Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mjrHvJ6fCdX8wOBAH8m-qm_SS3E.roa
File: mjrHvJ6fCdX8wOBAH8m-qm_SS3E.roa (raw, json)
Hash identifier: A01x6OD0sc722twsvEswDWL32Yr5eUEwRbiwtmskYXY=
Subject key identifier: 9A:3A:C7:BC:9E:9F:09:D5:FC:C0:E0:40:1F:C9:BE:AA:6F:D2:4B:71
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018ABF86315E9FF266FD27BF43C9154C93EB
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mjrHvJ6fCdX8wOBAH8m-qm_SS3E.roa
Signing time: Sat 23 Sep 2023 00:52:37 +0000
ROA not before: Sat 23 Sep 2023 00:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
146.247.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bf:86:31:5e:9f:f2:66:fd:27:bf:43:c9:15:4c:93:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 23 00:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a3ac7bc9e9f09d5fcc0e0401fc9beaa6fd24b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:04:69:2b:0d:a4:30:bb:40:ed:a3:da:67:
50:fd:bd:04:ec:74:0a:a6:68:97:c1:5b:d7:8b:19:
6a:e3:9b:9c:e7:b1:72:54:be:bb:63:8f:b0:78:1b:
e2:a3:58:a3:70:9c:44:28:2a:27:8c:f0:85:04:ca:
b2:57:57:ef:22:21:6c:db:b8:95:7a:64:e2:b2:8f:
24:7d:50:7e:35:b5:3f:d9:06:e2:9a:ac:c6:9f:2b:
f5:f6:e3:12:0f:95:b9:8b:d9:ab:7c:0e:7c:c0:61:
9b:15:fa:e2:2a:4c:6a:b5:53:00:5b:b8:27:41:3d:
a1:5d:59:a8:f8:55:46:f0:04:87:00:c8:e0:79:5d:
9b:2e:96:0b:cf:f2:f8:5f:a3:ad:11:c2:3d:10:bc:
5f:92:1e:04:99:37:c0:64:65:a4:71:59:ce:a7:25:
fa:09:e2:3f:ad:90:8e:73:21:b1:78:f4:11:3a:97:
f1:8c:4b:28:1c:48:e6:5a:5f:14:f9:06:e4:be:18:
8d:f8:10:8f:95:ee:be:0d:f6:33:53:92:fc:92:96:
e8:7d:cb:7d:31:dd:de:75:c1:5f:85:b0:00:00:12:
32:43:71:d9:ee:98:dc:c0:3d:4d:37:c5:76:d3:1b:
9c:89:2a:a7:b6:f4:c5:66:19:40:7b:4d:08:d1:6b:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3A:C7:BC:9E:9F:09:D5:FC:C0:E0:40:1F:C9:BE:AA:6F:D2:4B:71
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/mjrHvJ6fCdX8wOBAH8m-qm_SS3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
146.247.106.0/24
Signature Algorithm: sha256WithRSAEncryption
31:9f:f4:43:c0:6c:d5:07:58:a2:0c:dc:b9:c2:33:eb:72:b7:
54:aa:ec:06:dc:14:02:62:66:b1:db:2b:cd:c2:be:38:05:58:
ae:39:93:52:d0:3a:4b:ee:aa:8a:48:50:10:5a:fa:26:3c:8c:
2b:79:fe:f7:39:57:56:89:a5:ec:93:46:21:70:5d:bf:24:3d:
86:16:6d:e9:c1:af:bc:0a:f8:58:21:5c:e6:c2:c1:19:7b:54:
94:8d:52:55:c2:64:42:2c:82:b7:a3:0b:0d:0c:c4:7f:a8:8e:
1d:3a:49:a3:5d:9f:fe:47:38:fe:28:43:c2:50:f4:b4:19:db:
4d:a0:d3:71:dd:b5:11:03:85:e3:02:77:58:7f:17:7e:1e:9b:
e1:86:eb:cc:6b:fb:ca:ce:8e:c1:ef:09:ed:ff:6a:d9:2a:8d:
83:18:60:ee:3f:65:4d:88:5d:f5:ce:e4:61:d8:74:d1:7a:15:
6a:20:56:67:c4:35:29:ff:7d:94:15:af:f5:dc:ac:05:77:cd:
17:e8:d4:68:6b:7c:c1:c2:f8:6f:6a:69:25:fd:b2:85:34:47:
9c:ca:f7:24:e2:ab:c8:d5:4a:e4:be:72:a8:84:d1:4f:60:73:
3e:2f:3f:5e:93:ab:5d:ae:94:82:6d:f9:0a:7c:f2:a5:86:b9:
81:c2:f0:06
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 27 18:04:25 2023 by rpki-client on console-fra.rpki-client.org