Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/bQ3a_R8ZUpmG3LRhWp-k76Zec1g.roa
File: bQ3a_R8ZUpmG3LRhWp-k76Zec1g.roa (raw, json)
Hash identifier: g00doP/FECsgHLP7he3VmRRsjK95Q1dSmTFOdFajuzY=
Subject key identifier: 6D:0D:DA:FD:1F:19:52:99:86:DC:B4:61:5A:9F:A4:EF:A6:5E:73:58
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 01864B29B8F1367C4B661371722BF57E1C57
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/bQ3a_R8ZUpmG3LRhWp-k76Zec1g.roa
Signing time: Mon 13 Feb 2023 14:24:30 +0000
ROA not before: Mon 13 Feb 2023 14:24:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210955
IP address blocks: 194.113.61.0/24 maxlen: 24
194.113.70.0/24 maxlen: 24
194.113.92.0/24 maxlen: 24
194.113.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:29:b8:f1:36:7c:4b:66:13:71:72:2b:f5:7e:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Feb 13 14:24:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d0ddafd1f19529986dcb4615a9fa4efa65e7358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:05:47:68:bd:ce:1f:dc:42:64:98:4b:7c:
f6:32:de:be:53:3a:78:7d:cd:df:78:84:d3:c5:b0:
ad:ff:95:fe:65:00:78:0c:b9:3d:3f:f2:17:03:5b:
5c:6b:68:e1:35:91:93:ed:04:46:f9:e2:7c:e1:f1:
7e:27:ac:e7:aa:22:7e:5b:ff:31:59:cd:90:8c:76:
b5:fc:fd:ea:1e:2a:a3:cb:61:af:81:ea:70:b1:79:
40:fb:ef:86:e8:d3:28:f3:d9:85:d6:73:c4:d3:b6:
18:82:28:41:70:1a:ea:c8:70:5d:98:2b:e1:4c:62:
b8:91:91:1b:4c:4b:ff:9e:2f:9f:74:af:e2:70:eb:
22:63:a9:8a:75:85:29:51:ab:c2:27:4f:76:b3:fc:
de:dc:88:93:27:22:cd:00:a5:5e:0c:aa:61:2a:e8:
4c:2d:44:92:91:5e:af:f2:0a:64:ff:0e:41:4e:ef:
9e:ab:b6:29:2e:6e:d6:fe:e4:15:28:dd:28:92:5e:
00:0e:d9:b6:5e:29:1a:b3:5e:ce:8a:e1:2a:d4:99:
b9:6d:d8:75:70:a6:ca:55:52:43:0a:4c:20:47:f3:
54:ec:a7:b8:68:e7:dd:8d:99:a7:1a:2a:33:23:d8:
ae:7b:64:fa:c9:f5:2e:67:73:6d:ca:49:42:c7:77:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0D:DA:FD:1F:19:52:99:86:DC:B4:61:5A:9F:A4:EF:A6:5E:73:58
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/bQ3a_R8ZUpmG3LRhWp-k76Zec1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.61.0/24
194.113.70.0/24
194.113.92.0/24
194.113.114.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ff:c8:70:f9:89:18:1f:84:16:d4:b9:4b:17:1e:7e:1e:07:
70:61:42:b8:6d:90:05:86:fd:01:f2:9e:e6:83:cb:05:73:b8:
ac:b8:12:da:e2:74:35:db:08:f2:ab:9b:9b:92:3b:3e:83:77:
81:8b:cf:3c:7d:8e:45:aa:72:a0:b1:69:27:88:38:94:44:61:
57:b3:57:cf:fd:0c:a1:af:40:e8:f3:82:02:a4:ba:41:43:1a:
a6:26:9f:ca:62:f4:f8:12:c8:d5:a4:41:4f:b9:57:89:ff:03:
e5:2e:a2:b1:44:10:e6:50:87:34:66:fe:96:5f:33:c0:7f:31:
a9:49:71:2f:0a:fc:0c:b0:13:86:53:78:2f:2d:cd:80:47:4b:
ef:cd:d4:75:9d:bc:93:5b:b2:be:5d:4f:d0:f8:cd:38:66:1d:
4c:04:d8:c4:43:97:96:af:c7:87:f3:7d:32:7d:02:ce:f6:41:
ca:c9:fc:70:02:16:42:dc:ec:f8:4b:64:e0:a3:46:fc:c8:94:
04:f1:36:98:5a:71:51:07:d6:91:43:01:7a:09:a3:a5:7c:87:
94:c4:8a:5d:5d:31:0d:2d:d4:cb:84:39:8e:90:39:ec:88:22:
59:fc:50:fb:0d:21:fb:d1:e3:84:4a:ba:0d:98:83:c6:5c:7b:
d6:1a:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:08 2024 by rpki-client on console-ams.rpki-client.org