Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DkY05cqu45h7LDIdyUro47t5JwM.roa
File: DkY05cqu45h7LDIdyUro47t5JwM.roa (raw, json)
Hash identifier: snALNyO4rgVyd0zo0qc91VzSMWnRIAAdLpFIIkCuhHM=
Subject key identifier: 0E:46:34:E5:CA:AE:E3:98:7B:2C:32:1D:C9:4A:E8:E3:BB:79:27:03
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0185CBA6CA71FC7C20AC8587A884BE32C1F7
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DkY05cqu45h7LDIdyUro47t5JwM.roa
Signing time: Thu 19 Jan 2023 20:09:43 +0000
ROA not before: Thu 19 Jan 2023 20:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 09:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:a6:ca:71:fc:7c:20:ac:85:87:a8:84:be:32:c1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 19 20:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4634e5caaee3987b2c321dc94ae8e3bb792703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:3b:8b:45:c1:13:a0:8e:0a:6d:ea:a2:1f:
56:47:88:09:77:bc:9e:e5:e3:5b:b5:46:f3:df:ac:
ab:1c:81:85:40:de:9f:b7:8b:c5:6b:7a:03:99:da:
a3:f6:53:71:80:2d:89:9f:29:07:4e:c8:2a:4a:58:
7c:87:fd:84:db:59:87:d5:81:83:84:de:93:f6:fa:
0d:00:a9:a7:e9:50:18:ac:30:6d:a5:1d:e9:78:91:
43:5e:a3:78:7c:b5:b7:23:be:18:93:0d:a2:40:a7:
f5:0f:4f:86:51:17:be:2a:0b:e2:27:b6:88:5a:a5:
c3:63:31:8d:74:7a:08:45:ff:33:62:71:e5:aa:bb:
55:95:32:46:67:79:bb:97:ab:cc:e8:c0:5c:a1:00:
e6:51:01:bc:bb:d6:7d:20:52:f8:b3:52:11:36:c4:
63:b9:54:9a:4b:e1:d0:15:73:ca:dd:f1:0b:2c:ee:
02:d6:be:4b:85:1b:7f:4b:e1:ca:27:67:f5:85:9d:
43:03:6a:d1:c0:fa:87:4e:96:b0:e8:ce:15:1e:5c:
63:bf:53:eb:b4:9e:a1:74:78:d8:7f:72:2f:20:ad:
c4:bc:21:a8:01:b9:4c:d9:e4:96:fe:9c:2e:9b:da:
6c:6f:ca:1f:da:b4:e2:ae:48:c9:0b:b0:6b:a8:29:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:34:E5:CA:AE:E3:98:7B:2C:32:1D:C9:4A:E8:E3:BB:79:27:03
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/DkY05cqu45h7LDIdyUro47t5JwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
68:85:34:45:b8:5c:4f:c6:c6:08:b1:09:7b:57:1d:c5:19:15:
97:64:a9:a1:bf:44:66:6a:8d:4a:7c:e6:6f:f2:6e:f8:b5:e2:
54:ad:11:67:1c:48:bd:73:6f:77:97:78:d0:13:ef:7f:b9:d1:
ad:bd:43:9b:ee:fb:10:ac:75:19:d3:bb:25:12:68:75:48:10:
e8:63:67:f1:df:27:dd:55:74:b0:25:94:38:a4:1e:da:d2:c9:
dd:a9:db:09:fb:80:35:29:7d:64:0a:98:78:5d:dc:cd:65:79:
f6:a5:70:4f:a8:f0:f6:8f:24:50:b8:de:92:10:41:74:4e:47:
6a:07:0b:30:3e:ff:7b:84:d6:0a:fb:d3:ed:0c:00:cf:39:c8:
fc:3d:f8:f0:7c:ad:b3:b2:36:5a:68:32:2d:41:47:3c:9b:57:
1d:86:00:e0:a3:b1:8f:7f:43:c6:5c:c4:e6:63:a3:29:e7:aa:
70:17:00:fd:7a:9b:7b:25:38:8a:27:8c:d4:d3:a2:6f:e8:18:
79:7e:42:ff:5a:bf:f5:d4:f8:36:b9:3a:4c:07:6d:d7:3a:c5:
88:91:45:02:7d:e4:aa:66:08:40:b6:4a:22:57:5d:42:89:87:
38:33:d6:db:ad:63:b2:e3:b1:e9:96:fe:77:46:2f:b0:ed:cd:
ea:8e:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org