Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/r4nkPRTyZPmLqrCdLuxN7D9qTTQ.roa
File: r4nkPRTyZPmLqrCdLuxN7D9qTTQ.roa (raw, json)
Hash identifier: kJZygh8wgC/BpFmCep642xecmA6/yoEfpGDEMRfvvao=
Subject key identifier: AF:89:E4:3D:14:F2:64:F9:8B:AA:B0:9D:2E:EC:4D:EC:3F:6A:4D:34
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 0188730D9DB518BE2B0F7C5E7A7B0FB6F579
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/r4nkPRTyZPmLqrCdLuxN7D9qTTQ.roa
Signing time: Wed 31 May 2023 18:24:12 +0000
ROA not before: Wed 31 May 2023 18:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.108.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
146.247.118.0/24 maxlen: 24
146.247.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:0d:9d:b5:18:be:2b:0f:7c:5e:7a:7b:0f:b6:f5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: May 31 18:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af89e43d14f264f98baab09d2eec4dec3f6a4d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:23:a3:72:54:e2:9e:2f:0e:51:e2:a4:83:
11:51:15:db:6c:d1:9a:67:eb:7e:db:ef:3d:37:ff:
75:fd:e1:58:5c:54:d6:ac:87:55:f3:72:7a:af:aa:
b1:f9:e7:92:6b:12:3f:1e:99:7f:56:4b:87:6a:6d:
35:b4:a5:0f:ec:7e:02:cd:5a:45:83:25:1a:a4:e1:
23:6b:88:84:f6:b9:e0:e8:18:88:7d:d1:76:13:b3:
59:41:6c:3c:60:8e:fb:3c:76:14:1b:db:8b:03:ef:
21:48:ac:66:cd:e4:2b:58:f5:f8:33:2e:4f:f3:9e:
37:14:9a:72:a1:21:56:28:aa:63:72:e6:f9:f2:d0:
ba:87:8b:a2:dd:0c:2e:4c:16:93:d6:79:6b:4f:fe:
58:57:55:39:c1:31:56:81:85:c2:22:cb:ab:be:96:
84:ec:63:21:65:4d:a8:f9:b8:0c:39:a7:a5:db:54:
51:7b:c6:47:83:4f:ee:dd:16:ef:b0:b7:9b:d0:be:
ba:f6:5f:11:ca:4d:c8:2a:81:cc:e7:d4:7e:68:fe:
6f:c4:94:b0:52:59:8a:e3:c7:c8:3a:89:d4:76:b8:
7d:48:be:76:c5:e1:13:39:df:9a:b7:0d:08:02:81:
dd:fb:91:2e:e4:1d:d4:a5:79:28:23:c6:69:97:a6:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:89:E4:3D:14:F2:64:F9:8B:AA:B0:9D:2E:EC:4D:EC:3F:6A:4D:34
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/r4nkPRTyZPmLqrCdLuxN7D9qTTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.107.0-146.247.108.255
146.247.112.0/23
146.247.118.0/23
Signature Algorithm: sha256WithRSAEncryption
16:a9:0c:dd:df:25:b2:5e:7e:2c:ec:b9:3d:bd:2f:b0:99:d5:
df:44:01:d8:45:40:34:c5:2b:65:a1:f9:d9:66:9e:0b:9c:d9:
2b:31:80:0f:75:e3:31:7f:a1:c4:f1:a5:dc:a6:31:ff:13:4f:
6e:27:fc:0b:9d:d9:9f:39:0d:53:97:17:5c:cb:47:1d:d2:6a:
3b:85:f3:93:d6:8f:7f:7e:9e:80:ac:29:22:51:73:0c:9a:b8:
19:0b:e3:4c:15:fa:d5:e1:30:02:2a:d9:96:6c:ec:44:5c:e1:
c7:ed:ba:3a:79:21:3c:3a:08:61:ba:20:38:b2:9a:58:05:28:
f5:49:d7:ef:45:23:74:30:cf:57:f9:dd:f6:61:b7:1b:30:9c:
cf:4c:89:74:c0:80:bb:2e:b8:7d:98:cc:7c:8c:32:55:e9:a1:
37:7f:81:fc:5e:1b:e0:63:a7:b4:50:51:f0:53:89:8f:4e:c7:
64:74:97:c8:9b:ba:bb:7a:5a:b5:c2:36:cb:74:09:ea:0f:42:
42:75:bd:2b:94:df:10:aa:65:39:4a:f9:f3:3a:a1:7b:08:68:
d3:60:53:3b:73:a0:11:e6:52:21:be:de:7c:fe:9e:20:87:c6:
e3:38:6c:1f:9e:e5:5e:3d:a1:98:c2:ea:ab:a2:0f:e2:49:65:
d6:10:df:c6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYhzDZ21GL4rD3xeensPtvV5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwNTMxMTgyNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjg5ZTQzZDE0ZjI2NGY5OGJhYWIwOWQyZWVjNGRlYzNmNmE0ZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/sjo3JU4p4vDlHipIMRURXbbNGa
Z+t+2+89N/91/eFYXFTWrIdV83J6r6qx+eeSaxI/Hpl/VkuHam01tKUP7H4CzVpF
gyUapOEja4iE9rng6BiIfdF2E7NZQWw8YI77PHYUG9uLA+8hSKxmzeQrWPX4My5P
8543FJpyoSFWKKpjcub58tC6h4ui3QwuTBaT1nlrT/5YV1U5wTFWgYXCIsurvpaE
7GMhZU2o+bgMOael21RRe8ZHg0/u3RbvsLeb0L669l8Ryk3IKoHM59R+aP5vxJSw
UlmK48fIOonUdrh9SL52xeETOd+atw0IAoHd+5Eu5B3UpXkoI8Zpl6atrwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFK+J5D0U8mT5i6qwnS7sTew/ak00MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvcjRua1BSVHlaUG1McXJDZEx1eE43RDlxVFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACS92sD
BACS92wDBAGS93ADBAGS93YwDQYJKoZIhvcNAQELBQADggEBABapDN3fJbJefizs
uT29L7CZ1d9EAdhFQDTFK2Wh+dlmnguc2SsxgA914zF/ocTxpdymMf8TT24n/Aud
2Z85DVOXF1zLRx3SajuF85PWj39+noCsKSJRcwyauBkL40wV+tXhMAIq2ZZs7ERc
4cftujp5ITw6CGG6IDiymlgFKPVJ1+9FI3Qwz1f53fZhtxswnM9MiXTAgLsuuH2Y
zHyMMlXpoTd/gfxeG+Bjp7RQUfBTiY9Ox2R0l8iburt6WrXCNst0CeoPQkJ1vSuU
3xCqZTlK+fM6oXsIaNNgUztzoBHmUiG+3nz+niCHxuM4bB+e5V49oZjC6quiD+JJ
ZdYQ38Y=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:34 2023 by rpki-client on console-ams.rpki-client.org