Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6vQwekv08MQDYzt_UADEokusGz0.roa
File: 6vQwekv08MQDYzt_UADEokusGz0.roa (raw, json)
Hash identifier: JGEyhv8kAn/PYu1ENV+r7EN4yK/9BkylNQJu3+ZRneE=
Subject key identifier: EA:F4:30:7A:4B:F4:F0:C4:03:63:3B:7F:50:00:C4:A2:4B:AC:1B:3D
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018988129AA9856CA715A7C853025A69AEF9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6vQwekv08MQDYzt_UADEokusGz0.roa
Signing time: Mon 24 Jul 2023 13:24:27 +0000
ROA not before: Mon 24 Jul 2023 13:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212338
IP address blocks: 194.39.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:12:9a:a9:85:6c:a7:15:a7:c8:53:02:5a:69:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 24 13:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf4307a4bf4f0c403633b7f5000c4a24bac1b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:c0:a5:84:3c:12:f0:32:87:94:a5:d5:57:
f2:0b:f8:de:dd:be:31:d9:04:45:3f:c4:f5:5f:3f:
67:0f:25:07:2e:9f:ca:c0:d2:45:05:40:7a:5a:01:
6a:f5:b6:6d:24:b0:20:59:6e:3a:41:c7:3e:87:ee:
de:83:b1:fc:0f:35:db:2f:32:b5:ed:c5:fa:36:cb:
18:ad:ad:84:e8:3b:8a:ac:c3:3c:ba:d9:93:43:dd:
fd:f2:04:53:13:51:c9:4e:91:85:38:55:03:68:27:
8d:c8:d8:58:24:08:13:e1:7b:be:2b:84:79:06:c2:
07:8c:a3:cb:8e:ac:82:e6:5a:c5:56:65:27:45:87:
78:ea:cf:77:ea:80:b0:37:20:b4:c7:5d:cf:79:08:
a4:89:b9:e7:74:9a:28:71:dc:12:28:5f:06:f0:ad:
92:29:b2:18:3e:c1:07:44:48:c7:92:38:6c:df:14:
8c:cc:3e:1d:dd:a3:d2:89:94:bc:fc:8d:04:b9:9a:
2a:36:3a:b9:f0:59:91:fc:9f:6e:1f:6d:5a:2c:bf:
a3:bd:be:62:74:c8:f9:a6:98:0e:14:6a:dc:39:87:
33:27:12:1b:ce:23:aa:f3:43:58:aa:74:11:5c:c7:
3f:7f:01:20:c1:1a:7f:74:5e:52:3d:3d:78:e2:8d:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:30:7A:4B:F4:F0:C4:03:63:3B:7F:50:00:C4:A2:4B:AC:1B:3D
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/6vQwekv08MQDYzt_UADEokusGz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:cf:44:df:12:98:11:3f:a4:b1:bc:68:c5:bb:7c:1d:ea:ce:
2d:02:2d:ca:c6:24:92:80:0e:5b:d9:11:f9:4a:2f:14:02:3e:
3f:df:1f:af:d0:da:c6:ff:d7:93:a2:6c:c5:bf:43:a0:92:13:
e7:39:0a:22:8a:ce:3c:f8:a9:9f:28:1f:b6:e6:cd:50:bd:12:
2c:67:9a:b4:cf:3b:16:ab:3b:57:5a:f6:8c:b6:0e:04:dd:52:
ff:03:91:31:b2:27:93:c7:52:b4:30:14:3f:c5:2b:9a:1b:42:
5e:08:76:ab:bf:3a:27:05:a2:cf:9c:87:99:91:c9:f1:21:c3:
76:5b:ea:9a:4f:05:ba:fc:54:4c:0d:9c:2c:b4:97:69:0c:07:
2b:96:19:7b:07:34:4f:53:d1:6e:35:2e:70:4c:77:47:d2:8a:
7a:c7:db:8c:15:b7:02:11:27:6c:61:a9:3e:5c:00:72:fc:93:
77:b1:73:ee:e6:85:f3:60:79:5a:81:5a:89:e3:2e:60:b5:55:
e8:c2:18:27:76:6b:16:76:ad:40:7b:d0:2b:4f:67:03:76:d3:
33:9b:64:df:2b:1d:aa:e8:73:24:41:ca:a7:97:47:7e:14:48:
86:9f:be:34:05:0d:4e:d6:e9:36:e5:ee:be:a5:8f:69:6a:68:
94:a3:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:36 2024 by rpki-client on console-fra.rpki-client.org