Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/cl71_BJHrUm8wMS1JeZ_M_WRGn4.roa
File: cl71_BJHrUm8wMS1JeZ_M_WRGn4.roa (raw, json)
Hash identifier: oGsQt+0BdHCol0qmU3F3dQLwUEUqSP4fTeZZynMZiSc=
Subject key identifier: 72:5E:F5:FC:12:47:AD:49:BC:C0:C4:B5:25:E6:7F:33:F5:91:1A:7E
Certificate issuer: /CN=9c1394768c9a39a6112674d7375972a6696b4680
Certificate serial: 018675BA1F13DE5685011F630804D9F98FE2
Authority key identifier: 9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/cl71_BJHrUm8wMS1JeZ_M_WRGn4.roa
Signing time: Tue 21 Feb 2023 20:46:17 +0000
ROA not before: Tue 21 Feb 2023 20:46:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207083
IP address blocks: 194.146.104.0/24 maxlen: 24
194.146.114.0/24 maxlen: 24
194.146.116.0/24 maxlen: 24
194.146.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:ba:1f:13:de:56:85:01:1f:63:08:04:d9:f9:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1394768c9a39a6112674d7375972a6696b4680
Validity
Not Before: Feb 21 20:46:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=725ef5fc1247ad49bcc0c4b525e67f33f5911a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7a:33:0a:2f:77:14:d6:f6:da:76:97:17:3c:
3d:d5:aa:09:c4:c3:ae:80:66:ab:53:1d:88:b9:7f:
07:8f:68:e2:e8:28:da:5f:93:81:16:80:c1:ea:6b:
39:c3:e8:98:e6:64:9e:01:1c:ab:fb:80:e4:5c:06:
85:47:1e:a5:b2:b9:ee:76:bd:8e:50:e5:96:11:da:
37:dc:1b:c0:6a:4a:3e:01:c4:06:72:44:3d:3b:3e:
8c:0d:7e:11:c0:f3:16:03:48:47:af:7b:83:32:e3:
ab:31:a8:c2:10:61:ee:2d:ab:75:c8:bf:ed:ea:e4:
25:9d:1a:11:4c:42:b7:2e:9a:77:05:fc:08:fe:76:
56:b4:ac:ab:20:4c:0e:0a:4d:37:af:5e:c0:6e:97:
f0:5b:e8:ff:4b:78:15:ea:7b:ba:80:ba:7e:85:71:
62:02:51:47:de:a7:ce:64:15:b4:c9:32:87:33:6f:
d6:3f:38:f1:80:7f:25:d1:96:37:fe:ba:4e:0d:37:
ad:e5:20:de:6c:a3:50:91:d9:af:47:59:be:a9:2f:
9c:2f:27:80:1e:60:7a:e5:5a:55:76:38:36:18:63:
e5:f6:c6:87:39:ef:ac:16:32:23:c5:8e:3d:a4:6c:
10:f0:f7:b2:bb:9d:23:6e:3b:e3:b5:3d:31:fd:cf:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:F5:FC:12:47:AD:49:BC:C0:C4:B5:25:E6:7F:33:F5:91:1A:7E
X509v3 Authority Key Identifier:
keyid:9C:13:94:76:8C:9A:39:A6:11:26:74:D7:37:59:72:A6:69:6B:46:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBOUdoyaOaYRJnTXN1lypmlrRoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/cl71_BJHrUm8wMS1JeZ_M_WRGn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e7210-0528-4456-b68e-a713a1915c90/1/nBOUdoyaOaYRJnTXN1lypmlrRoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.104.0/24
194.146.114.0/24
194.146.116.0/24
194.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b5:f3:70:cc:12:6b:0f:5c:8c:a7:71:89:ce:3b:69:95:3a:
7f:d4:e6:8f:43:73:4e:2f:6f:14:cb:1b:f1:95:a5:8b:b6:ba:
15:e3:92:7f:9c:2c:11:43:d5:0d:d4:6a:40:b1:01:75:46:46:
cc:22:60:40:ed:81:af:33:3d:71:08:46:fa:30:e5:ab:12:c5:
0f:d8:6a:ab:2e:7c:99:70:28:c0:5f:f3:74:db:ac:c3:29:3a:
1a:b8:93:c0:74:d8:3d:90:e7:f2:70:12:2b:cc:b3:3d:ab:e2:
a9:39:0c:34:ba:4e:54:3d:12:21:92:6c:e3:55:a7:9f:20:33:
0b:ab:85:a8:22:5f:00:7b:4f:93:b4:bb:dd:30:0b:f5:fb:40:
43:07:03:ff:01:a5:32:b8:d1:ba:9f:7d:ac:c8:41:ba:a3:ea:
d2:dd:e8:92:a1:b9:11:8d:9a:54:6a:77:c0:13:3c:13:43:12:
33:cc:ce:5d:5f:10:67:ff:7e:43:1a:e4:18:ec:fc:d2:27:d1:
dd:22:3a:c2:9a:67:aa:f7:ec:40:b0:04:75:44:a8:39:f8:0d:
67:f9:44:fe:54:6b:21:27:48:43:6d:81:6c:6f:9a:c8:a2:bc:
7f:6c:7a:ec:82:42:0e:59:39:d4:e0:8d:6c:bf:1f:17:cb:06:
d5:10:6c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:04 2024 by rpki-client on console-ams.rpki-client.org