:b5:3c:96:f2:24:41:95:1b:47:fd:df:35:31:e0:e2:
90:26:84:7a:e4:0f:ce:b0:e6:a6:c7:24:33:a7:b7:03:50:91:
51:3c:88:95
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 14 20:03:57 2023 by rpki-client on console-fra.rpki-client.org