Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/ARS8ABWZNrWzTyO7BBr-blkQt08.roa
File: ARS8ABWZNrWzTyO7BBr-blkQt08.roa (raw, json)
Hash identifier: LHO8hzWDfylSo9pMQZA01jOp3aDQ7NhOGyZLY2Iy8Wo=
Subject key identifier: 01:14:BC:00:15:99:36:B5:B3:4F:23:BB:04:1A:FE:6E:59:10:B7:4F
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 0187411E9116804D4B8DCD1B988DBF09E28C
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/ARS8ABWZNrWzTyO7BBr-blkQt08.roa
Signing time: Sun 02 Apr 2023 08:38:54 +0000
ROA not before: Sun 02 Apr 2023 08:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:41:1e:91:16:80:4d:4b:8d:cd:1b:98:8d:bf:09:e2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Apr 2 08:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0114bc00159936b5b34f23bb041afe6e5910b74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6d:35:47:14:d8:84:2b:a3:1f:33:78:48:a6:
9e:30:7b:8b:ea:65:d7:e1:4f:a1:96:b9:6f:37:7d:
e0:c1:de:3e:1d:85:b7:c1:00:3b:59:70:dc:7a:72:
b2:d1:0d:2d:c7:04:0d:48:20:af:a6:0b:f0:9d:1b:
e9:5a:4a:01:54:e5:8a:7a:09:b1:34:2c:03:77:46:
d9:27:f6:b9:88:f9:87:47:f9:db:33:33:7b:0d:fe:
eb:da:48:c5:c7:fe:b3:7c:39:23:3e:ce:f0:06:d3:
12:18:fc:83:71:a7:d5:d4:43:be:3d:e1:94:5a:da:
0f:75:12:81:fd:36:b4:80:8f:c8:f6:c0:38:6b:50:
91:6c:8f:40:01:79:44:41:cc:be:d9:5c:34:c7:50:
1f:27:2e:67:fe:0b:82:01:46:02:bf:14:91:5e:ec:
82:b4:85:22:65:66:9e:64:5f:ab:15:ec:09:20:68:
81:dd:04:8a:d4:8b:70:ac:01:0b:eb:c1:60:84:aa:
55:9f:aa:3e:c6:06:2c:77:a5:2e:98:2e:f0:e1:63:
15:1f:6c:a1:a0:ba:20:45:50:e8:8a:47:26:08:ab:
31:70:fd:32:3b:22:38:a3:9e:d1:6c:fc:7b:92:c7:
ac:8b:39:bb:6a:8c:c7:ee:9f:b9:ba:28:c0:b7:8d:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:BC:00:15:99:36:B5:B3:4F:23:BB:04:1A:FE:6E:59:10:B7:4F
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/ARS8ABWZNrWzTyO7BBr-blkQt08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:07:a5:0a:9e:9d:3d:b2:c8:88:7f:70:ab:49:66:31:ab:cf:
86:2e:db:16:92:30:e1:0c:35:29:b9:d9:c1:9b:88:5f:6e:64:
3e:81:43:f1:44:fc:c5:ec:0f:38:7a:c0:88:64:33:f4:d6:65:
21:8d:c2:52:27:a6:a9:4f:5a:a2:59:7c:ec:30:c9:d3:2a:ba:
87:8c:28:d8:8f:4c:21:19:74:39:3f:1b:ad:96:bc:25:e3:86:
bc:ec:1a:50:54:c1:05:b2:74:55:2d:8c:af:e7:a6:fd:4b:f8:
4d:dc:bd:3c:9f:7a:98:32:6e:0f:83:fa:74:c1:13:2f:51:33:
f7:19:8b:e2:7f:c0:a2:bb:da:15:c1:9c:4e:9c:da:97:ec:97:
12:db:d2:a0:2f:40:0e:0f:26:b3:fd:c2:59:ba:5f:9d:fb:0d:
04:bc:7d:e0:af:c3:a5:32:32:5f:0a:95:35:b0:8a:fd:6f:6e:
ee:04:65:68:5d:4a:5b:34:9e:b9:c4:6c:d9:1d:52:95:f0:85:
70:82:8d:3b:50:d5:ce:36:bb:38:c6:8f:dd:69:27:2d:b0:a9:
37:44:70:7a:04:f3:96:13:6a:23:89:89:8f:5b:40:a3:3c:c5:
96:88:16:95:b7:a9:b2:92:04:aa:8c:77:7a:f3:c3:65:6b:f5:
2e:46:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:18 2024 by rpki-client on console-fra.rpki-client.org