Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nNu_DeuZV_P8_I7CL4lpRluU3yo.roa
File: nNu_DeuZV_P8_I7CL4lpRluU3yo.roa (raw, json)
Hash identifier: 7hClEHiNl6S1kVEchbQRxiBqUuI14dYwLo1b6xz2nMU=
Subject key identifier: 9C:DB:BF:0D:EB:99:57:F3:FC:FC:8E:C2:2F:89:69:46:5B:94:DF:2A
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018A9990113E413C3B9E6E8D2A4ED147CB87
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nNu_DeuZV_P8_I7CL4lpRluU3yo.roa
Signing time: Fri 15 Sep 2023 15:57:50 +0000
ROA not before: Fri 15 Sep 2023 15:57:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 146.247.102.0/24 maxlen: 24
146.247.102.0/23 maxlen: 23
146.247.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Sep 2023 00:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:90:11:3e:41:3c:3b:9e:6e:8d:2a:4e:d1:47:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Sep 15 15:57:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cdbbf0deb9957f3fcfc8ec22f8969465b94df2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:cc:d9:7a:72:18:61:12:ed:dd:05:1d:38:
78:c0:4e:96:df:2e:d5:fc:bf:e5:14:60:9d:eb:40:
ce:30:e6:52:b9:84:c7:98:7d:03:5a:2f:0a:95:7a:
a3:31:94:2c:af:2e:d5:10:6a:b2:91:d2:2c:8c:71:
89:db:13:b3:4d:67:06:4e:9b:b1:84:ba:df:48:32:
cb:bb:21:2a:83:fc:e3:dc:9f:0a:2e:ae:aa:2f:42:
94:31:5b:a0:58:cb:94:b5:41:e0:eb:24:be:db:1d:
48:36:34:40:06:a1:36:dd:ea:bf:30:5d:94:9e:5b:
c0:7d:d4:70:71:4d:0c:11:f2:d6:c4:2d:69:8e:13:
8e:6a:2d:ba:01:e8:ad:df:77:a8:83:44:3e:7f:f5:
bd:51:be:87:02:af:ee:44:15:ee:2b:64:5f:0d:15:
e4:8a:9b:fa:6b:e3:d3:f6:ac:3f:0f:6e:96:19:c1:
de:02:8c:85:6f:8b:e0:30:41:37:c0:5d:81:63:c1:
96:44:d6:c1:34:c5:ab:02:bb:1b:e2:7e:3e:a0:43:
bf:3b:80:83:9f:02:c2:5a:71:93:80:6a:24:e1:35:
7c:ff:86:c8:19:79:d0:bd:ef:e0:1d:9e:89:e9:8f:
05:da:e3:23:fb:69:5b:de:95:7b:30:8f:7f:77:e7:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:BF:0D:EB:99:57:F3:FC:FC:8E:C2:2F:89:69:46:5B:94:DF:2A
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/nNu_DeuZV_P8_I7CL4lpRluU3yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.102.0/23
Signature Algorithm: sha256WithRSAEncryption
48:9f:23:80:e2:78:f8:b7:b2:9b:5d:ad:21:98:6e:c9:c5:b5:
fc:2d:84:30:30:f4:0e:c6:32:2a:a2:43:61:3b:a6:aa:9a:9f:
4a:a0:6e:2f:7a:04:1f:94:89:3b:2b:ab:90:fe:f3:b6:a0:41:
79:06:90:5e:a7:3c:37:46:d3:6f:ce:8b:79:5a:fe:e1:de:53:
88:45:c1:61:4f:a2:d2:a6:c2:5d:51:d6:0a:03:68:53:20:b7:
69:2b:fe:f2:ca:ad:a8:cb:96:34:3f:b1:74:98:f1:6d:e3:42:
d2:b3:9e:35:1f:f6:ba:cf:43:69:45:4e:34:d8:e6:87:bb:71:
07:bd:ca:ae:10:0f:0e:51:49:45:f5:61:b5:0f:b1:3b:8c:1e:
cd:71:99:76:4f:68:38:d1:55:60:98:f1:3c:d2:9d:d7:1b:d9:
44:09:53:e1:0f:c6:0c:5b:31:bc:7c:9d:0c:b3:08:cd:0d:6a:
92:83:9f:9b:c3:8d:bc:71:f4:02:cf:36:8d:44:60:27:b0:63:
26:84:90:2f:17:57:5b:89:a3:58:3d:05:91:54:ed:da:20:b7:
46:3a:b5:e2:a3:05:c7:9d:4f:b6:83:e4:21:92:5a:38:00:f3:
e7:bb:1a:b7:dd:4e:00:0f:a2:1a:89:95:7d:dc:ae:f7:20:31:
30:93:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org