Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DQ6vIjZ8zDocgpdEDkWzEOtUMPQ.roa
File: DQ6vIjZ8zDocgpdEDkWzEOtUMPQ.roa (raw, json)
Hash identifier: D1u+RMT6zEsYuee8yMH0XwlRoSjS6sNDJw494TsXWtk=
Subject key identifier: 0D:0E:AF:22:36:7C:CC:3A:1C:82:97:44:0E:45:B3:10:EB:54:30:F4
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018901282D023383328DF7A59DABE5FCB13B
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DQ6vIjZ8zDocgpdEDkWzEOtUMPQ.roa
Signing time: Wed 28 Jun 2023 08:39:17 +0000
ROA not before: Wed 28 Jun 2023 08:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35409
IP address blocks: 194.246.37.0/24 maxlen: 24
194.247.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:28:2d:02:33:83:32:8d:f7:a5:9d:ab:e5:fc:b1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 28 08:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d0eaf22367ccc3a1c8297440e45b310eb5430f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:b6:44:e8:f6:e4:54:74:40:f9:7a:c8:a7:
67:92:6e:21:b7:b3:22:d7:85:0b:e7:60:e2:e1:0f:
be:2a:ea:df:a8:5d:bf:db:67:55:c4:15:81:e1:6e:
88:48:92:2c:f3:d4:d7:71:05:b1:91:63:6c:95:37:
7e:4b:2c:d5:13:b5:1a:ce:9a:fa:76:c3:b0:de:fb:
0b:6b:b2:f9:3d:1e:c1:2a:65:8c:6a:aa:ed:89:4c:
8b:76:85:69:6f:a3:ea:04:f3:2f:16:4e:73:43:cf:
95:b6:e6:34:0f:8b:1d:89:67:bf:19:71:1e:d8:d0:
80:b8:26:f2:24:da:80:8c:62:06:bb:74:22:d8:2c:
68:34:cb:37:f3:8d:d5:be:07:37:af:69:5b:c2:ab:
1b:0b:7a:15:45:ea:1b:a3:3d:7b:8b:2e:f3:01:36:
fc:e5:47:36:1a:11:74:50:27:3f:25:7a:cd:b7:ac:
cd:8b:da:08:1f:43:1f:10:ba:91:bc:60:71:cc:a7:
60:5e:1d:6c:23:8e:ad:20:ae:ce:47:ca:4f:af:79:
44:ff:b2:b8:6b:43:37:01:8f:39:23:2f:8a:02:68:
20:d6:35:64:25:36:07:dd:16:a7:f4:73:e1:cd:05:
84:c8:24:fc:dd:6f:0e:b1:5f:b8:b7:f2:64:43:34:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:AF:22:36:7C:CC:3A:1C:82:97:44:0E:45:B3:10:EB:54:30:F4
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DQ6vIjZ8zDocgpdEDkWzEOtUMPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
194.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
83:86:b4:2f:38:58:31:50:f7:44:97:0c:bc:d7:0c:90:d1:d5:
15:7c:4c:70:1a:42:22:ac:17:9a:68:af:cf:e9:02:3b:09:f5:
56:75:f2:f6:14:9f:a0:7e:e7:f6:52:62:0f:e2:a6:4f:8a:76:
e7:c3:9e:de:13:5a:12:b3:14:75:11:5d:85:d8:86:99:45:0a:
de:3d:e0:c2:0b:d8:77:2a:f7:3f:2a:67:de:36:06:03:ff:91:
89:8c:31:7e:14:a0:db:e2:ec:5a:e0:71:30:17:17:70:93:92:
86:42:ab:5e:b8:46:d2:d4:c0:59:07:70:90:b7:35:cc:93:2d:
3d:9c:ed:96:1d:24:d5:8f:27:82:58:be:45:a7:2d:c2:ea:18:
73:a6:7e:78:b5:4b:58:14:52:bb:cf:e4:9a:80:ba:fd:84:ff:
e3:e7:43:f1:30:97:fc:1f:40:4c:a9:ca:07:ac:c0:22:aa:da:
45:05:ef:6c:6d:d0:9a:5d:4b:d6:bb:8f:d0:c1:7c:be:e3:12:
f5:1f:82:94:a4:c7:2c:0a:73:c2:8f:e3:55:7e:6b:d4:d8:e9:
e6:0e:14:d3:ff:af:1f:f4:ec:18:03:d3:bd:ff:0b:20:f0:1b:
a8:ab:4f:c6:69:bb:fe:fc:e0:29:f5:06:de:f8:e5:11:2c:2e:
24:a4:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 10:22:00 2023 by rpki-client on console-ams.rpki-client.org