Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vcuJGK2Nywk5LuixTaFvh_Gc0cQ.roa
File: vcuJGK2Nywk5LuixTaFvh_Gc0cQ.roa (raw, json)
Hash identifier: qMCoEzqk8hb/TWmlKS7pFnll/id5Q2HPak4wAEK+r+Y=
Subject key identifier: BD:CB:89:18:AD:8D:CB:09:39:2E:E8:B1:4D:A1:6F:87:F1:9C:D1:C4
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 018572DF0DC1CE98FF2A92B269088B906A8E
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vcuJGK2Nywk5LuixTaFvh_Gc0cQ.roa
Signing time: Mon 02 Jan 2023 14:24:58 +0000
ROA not before: Mon 02 Jan 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 146.247.101.0/24 maxlen: 24
146.247.107.0/24 maxlen: 24
146.247.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:df:0d:c1:ce:98:ff:2a:92:b2:69:08:8b:90:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Jan 2 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcb8918ad8dcb09392ee8b14da16f87f19cd1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:63:e1:85:3c:9f:58:52:8b:42:e4:e4:e7:
55:ab:b0:eb:23:2a:71:f6:68:b8:30:8f:03:46:07:
ff:b4:b6:7e:79:c3:32:9f:65:96:6c:ee:f0:d4:4d:
0e:b9:84:fd:ff:d3:18:0b:bc:5d:82:97:75:38:d9:
fe:02:fc:63:52:4b:26:5d:3b:a5:34:ee:ba:88:cf:
c7:84:72:3a:9a:1d:96:2a:e4:87:6d:c7:d1:bd:b0:
b0:c7:6a:44:c3:c3:a1:6c:fb:70:a3:ee:ef:cc:49:
de:18:3c:cf:29:40:cf:db:f7:fe:e8:fa:f7:c4:f0:
3c:3d:20:d6:26:5a:7f:21:3a:cc:19:38:d3:9a:22:
66:33:70:7c:58:6c:1e:3c:5b:9f:b2:89:67:b5:aa:
97:b3:04:8c:29:61:1d:3a:c5:d0:d9:0a:df:10:bc:
cb:a2:96:e3:e1:45:75:f6:66:9d:69:30:0b:49:1b:
ee:da:54:21:2c:0b:1e:8d:60:86:4b:cc:ba:80:16:
1a:28:2b:0c:5b:a9:8c:70:01:8b:c6:bb:fd:1e:85:
c1:f7:fb:1c:fb:eb:06:e4:f9:6b:76:0d:24:f8:45:
c5:e2:8b:40:51:ce:75:36:75:08:bf:c6:e2:01:ef:
7d:9c:3a:7f:62:bd:74:f0:0b:30:26:6c:17:01:32:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:89:18:AD:8D:CB:09:39:2E:E8:B1:4D:A1:6F:87:F1:9C:D1:C4
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/vcuJGK2Nywk5LuixTaFvh_Gc0cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.101.0/24
146.247.107.0/24
146.247.112.0/23
Signature Algorithm: sha256WithRSAEncryption
20:bb:ba:b1:42:05:e7:12:0f:8d:74:5b:6c:5a:2d:0e:76:2f:
fb:f7:14:d0:4c:75:0f:a4:d6:d3:2f:49:de:99:0d:e5:45:dd:
31:25:8a:24:f2:ea:46:b9:5d:41:aa:82:66:9d:5e:d2:18:64:
1b:9d:dd:5c:a2:c7:75:13:8f:07:be:07:34:d4:c6:43:05:d0:
ef:97:52:e7:1c:44:de:e1:2d:89:f3:b3:9f:7f:83:6f:22:f8:
88:64:a4:e3:75:a2:cd:ca:af:9a:dc:fe:c5:4e:85:66:2e:c9:
99:27:f5:50:ff:74:98:3a:e6:2c:70:fc:03:7c:b8:05:00:6e:
e9:91:34:ce:a1:e2:98:79:96:bf:ec:50:7a:9e:63:be:6d:a6:
ca:c0:48:6b:65:a7:3b:80:1e:cb:0e:51:bb:97:6b:77:a8:e9:
bd:95:3a:bd:85:33:4f:c9:6e:f9:c1:9f:02:f2:72:fa:08:6a:
f4:a7:b7:f8:90:3c:36:0a:0c:3a:58:55:c8:b3:36:0b:df:9f:
4f:24:0e:80:50:81:5e:c3:88:b5:61:05:1b:92:74:1d:33:66:
3e:62:a0:b7:c8:e2:83:55:56:70:c1:5f:51:21:69:b2:64:72:
4a:14:2e:3e:98:55:37:20:c1:5c:61:50:0f:ab:48:ca:70:bd:
4a:56:01:23
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVy3w3Bzpj/KpKyaQiLkGqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjMwMTAyMTQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGNiODkxOGFkOGRjYjA5MzkyZWU4YjE0ZGExNmY4N2YxOWNkMWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJdj4YU8n1hSi0Lk5OdVq7DrIypx
9mi4MI8DRgf/tLZ+ecMyn2WWbO7w1E0OuYT9/9MYC7xdgpd1ONn+AvxjUksmXTul
NO66iM/HhHI6mh2WKuSHbcfRvbCwx2pEw8OhbPtwo+7vzEneGDzPKUDP2/f+6Pr3
xPA8PSDWJlp/ITrMGTjTmiJmM3B8WGwePFufsolntaqXswSMKWEdOsXQ2QrfELzL
opbj4UV19madaTALSRvu2lQhLAsejWCGS8y6gBYaKCsMW6mMcAGLxrv9HoXB9/sc
++sG5Plrdg0k+EXF4otAUc51NnUIv8biAe99nDp/Yr108AswJmwXATJ1CQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL3LiRitjcsJOS7osU2hb4fxnNHEMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvdmN1SkdLMk55d2s1THVpeFRhRnZoX0djMGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAkvdlAwQA
kvdrAwQBkvdwMA0GCSqGSIb3DQEBCwUAA4IBAQAgu7qxQgXnEg+NdFtsWi0Odi/7
9xTQTHUPpNbTL0nemQ3lRd0xJYok8upGuV1BqoJmnV7SGGQbnd1cosd1E48Hvgc0
1MZDBdDvl1LnHETe4S2J87Off4NvIviIZKTjdaLNyq+a3P7FToVmLsmZJ/VQ/3SY
OuYscPwDfLgFAG7pkTTOoeKYeZa/7FB6nmO+babKwEhrZac7gB7LDlG7l2t3qOm9
lTq9hTNPyW75wZ8C8nL6CGr0p7f4kDw2Cgw6WFXIszYL359PJA6AUIFew4i1YQUb
knQdM2Y+YqC3yOKDVVZwwV9RIWmyZHJKFC4+mFU3IMFcYVAPq0jKcL1KVgEj
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:43 2023 by rpki-client on console-fra.rpki-client.org