Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vNLj03stSgzurQ1-m1zhPuSyaTw.roa
File: vNLj03stSgzurQ1-m1zhPuSyaTw.roa (raw, json)
Hash identifier: RbVJ3xitIjtnMfIpLY1gWnYq0Vf8/cVJo5LBw/JDsYI=
Subject key identifier: BC:D2:E3:D3:7B:2D:4A:0C:EE:AD:0D:7E:9B:5C:E1:3E:E4:B2:69:3C
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0CC18977EA8509F23FC4E82A2E17
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vNLj03stSgzurQ1-m1zhPuSyaTw.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 146.247.109.0/24 maxlen: 24
146.247.120.0/24 maxlen: 24
146.247.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 00:03:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0c:c1:89:77:ea:85:09:f2:3f:c4:e8:2a:2e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd2e3d37b2d4a0ceead0d7e9b5ce13ee4b2693c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:49:6a:db:ab:c1:34:a5:41:38:83:3b:b2:b0:
b7:0c:0e:e3:f0:14:43:e0:0e:e7:b8:cc:ca:dc:a6:
52:05:04:9a:63:2b:78:71:5f:b2:d9:cf:0b:03:5f:
9a:87:9a:72:4a:70:61:02:aa:09:71:1f:3f:c3:95:
fa:82:1d:35:79:14:e6:de:94:91:32:96:50:47:1c:
b4:2f:94:32:8d:eb:c0:32:9e:0c:e4:ea:7e:83:8d:
a6:25:3a:36:ae:81:ef:d1:c2:0a:73:60:64:ea:18:
48:39:44:3b:19:f0:d7:35:b7:23:61:43:a3:ba:29:
7f:ce:e8:41:44:ff:49:ce:10:08:2f:98:33:72:36:
3c:0b:c8:56:77:e4:5a:e4:ca:4d:d7:5e:56:6f:98:
79:11:cc:43:7f:fe:78:97:e9:ad:aa:9b:01:84:25:
10:ed:bc:4d:bf:2c:74:e1:c3:64:63:0b:34:48:8b:
4b:a3:6c:6e:bb:4b:c6:d9:8b:a1:e9:79:85:89:65:
76:f7:86:57:2a:96:fa:d0:9d:f7:e4:de:6f:f6:f9:
ac:80:06:1f:a7:42:41:78:a1:8d:62:85:37:e6:4c:
2e:6f:b4:c6:4e:96:6b:9d:7a:76:df:5c:1d:69:17:
87:0e:48:51:8c:44:26:f9:cd:35:97:8b:c7:fb:b7:
24:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:E3:D3:7B:2D:4A:0C:EE:AD:0D:7E:9B:5C:E1:3E:E4:B2:69:3C
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vNLj03stSgzurQ1-m1zhPuSyaTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
146.247.120.0/24
146.247.125.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e7:ec:7d:ea:b4:f5:a9:e0:39:04:10:a9:30:5a:a7:eb:c4:
e5:10:d8:a4:11:80:48:4e:a4:a5:6f:e6:67:56:ef:e5:c6:2f:
d8:d1:27:e7:58:bf:c2:6e:54:47:2d:e5:62:b8:35:08:82:06:
07:e4:c7:cf:c6:8a:9b:7c:6a:f7:53:f4:3e:d1:93:fd:90:ae:
dc:b5:b5:bd:f0:6f:79:a0:6e:a8:98:e1:c8:cd:1f:a7:a2:62:
db:40:cd:eb:ee:04:5e:3e:2f:41:4f:a3:99:65:0e:c1:32:78:
03:e1:4d:33:d6:bf:96:6a:2e:cd:0a:09:2d:01:03:40:62:66:
6a:8e:f1:72:c5:69:f8:9c:a9:34:b6:fc:d4:5f:97:f0:36:e5:
d4:f8:bf:e0:ee:0b:09:21:0e:27:4c:74:c4:d3:57:ed:6b:f7:
32:00:3f:b6:94:cf:89:51:9e:65:30:b3:9f:76:b8:08:6d:87:
6f:27:9a:95:63:cb:a5:23:1e:2d:45:5e:3a:90:36:02:4f:51:
60:c5:2c:04:4f:15:2b:10:51:e0:54:e6:6d:44:a6:cb:bd:a8:
04:e9:0a:fa:e2:e9:bd:f2:47:fa:50:a5:39:ea:cd:f2:3c:07:
df:4a:5a:8f:c5:9d:5c:68:32:4a:cb:9b:5c:5f:f2:cf:23:d5:
da:eb:3e:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVy3wzBiXfqhQnyP8ToKi4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMTAyMTQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2QyZTNkMzdiMmQ0YTBjZWVhZDBkN2U5YjVjZTEzZWU0YjI2OTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgklq26vBNKVBOIM7srC3DA7j8BRD
4A7nuMzK3KZSBQSaYyt4cV+y2c8LA1+ah5pySnBhAqoJcR8/w5X6gh01eRTm3pSR
MpZQRxy0L5QyjevAMp4M5Op+g42mJTo2roHv0cIKc2Bk6hhIOUQ7GfDXNbcjYUOj
uil/zuhBRP9JzhAIL5gzcjY8C8hWd+Ra5MpN115Wb5h5EcxDf/54l+mtqpsBhCUQ
7bxNvyx04cNkYws0SItLo2xuu0vG2Yuh6XmFiWV294ZXKpb60J335N5v9vmsgAYf
p0JBeKGNYoU35kwub7TGTpZrnXp231wdaReHDkhRjEQm+c01l4vH+7ckHQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLzS49N7LUoM7q0Nfptc4T7ksmk8MB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvdk5MajAzc3RTZ3p1clExLW0xemhQdVN5YVR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkvdtAwQA
kvd4AwQAkvd9MA0GCSqGSIb3DQEBCwUAA4IBAQBU5+x96rT1qeA5BBCpMFqn68Tl
ENikEYBITqSlb+ZnVu/lxi/Y0SfnWL/CblRHLeViuDUIggYH5MfPxoqbfGr3U/Q+
0ZP9kK7ctbW98G95oG6omOHIzR+nomLbQM3r7gRePi9BT6OZZQ7BMngD4U0z1r+W
ai7NCgktAQNAYmZqjvFyxWn4nKk0tvzUX5fwNuXU+L/g7gsJIQ4nTHTE01fta/cy
AD+2lM+JUZ5lMLOfdrgIbYdvJ5qVY8ulIx4tRV46kDYCT1FgxSwETxUrEFHgVOZt
RKbLvagE6Qr64um98kf6UKU56s3yPAffSlqPxZ1caDJKy5tcX/LPI9Xa6z5j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:35 2024 by rpki-client on console-ams.rpki-client.org