Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0r9OpHWG4Lr0Ne0SYqNdTRZMBek.roa
File: 0r9OpHWG4Lr0Ne0SYqNdTRZMBek.roa (raw, json)
Hash identifier: VxtXClTj8TN1SkW3Jz7RhbgNVzapBm6owMIo+Jpv0Kg=
Subject key identifier: D2:BF:4E:A4:75:86:E0:BA:F4:35:ED:12:62:A3:5D:4D:16:4C:05:E9
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF7C4C37E1628CC06F35CB1E3E52EB
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0r9OpHWG4Lr0Ne0SYqNdTRZMBek.roa
Signing time: Sun 01 Jan 2023 15:24:49 +0000
ROA not before: Sun 01 Jan 2023 15:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203508
IP address blocks: 194.181.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:7c:4c:37:e1:62:8c:c0:6f:35:cb:1e:3e:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2bf4ea47586e0baf435ed1262a35d4d164c05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:bf:8d:70:9a:61:65:dc:b9:36:a0:a6:9d:
7e:7e:8e:56:96:7d:91:12:78:2f:58:e6:2d:d9:63:
c5:a8:0e:84:3c:2d:a5:03:b0:d9:7c:97:e2:be:8b:
2b:9a:6b:25:3d:9e:ed:26:6a:00:b0:19:dc:af:75:
d6:fe:c6:c7:cf:e4:1d:67:58:e3:59:1e:3b:6f:1b:
f1:1c:6e:fb:6d:a1:de:a0:e7:ed:43:1d:00:e9:6a:
d8:18:07:98:51:6b:02:88:c7:6d:f2:1d:c8:dd:42:
77:b6:b5:a2:5c:df:5d:fd:93:5f:cd:a9:34:18:cb:
39:c3:12:89:33:5a:1f:50:73:3c:d9:a4:22:ec:05:
0e:dd:b7:98:01:7c:f9:73:8f:88:1b:a1:0b:f6:4f:
4f:4c:e9:99:60:59:e3:20:0d:4d:ce:12:36:77:4e:
15:b6:d6:6e:8b:7e:f8:05:9f:9b:ab:0e:89:56:fa:
c0:c6:63:04:dd:68:43:87:5e:66:82:60:09:8d:28:
3d:ef:ff:09:2a:63:3c:d4:be:10:a2:a4:ee:5c:9c:
cf:09:92:90:9a:4b:ca:31:c7:af:53:5e:76:05:5c:
09:43:01:2e:b9:75:2d:ea:80:da:39:03:02:ac:11:
e7:33:d7:0c:6f:2a:86:f9:f5:54:71:d0:8a:3c:97:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BF:4E:A4:75:86:E0:BA:F4:35:ED:12:62:A3:5D:4D:16:4C:05:E9
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/0r9OpHWG4Lr0Ne0SYqNdTRZMBek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:71:26:85:81:30:04:46:41:a0:43:40:4a:0f:9a:3b:a4:33:
9b:b0:42:21:6b:50:32:b6:e6:94:f4:f6:79:fe:4f:ce:e1:e8:
b2:c8:4e:1f:8f:bd:23:d1:57:d8:0a:db:fd:76:9e:4e:01:55:
bf:88:f0:07:6e:9e:f3:07:c3:ac:82:67:54:00:26:92:1a:00:
c3:bd:99:c1:c0:a9:10:bf:10:1f:17:1a:78:28:79:be:7b:0e:
96:ef:7b:2d:77:09:9c:aa:6c:06:3f:7f:23:19:e1:d6:b5:3a:
ea:cc:28:12:83:b1:83:bf:c4:f3:49:3f:36:a0:37:8a:40:43:
1f:26:24:a3:4f:35:7d:92:07:8c:5e:c1:ab:0e:8d:a3:fe:d6:
55:98:3f:85:6c:0a:2b:ae:21:bc:35:97:3b:06:a5:cc:cd:76:
fb:d1:33:9d:09:c1:6b:02:a0:4f:72:13:33:b8:83:48:65:e7:
6b:d2:b1:a9:a2:ca:c4:75:67:5e:f9:6b:19:70:3a:4a:63:1e:
bf:e0:92:12:f0:00:d8:6f:c3:5b:9c:9d:41:e6:ce:d0:7d:e5:
20:0d:dc:f1:8e:22:57:8e:2a:ce:8f:51:df:71:b3:49:0d:6a:
77:b0:29:74:13:3e:25:bf:f2:a1:9b:64:74:fe:8c:62:e2:07:
94:05:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:10 2024 by rpki-client on console-fra.rpki-client.org