Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/8BZB-Ogf2QAfc4CmaLyFpN6vWjg.roa
File: 8BZB-Ogf2QAfc4CmaLyFpN6vWjg.roa (raw, json)
Hash identifier: a31BesmETjeOR+2Gt7bf/zgHxmqV8+JiDVJb7th8Qyk=
Subject key identifier: F0:16:41:F8:E8:1F:D9:00:1F:73:80:A6:68:BC:85:A4:DE:AF:5A:38
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0185CBA6CBF19F28E58B92C92155B1A25622
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/8BZB-Ogf2QAfc4CmaLyFpN6vWjg.roa
Signing time: Thu 19 Jan 2023 20:09:43 +0000
ROA not before: Thu 19 Jan 2023 20:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 09:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:a6:cb:f1:9f:28:e5:8b:92:c9:21:55:b1:a2:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 19 20:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f01641f8e81fd9001f7380a668bc85a4deaf5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:20:b5:8c:48:dc:17:ea:7e:ea:23:79:c4:
31:99:21:e5:90:a7:fb:45:3d:86:27:cb:05:44:bd:
a1:2d:3d:6d:7f:5b:d9:e3:f1:fe:b4:83:23:5e:7e:
91:56:fa:7d:fb:92:f4:48:24:04:80:ee:68:84:3d:
3c:b6:12:48:26:30:98:a5:c7:19:01:7e:a7:4e:8d:
3e:ee:1f:60:ac:dd:59:5f:2c:c2:7b:23:87:fe:34:
d1:f7:2e:48:e2:42:31:25:fd:d6:e0:61:63:a8:bd:
1f:7b:dd:a3:a2:6b:32:bf:71:44:94:9b:82:2e:0b:
32:be:6f:93:41:e0:2c:c6:bb:d2:1d:ba:5f:a5:91:
58:a8:f2:7f:83:55:0e:89:0d:cd:48:31:97:c3:e0:
c3:e4:18:bf:1f:51:37:4e:e6:fd:cc:6a:39:d8:99:
2e:e4:b6:48:49:36:0b:7c:2f:12:ae:60:37:f7:c2:
02:2a:be:7b:33:ca:4b:7c:cc:de:88:49:61:64:98:
8a:a8:2c:3e:a3:cc:34:07:e0:90:7d:92:80:7c:7f:
23:9e:12:c7:60:e5:8f:88:76:7f:f0:3a:3e:9e:f2:
34:10:7b:4e:b8:51:1e:ce:dc:cc:93:66:92:a0:54:
2d:6b:f6:b7:58:05:aa:0f:51:67:4e:80:62:f3:00:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:16:41:F8:E8:1F:D9:00:1F:73:80:A6:68:BC:85:A4:DE:AF:5A:38
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/8BZB-Ogf2QAfc4CmaLyFpN6vWjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:6c:5a:70:bc:ea:6b:e3:99:d5:b1:46:e5:5e:65:86:5a:
38:96:bc:ea:6f:b4:b2:5e:b7:97:ae:36:17:a1:a6:a1:12:39:
cf:1f:d4:08:8f:0a:14:7a:53:2d:56:16:95:03:96:7c:bb:c7:
ed:11:01:c3:77:d6:0a:05:16:d8:ff:3b:93:41:73:bf:01:bb:
bc:6c:7b:51:3b:76:25:b8:a8:f2:d5:6e:d8:32:0c:6e:72:14:
6d:49:47:da:5a:55:38:ca:97:bc:41:cc:14:10:ab:b0:f5:3c:
14:de:a2:45:1a:dc:85:f4:85:ca:ac:0e:6d:ff:6b:0e:e8:d8:
f7:75:d2:28:68:75:8b:0a:ff:a3:23:70:bb:b7:93:46:b3:0d:
2f:59:55:58:6f:ad:9b:f1:00:7d:c8:e7:0f:1f:58:72:34:22:
63:07:47:db:49:05:95:4f:67:7b:9b:dc:df:ee:73:26:9b:9d:
7b:63:5a:7c:c7:22:6d:9f:5b:46:da:c9:4d:56:80:49:bd:df:
59:82:1d:0c:90:15:0f:1b:4c:01:ee:99:03:ed:73:d9:4f:7c:
ea:18:f0:03:2a:0c:8a:8b:52:59:52:fa:8b:cf:33:fe:39:46:
9f:64:fb:29:8b:ac:8d:33:c7:1b:dd:07:8b:40:57:1f:1e:1f:
e3:dc:43:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org