Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/s-B3wyRzOWJS8Q0LvQbND37Ek04.roa
File: s-B3wyRzOWJS8Q0LvQbND37Ek04.roa (raw, json)
Hash identifier: iakJKARfuTd0RGvM+46ZeTkIk9jMv5ZC8yUlbV0ej3w=
Subject key identifier: B3:E0:77:C3:24:73:39:62:52:F1:0D:0B:BD:06:CD:0F:7E:C4:93:4E
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1D39A0C4F373FD345243593324E64
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/s-B3wyRzOWJS8Q0LvQbND37Ek04.roa
Signing time: Sun 01 Jan 2023 14:34:57 +0000
ROA not before: Sun 01 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202561
IP address blocks: 194.124.36.0/24 maxlen: 24
194.124.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d3:9a:0c:4f:37:3f:d3:45:24:35:93:32:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3e077c32473396252f10d0bbd06cd0f7ec4934e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:91:a6:05:76:fd:6b:19:b2:8f:6e:81:e0:08:
2a:0e:ba:ee:93:10:d3:21:5d:94:84:0e:b4:ec:01:
31:30:46:18:98:eb:23:5e:18:23:3e:33:d7:0e:fb:
cd:63:41:c0:8a:03:2f:b4:5e:ea:90:2b:95:1b:36:
98:a2:cf:2c:5c:65:cd:aa:39:08:25:fa:b3:f1:92:
95:e3:3c:13:6d:e8:f7:16:0f:da:53:5d:62:83:b7:
6f:12:be:d1:c9:15:69:d1:ab:da:4b:68:6f:0c:17:
ba:5c:42:7c:6a:f8:0d:c4:f1:cc:99:d5:d1:2e:13:
8e:bd:bf:1a:22:4f:56:19:69:ff:ee:ad:a7:a0:0b:
91:a2:26:b9:9a:6d:18:d1:28:43:ff:87:b8:9e:f4:
fd:c4:5c:31:eb:94:f9:37:c7:e2:90:73:18:79:20:
8c:22:86:02:e5:29:a5:f7:2b:51:63:36:be:56:8f:
f6:46:dc:ed:dc:60:05:2c:a0:a5:12:67:bd:11:f6:
bc:c5:dc:05:bf:23:ad:1e:1b:ab:c1:fa:53:6a:8b:
17:3e:9b:b8:57:14:93:76:16:d3:33:b9:bc:c5:c9:
59:47:ca:8e:3e:25:5e:28:02:e1:2c:47:e6:e1:de:
47:5a:b6:f7:a4:e1:06:a6:5f:1e:3e:1d:d8:40:e8:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E0:77:C3:24:73:39:62:52:F1:0D:0B:BD:06:CD:0F:7E:C4:93:4E
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/s-B3wyRzOWJS8Q0LvQbND37Ek04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.36.0/23
Signature Algorithm: sha256WithRSAEncryption
63:8e:20:9f:ab:39:89:a8:fa:8a:96:fe:30:be:c3:2e:2f:f1:
71:85:fe:d3:a8:c6:ec:b8:87:0e:90:20:99:55:77:9b:f0:9a:
68:20:a2:b2:3c:62:db:8c:e8:26:8e:96:bc:29:73:9b:c1:d1:
09:8d:cd:74:f8:23:80:cf:a6:7d:06:71:9c:3e:38:17:22:ad:
84:cd:8c:b0:a8:e1:e5:7b:ab:b2:86:e6:dc:03:43:1a:57:19:
07:c0:52:59:9c:70:af:f6:dd:db:51:e0:f0:00:b3:e4:f6:e1:
13:79:7d:b7:60:d5:e7:59:28:06:20:a8:2b:10:7b:dc:b1:b4:
03:66:f5:8f:65:12:5a:23:9b:59:93:de:28:46:d4:d4:17:4c:
88:8f:5f:2f:cf:81:17:cb:d1:b7:66:c5:6f:57:f4:a0:36:63:
66:6e:02:df:53:ee:4c:f3:3b:1f:65:ba:2c:81:f5:19:b0:c5:
28:23:49:b4:da:30:c1:0a:4a:bf:65:01:69:e7:dc:0e:65:fb:
ea:92:20:e8:fa:de:a8:09:36:93:b2:f6:94:fc:d3:91:6d:87:
48:18:e7:3e:8e:a4:89:13:09:d8:9d:32:2c:9d:f4:f2:29:da:
d7:dc:3f:fc:83:c9:d4:10:86:85:fd:6a:7e:81:e8:a5:49:40:
b9:09:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:21 2024 by rpki-client on console-ams.rpki-client.org