Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mNmgo6yJ3RbDX2SJifQhmrde0n4.roa
File: mNmgo6yJ3RbDX2SJifQhmrde0n4.roa (raw, json)
Hash identifier: m1y3oox0cl/tONTm5KuxHdWlOSnWKf7UUdLF+xz8WBA=
Subject key identifier: 98:D9:A0:A3:AC:89:DD:16:C3:5F:64:89:89:F4:21:9A:B7:5E:D2:7E
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018B04E8708DA08738401DAE5ADA1A8895E3
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mNmgo6yJ3RbDX2SJifQhmrde0n4.roa
Signing time: Fri 06 Oct 2023 12:13:43 +0000
ROA not before: Fri 06 Oct 2023 12:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 146.247.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:e8:70:8d:a0:87:38:40:1d:ae:5a:da:1a:88:95:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Oct 6 12:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98d9a0a3ac89dd16c35f648989f4219ab75ed27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:d8:8a:00:95:f8:35:ec:54:52:f5:bb:b2:
67:d1:a0:3f:c2:34:52:99:94:80:11:c3:3e:0a:04:
30:06:68:24:e3:1a:1d:a9:12:ec:67:83:64:ea:1e:
ac:d8:ff:3e:55:cb:3f:c8:69:9e:90:4d:10:d4:85:
18:5b:52:04:37:60:65:1a:40:a2:9b:60:fc:06:a5:
41:aa:d2:48:1d:67:cd:1e:36:89:b0:43:62:e8:95:
75:94:2e:9e:94:da:5f:44:ff:54:9a:8b:b7:d7:6a:
ee:b0:bd:e2:56:13:65:55:14:5b:a1:1e:5f:7a:7f:
1f:e4:0c:c8:d3:9e:59:46:23:09:6c:f3:47:87:15:
42:10:73:0c:c5:35:24:72:ce:2b:b2:33:15:fc:b2:
37:fd:41:05:b2:8f:2c:94:26:dc:99:7b:bd:e9:9b:
b1:57:36:50:3a:4c:87:e6:2d:26:46:07:06:48:91:
47:bd:bd:fc:c9:27:42:f8:8a:f5:74:4f:7f:62:ef:
df:7e:3b:62:fb:79:37:5f:ba:88:2b:52:8b:af:d7:
9b:70:82:1a:41:25:67:4d:7f:0a:b5:ca:6c:83:53:
04:31:ef:07:91:fb:4d:41:b4:90:0f:cc:62:41:30:
41:4c:49:cc:e6:ef:6b:21:04:9a:f4:25:73:2f:e5:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:A0:A3:AC:89:DD:16:C3:5F:64:89:89:F4:21:9A:B7:5E:D2:7E
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mNmgo6yJ3RbDX2SJifQhmrde0n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:49:3c:bc:e5:57:50:05:d1:b7:4c:22:98:fa:26:e0:d5:f8:
0b:08:bb:86:fe:23:94:fa:cf:91:0d:20:77:2f:81:74:ed:e2:
6e:c0:2d:8b:fe:95:71:19:e9:c6:e5:2d:74:b1:93:82:5b:f2:
40:51:c8:d3:bd:75:15:62:a4:97:f0:06:0a:d7:9b:06:94:22:
93:75:e8:20:ea:72:1a:08:13:6c:9f:89:72:46:46:7d:24:e1:
6f:ec:c6:44:c5:7d:a7:06:b3:6f:f7:21:27:8b:c9:49:26:f7:
e6:5a:c7:71:6c:19:48:51:5e:1c:7f:51:f1:da:c5:93:6f:67:
b5:bb:34:a3:13:aa:cc:b9:68:92:41:78:af:0e:d7:e6:3f:3e:
0a:a9:be:78:9f:24:f9:ac:1a:eb:27:6c:1b:ce:5e:40:d5:8e:
f0:d5:c3:1b:a7:db:82:f7:d4:72:5b:56:b8:7e:ad:58:d2:5f:
c0:a5:80:3d:24:b8:cb:8c:c9:6f:a4:1b:d1:83:c7:22:a7:e4:
c4:8e:1e:bc:ce:eb:88:03:73:50:86:f0:20:1c:29:cf:90:f9:
ef:8b:a8:88:50:2b:11:bb:b9:08:78:c4:dd:ed:81:16:3b:67:
33:9c:20:5c:1b:9c:2c:f4:98:68:70:4e:a2:df:69:ab:2b:8c:
8e:be:d0:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsE6HCNoIc4QB2uWtoaiJXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMxMDA2MTIxMzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGQ5YTBhM2FjODlkZDE2YzM1ZjY0ODk4OWY0MjE5YWI3NWVkMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmTYigCV+DXsVFL1u7Jn0aA/wjRS
mZSAEcM+CgQwBmgk4xodqRLsZ4Nk6h6s2P8+Vcs/yGmekE0Q1IUYW1IEN2BlGkCi
m2D8BqVBqtJIHWfNHjaJsENi6JV1lC6elNpfRP9Umou312rusL3iVhNlVRRboR5f
en8f5AzI055ZRiMJbPNHhxVCEHMMxTUkcs4rsjMV/LI3/UEFso8slCbcmXu96Zux
VzZQOkyH5i0mRgcGSJFHvb38ySdC+Ir1dE9/Yu/ffjti+3k3X7qIK1KLr9ebcIIa
QSVnTX8Ktcpsg1MEMe8HkftNQbSQD8xiQTBBTEnM5u9rIQSa9CVzL+XPnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjZoKOsid0Ww19kiYn0IZq3XtJ+MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvbU5tZ282eUozUmJEWDJTSmlmUWhtcmRlMG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdlMA0G
CSqGSIb3DQEBCwUAA4IBAQBKSTy85VdQBdG3TCKY+ibg1fgLCLuG/iOU+s+RDSB3
L4F07eJuwC2L/pVxGenG5S10sZOCW/JAUcjTvXUVYqSX8AYK15sGlCKTdegg6nIa
CBNsn4lyRkZ9JOFv7MZExX2nBrNv9yEni8lJJvfmWsdxbBlIUV4cf1Hx2sWTb2e1
uzSjE6rMuWiSQXivDtfmPz4Kqb54nyT5rBrrJ2wbzl5A1Y7w1cMbp9uC99RyW1a4
fq1Y0l/ApYA9JLjLjMlvpBvRg8cip+TEjh68zuuIA3NQhvAgHCnPkPnvi6iIUCsR
u7kIeMTd7YEWO2cznCBcG5ws9JhocE6i32mrK4yOvtAT
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:49 2024 by rpki-client on console-fra.rpki-client.org