Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/BA-d7ZDA1vD23Hu0hAUPSw20mXo.roa
File: BA-d7ZDA1vD23Hu0hAUPSw20mXo.roa (raw, json)
Hash identifier: tbJpKlJgHz3D4JPwA+GpQgI5uXLyGo/kIPsrgt6OUBs=
Subject key identifier: 04:0F:9D:ED:90:C0:D6:F0:F6:DC:7B:B4:84:05:0F:4B:0D:B4:99:7A
Certificate issuer: /CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Certificate serial: 0185718C409818FCFEDDFD93261FAF17F0DC
Authority key identifier: 62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/BA-d7ZDA1vD23Hu0hAUPSw20mXo.roa
Signing time: Mon 02 Jan 2023 08:14:55 +0000
ROA not before: Mon 02 Jan 2023 08:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47815
IP address blocks: 194.30.185.0/24 maxlen: 24
188.92.200.0/21 maxlen: 21
94.125.64.0/21 maxlen: 21
2a03:4080::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:40:98:18:fc:fe:dd:fd:93:26:1f:af:17:f0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62dd5a4075428a7fc9ac94e6d2a2d9a992ef4853
Validity
Not Before: Jan 2 08:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040f9ded90c0d6f0f6dc7bb484050f4b0db4997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:cf:ea:a2:22:47:22:8d:90:cf:d5:74:02:
43:51:dc:9d:b6:3a:b2:39:d3:6d:87:00:8e:88:db:
48:05:07:8b:e4:d2:10:14:64:26:09:e6:50:68:b0:
9a:0b:fc:7e:61:04:8f:1b:66:f4:62:71:76:4e:85:
f0:3f:a4:ef:20:30:f1:83:f3:7f:bb:d6:62:83:b1:
d8:e4:93:4e:73:2b:56:fe:27:cb:ff:ba:9e:6b:8b:
c6:e4:a3:26:12:11:08:81:93:77:ad:44:d0:82:a4:
f4:3a:8c:dd:d1:f0:de:a8:e9:6c:da:bb:89:10:35:
2a:09:b9:2f:f6:aa:ba:b0:43:e6:34:e1:40:07:1e:
19:d7:bc:f8:32:74:81:38:37:01:4a:63:53:d3:33:
9f:e7:ff:e7:72:76:1e:e7:f9:e9:91:48:4d:54:0c:
24:dc:c6:24:e4:e7:d7:9e:84:49:42:ef:24:02:63:
6b:0b:c8:eb:97:91:6e:35:28:bc:78:6a:10:c5:a6:
7c:fb:ae:ae:de:5b:5e:30:b4:d2:e8:da:08:44:fe:
54:0c:78:42:17:3d:5b:68:9f:68:44:68:c4:1d:2d:
99:ee:e0:81:30:e8:02:f2:14:8c:cd:74:6c:d6:0b:
06:3c:12:8e:cf:c3:ec:40:6a:22:5d:33:dc:2f:66:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:9D:ED:90:C0:D6:F0:F6:DC:7B:B4:84:05:0F:4B:0D:B4:99:7A
X509v3 Authority Key Identifier:
keyid:62:DD:5A:40:75:42:8A:7F:C9:AC:94:E6:D2:A2:D9:A9:92:EF:48:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yt1aQHVCin_JrJTm0qLZqZLvSFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/BA-d7ZDA1vD23Hu0hAUPSw20mXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b722c8-14e3-4082-92d1-65f8900e5c82/1/Yt1aQHVCin_JrJTm0qLZqZLvSFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.64.0/21
188.92.200.0/21
194.30.185.0/24
IPv6:
2a03:4080::/32
Signature Algorithm: sha256WithRSAEncryption
87:50:d1:43:78:68:02:f8:da:62:ff:21:00:69:bf:28:0f:26:
62:1a:0f:f5:d7:49:31:1d:78:4a:5f:90:23:ef:09:e5:4a:6f:
de:61:47:46:6c:9f:fd:77:ef:71:cb:72:c1:93:15:46:a5:3b:
d3:96:ca:0d:62:c2:21:63:49:c9:8c:07:e2:4f:7c:7e:9c:9b:
b2:6a:11:9e:ba:ce:80:ee:e3:a2:1e:24:f8:25:42:68:e6:8e:
7f:bb:40:e8:bd:62:73:0e:74:f5:4b:27:c9:6f:57:df:98:a2:
0f:16:c5:bc:0c:e1:8a:04:76:6f:78:27:5c:97:a2:44:20:07:
7b:d6:94:79:1e:d7:2e:c4:eb:2f:40:a7:4a:57:a5:63:3e:cd:
e2:4e:b6:d3:bb:f7:4f:58:c2:04:28:4e:6d:00:7e:5a:77:79:
c5:33:47:ae:44:c1:15:7e:16:e3:29:b1:49:41:85:98:cb:45:
a3:a7:da:1b:3d:5d:ee:ae:ac:7f:d7:26:c0:ea:d9:97:0e:8b:
6c:ed:a9:6f:5b:ed:71:21:cd:3a:77:b4:da:bc:e1:c2:d1:70:
23:50:8c:3a:c6:74:2b:99:e4:98:f3:22:98:b2:81:8f:fd:81:
f9:6a:58:c3:f7:a1:9e:0e:de:28:3e:8a:e3:da:17:22:41:94:
30:3d:b4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:10 2024 by rpki-client on console-fra.rpki-client.org