Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/5mQnljADJpG0I0xU1vgSBYwW-mM.roa
File: 5mQnljADJpG0I0xU1vgSBYwW-mM.roa (raw, json)
Hash identifier: FtBmcbNyfIA+VgvP3jBnqKNQf79kEEDqgipoYQNxU3E=
Subject key identifier: E6:64:27:96:30:03:26:91:B4:23:4C:54:D6:F8:12:05:8C:16:FA:63
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0191263BE41FCEA867A57B8B51BD814D97DE
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/5mQnljADJpG0I0xU1vgSBYwW-mM.roa
Signing time: Tue 06 Aug 2024 05:49:04 +0000
ROA not before: Tue 06 Aug 2024 05:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 14:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:3b:e4:1f:ce:a8:67:a5:7b:8b:51:bd:81:4d:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Aug 6 05:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e664279630032691b4234c54d6f812058c16fa63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:18:c0:65:60:c7:a5:e9:49:44:37:8c:b1:
3e:44:7c:31:92:5f:a9:57:7f:d3:e4:37:bc:d2:dc:
47:2f:b0:3f:a7:eb:4f:f2:7c:58:63:56:29:36:43:
1b:ce:ac:67:2e:f2:d3:71:71:1e:8a:e3:dd:bd:f0:
9f:0e:7b:3f:68:9b:23:d9:27:80:fd:57:92:20:e4:
64:53:45:66:bc:97:6b:d1:00:91:d7:5e:4a:52:ed:
52:ab:2e:5d:19:31:18:07:89:de:75:69:f9:e4:78:
55:0e:92:b5:d7:39:06:1d:63:30:cd:37:19:d5:18:
1e:79:36:c0:4e:f4:a7:32:05:d7:9b:93:64:5e:3b:
6b:97:d9:a6:fa:7d:1f:d5:c2:7a:a8:45:70:f0:bf:
15:21:64:8c:cb:c6:e9:2f:8a:33:65:5c:ba:5e:e4:
21:a2:89:4f:55:c8:f4:67:db:95:1a:70:ab:e4:a2:
02:f7:66:62:23:5b:29:d1:f4:80:ea:6f:11:b4:5e:
22:85:51:0b:0d:54:e1:07:20:84:86:da:4c:a1:8e:
cd:a8:3c:2f:9f:a3:c4:1f:a3:71:8c:90:ea:5f:15:
21:99:17:67:c7:6a:a1:8b:3a:c7:7d:88:3c:84:09:
c3:4d:3f:bb:6a:90:5a:ec:97:d5:a3:04:1a:24:6a:
62:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:64:27:96:30:03:26:91:B4:23:4C:54:D6:F8:12:05:8C:16:FA:63
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/5mQnljADJpG0I0xU1vgSBYwW-mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:52:c5:29:7f:99:af:15:2c:c0:8e:85:bc:f6:31:56:cb:11:
55:2c:fd:9e:bb:41:1c:72:75:9d:75:6f:11:8c:d7:d9:e5:56:
83:1e:6f:18:a7:78:d7:b4:28:45:51:8b:84:1f:7e:65:df:ba:
46:2e:d3:a2:01:c4:53:30:4c:1f:dd:59:6f:ee:5c:7e:0a:8f:
5f:b5:b0:b5:37:ea:6a:3c:54:7f:f0:70:53:f3:66:5d:f2:a1:
20:4d:12:ec:9e:1c:a5:45:e8:dd:71:2a:a3:a2:79:22:b5:cd:
e4:53:1d:ac:ca:77:2f:80:ac:37:53:19:cd:39:26:12:71:7b:
98:ab:b5:6b:0e:20:f6:b4:d3:6b:6d:25:02:36:53:af:54:6f:
c5:73:6f:da:4c:59:a4:aa:49:1a:c0:5d:83:77:f0:ed:ea:da:
0d:0f:bd:6c:92:9f:55:cf:cd:8d:17:6e:ca:b2:b2:54:f0:cd:
df:94:d8:61:4e:01:fc:8c:0f:ca:b2:4a:69:33:5b:64:21:fd:
49:fd:c3:71:6b:d9:05:16:78:a6:39:12:01:37:c1:54:67:8b:
7f:ab:87:68:94:76:48:e8:e1:4c:83:ec:86:fb:49:c7:05:6f:
90:28:d9:bd:49:78:4e:17:ab:2e:60:a9:3b:5a:cb:ac:d3:10:
7f:a9:52:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEmO+QfzqhnpXuLUb2BTZfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjQwODA2MDU0OTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjY0Mjc5NjMwMDMyNjkxYjQyMzRjNTRkNmY4MTIwNThjMTZmYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTUYwGVgx6XpSUQ3jLE+RHwxkl+p
V3/T5De80txHL7A/p+tP8nxYY1YpNkMbzqxnLvLTcXEeiuPdvfCfDns/aJsj2SeA
/VeSIORkU0VmvJdr0QCR115KUu1Sqy5dGTEYB4nedWn55HhVDpK11zkGHWMwzTcZ
1RgeeTbATvSnMgXXm5NkXjtrl9mm+n0f1cJ6qEVw8L8VIWSMy8bpL4ozZVy6XuQh
oolPVcj0Z9uVGnCr5KIC92ZiI1sp0fSA6m8RtF4ihVELDVThByCEhtpMoY7NqDwv
n6PEH6NxjJDqXxUhmRdnx2qhizrHfYg8hAnDTT+7apBa7JfVowQaJGpiBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOZkJ5YwAyaRtCNMVNb4EgWMFvpjMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvNW1RbmxqQURKcEcwSTB4VTF2Z1NCWXdXLW1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvYlMA0G
CSqGSIb3DQEBCwUAA4IBAQCgUsUpf5mvFSzAjoW89jFWyxFVLP2eu0EccnWddW8R
jNfZ5VaDHm8Yp3jXtChFUYuEH35l37pGLtOiAcRTMEwf3Vlv7lx+Co9ftbC1N+pq
PFR/8HBT82Zd8qEgTRLsnhylRejdcSqjonkitc3kUx2syncvgKw3UxnNOSYScXuY
q7VrDiD2tNNrbSUCNlOvVG/Fc2/aTFmkqkkawF2Dd/Dt6toND71skp9Vz82NF27K
srJU8M3flNhhTgH8jA/KskppM1tkIf1J/cNxa9kFFnimORIBN8FUZ4t/q4dolHZI
6OFMg+yG+0nHBW+QKNm9SXhOF6suYKk7Wsus0xB/qVLO
-----END CERTIFICATE-----
Generated at Thu Sep 5 16:46:35 2024 by rpki-client on console-fra.rpki-client.org