Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/BebG7n2-A4Yvc6NV60SGt4jKV3Q.roa
File: BebG7n2-A4Yvc6NV60SGt4jKV3Q.roa (raw, json)
Hash identifier: IJEmqNIuJkGr/UqHj+SYr69fPATr45xjKXoNb3nLgsQ=
Subject key identifier: 05:E6:C6:EE:7D:BE:03:86:2F:73:A3:55:EB:44:86:B7:88:CA:57:74
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 018BB7126259134C95F99F3EA3EC19A6E9A1
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/BebG7n2-A4Yvc6NV60SGt4jKV3Q.roa
Signing time: Fri 10 Nov 2023 02:31:57 +0000
ROA not before: Fri 10 Nov 2023 02:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207718
IP address blocks: 194.147.33.0/24 maxlen: 24
194.147.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:12:62:59:13:4c:95:f9:9f:3e:a3:ec:19:a6:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Nov 10 02:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05e6c6ee7dbe03862f73a355eb4486b788ca5774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:a6:13:f3:c2:00:48:c2:eb:ff:92:24:53:
50:07:e9:0d:9f:2d:13:76:1c:8b:74:d1:cb:82:db:
e8:c6:b6:56:6c:8d:8e:f3:40:b5:f0:bb:12:d6:4a:
12:8a:36:7d:48:22:fb:80:41:54:c2:6a:97:97:f1:
9d:85:06:2d:a3:69:31:d5:0e:06:a6:14:1a:f1:73:
7b:67:b1:51:f0:1f:a8:b6:f8:f6:77:6d:52:58:13:
ca:e7:6e:86:15:6d:27:31:5c:91:b9:33:cd:87:12:
06:6e:51:78:a8:6f:d0:98:69:e9:8a:db:42:95:15:
7e:d9:ec:36:1a:55:cf:3e:21:05:4d:86:2b:5f:f2:
72:e3:fb:27:47:de:c5:a8:67:bb:b6:1f:56:fd:87:
a0:97:9c:91:51:20:bc:86:93:bd:87:c5:a2:e2:2d:
e8:03:8a:3f:16:0f:a9:87:ec:d8:41:e0:bc:7a:8b:
36:2d:74:fe:91:d5:44:9e:6e:ba:79:2a:fd:bf:fe:
3e:ce:aa:45:23:39:e6:3a:18:a3:df:95:49:7b:0b:
a4:58:81:f5:10:45:64:9c:d9:d4:47:85:d8:e5:e9:
75:c9:74:86:f7:38:47:b3:2e:e8:bc:14:4b:a8:bf:
7e:36:bf:da:12:ef:dd:f9:01:8f:5f:b2:b0:af:f3:
43:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E6:C6:EE:7D:BE:03:86:2F:73:A3:55:EB:44:86:B7:88:CA:57:74
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/BebG7n2-A4Yvc6NV60SGt4jKV3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.32.0/23
Signature Algorithm: sha256WithRSAEncryption
42:02:23:79:f5:11:1d:4d:2e:cf:1c:d0:3e:e9:d8:d5:78:b8:
eb:94:5b:3b:f2:66:09:6d:86:d6:57:6c:ab:fc:0c:9d:d5:1f:
5d:c3:b5:96:45:40:4f:f9:e6:87:f9:20:d3:20:9a:63:56:47:
f1:b0:7b:e9:32:d8:d7:bb:c3:9c:a7:2d:63:38:2d:e8:69:a9:
a3:1b:20:15:58:7e:6b:7a:e5:66:96:42:cd:3d:e0:49:9d:e7:
26:19:fc:0b:f2:6c:07:2d:c4:3a:e2:27:fd:54:59:46:48:86:
d9:3a:f3:1a:00:e8:b4:40:0c:55:58:6e:a3:89:84:d0:5f:04:
11:ca:21:22:1f:a8:54:28:f2:11:4b:2b:18:92:4b:7d:a4:61:
4b:2a:6e:30:00:94:8a:f8:7f:b2:bc:9f:74:00:b4:3a:57:00:
9a:95:1e:77:44:db:98:8f:94:05:91:45:26:02:78:7b:52:cb:
bb:91:0e:46:58:86:3f:f7:13:c7:89:79:e5:3b:21:88:6e:74:
4a:1e:0b:07:3f:46:09:6b:07:3b:c0:f9:f7:af:8e:b8:38:e3:
ad:67:9f:ad:6c:ba:07:f2:cf:9b:2d:05:b6:ba:97:a7:44:aa:
57:4d:89:ef:d1:74:1b:24:c4:ad:0b:32:c8:bc:0d:2e:42:df:
c6:c6:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org