Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EwnUoPFunyBGstCFl28PCr4L4bw.roa
File: EwnUoPFunyBGstCFl28PCr4L4bw.roa (raw, json)
Hash identifier: WYKSIfABZfQguHNB1JnVsxbt3WFegZmJ/HI4wFxlmKE=
Subject key identifier: 13:09:D4:A0:F1:6E:9F:20:46:B2:D0:85:97:6F:0F:0A:BE:0B:E1:BC
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0189FBBC9801CBC75503FE2A64E20FA0CBE3
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EwnUoPFunyBGstCFl28PCr4L4bw.roa
Signing time: Wed 16 Aug 2023 00:26:28 +0000
ROA not before: Wed 16 Aug 2023 00:26:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
194.247.44.0/24 maxlen: 24
194.247.45.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
45.149.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fb:bc:98:01:cb:c7:55:03:fe:2a:64:e2:0f:a0:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Aug 16 00:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1309d4a0f16e9f2046b2d085976f0f0abe0be1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:96:13:aa:dc:62:4e:c7:68:ea:b2:32:b8:d6:
df:b5:55:a0:68:95:2a:7b:ba:95:31:62:0c:a0:ed:
56:6c:5a:51:9d:11:a6:3e:91:4c:e5:a6:96:d4:91:
2b:26:e9:ad:88:cf:49:0f:b1:61:3d:d7:11:ce:65:
89:4e:56:9d:e6:b9:c3:32:91:85:c3:3e:20:c9:73:
fd:ed:c6:ca:d5:a4:f2:9e:36:5e:aa:6c:1a:b5:59:
5c:99:b9:cf:1b:18:fa:51:95:68:58:d4:d8:c4:88:
5e:89:49:3f:c2:9e:82:2a:fe:12:ca:3e:b6:54:be:
ed:b9:30:6b:40:e0:8f:f7:a6:2e:a4:49:ee:ba:89:
97:b2:5a:b2:dd:1e:1a:72:d1:dc:4b:22:53:20:44:
26:66:dc:1e:ae:8d:44:a2:e1:a0:74:aa:aa:76:49:
8e:73:19:fe:26:0d:f6:64:5c:1b:57:9e:ad:d3:e9:
0a:46:3e:79:6d:df:0d:07:42:a4:3c:83:47:bc:7c:
5d:e5:a4:e1:51:81:15:bf:60:60:e5:73:c4:41:3e:
41:bd:46:e4:5c:8f:4f:fc:f2:be:5f:de:f7:5f:70:
d6:51:81:a5:ea:26:ae:3b:89:bc:a3:94:15:7c:36:
46:68:30:0e:f4:b3:5e:3e:84:c1:72:dc:64:63:6e:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:D4:A0:F1:6E:9F:20:46:B2:D0:85:97:6F:0F:0A:BE:0B:E1:BC
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EwnUoPFunyBGstCFl28PCr4L4bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
45.149.166.0/24
194.246.37.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:0a:e5:dc:b1:61:c5:bb:7d:cf:e4:ed:03:8d:b1:fd:95:0d:
80:f6:24:5f:7c:0e:78:2f:f6:d2:93:46:e8:5d:b0:7b:cc:48:
fc:aa:50:a0:68:7b:8c:16:5b:2e:c2:da:c0:99:16:ba:20:94:
39:23:4d:de:99:e8:ca:c3:1d:3f:a6:c4:d7:0a:5e:7d:78:e6:
25:a0:99:d5:50:d4:63:ba:e9:a3:df:77:77:3b:22:d9:63:4b:
46:e6:ea:e4:5c:37:9e:4e:fc:a8:c8:76:6d:17:42:fd:db:e6:
fd:15:e1:90:d0:21:ab:2d:92:ad:d4:12:a4:13:c4:76:20:24:
c9:2f:62:4c:c8:26:84:2a:d3:8c:3a:f8:8a:ea:b4:f8:44:b4:
cf:ba:a6:20:23:56:08:1f:c7:63:c7:23:87:c9:e1:04:ca:21:
58:4f:64:93:3b:de:07:5b:b3:ec:2e:53:74:b4:06:7d:9e:75:
61:22:82:fb:e6:1d:a4:ea:8e:0b:8e:8f:7f:09:3a:fc:ea:2c:
6e:f4:4a:9d:94:51:c3:32:74:37:f9:b9:b1:c9:16:ab:19:ba:
7c:19:33:d2:a0:e8:9f:7b:29:2e:e0:18:b0:34:86:2e:de:f3:
c0:ea:e2:0d:47:ce:9a:82:a1:7c:a4:5d:66:cc:7b:c9:24:29:
17:12:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org