Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/F2tl_leMQYSZC9rLOtgScz7FT4w.roa
File: F2tl_leMQYSZC9rLOtgScz7FT4w.roa (raw, json)
Hash identifier: mgOuoP3n9yY6fYpWLzgj+Ga4jPEILCHjpUJr4dGsiZ8=
Subject key identifier: 17:6B:65:FE:57:8C:41:84:99:0B:DA:CB:3A:D8:12:73:3E:C5:4F:8C
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0190E38C0E7CC9F608524BA60A59964C6FC3
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/F2tl_leMQYSZC9rLOtgScz7FT4w.roa
Signing time: Wed 24 Jul 2024 07:02:04 +0000
ROA not before: Wed 24 Jul 2024 07:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 05:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e3:8c:0e:7c:c9:f6:08:52:4b:a6:0a:59:96:4c:6f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jul 24 07:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176b65fe578c4184990bdacb3ad812733ec54f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:2b:eb:d3:93:50:f6:1c:96:3a:80:9b:bc:
2c:12:df:e2:42:2d:db:7e:25:df:52:8b:fd:f3:e5:
8f:14:e3:b9:7b:3f:09:98:1b:7f:9b:04:b0:3a:8b:
83:ba:d4:9e:b5:f6:7e:09:ba:13:5d:69:2f:8b:a3:
c7:5a:8e:f3:40:fd:b8:d4:da:c7:79:93:5f:59:52:
74:86:fd:24:b1:0b:43:7d:88:59:97:e0:05:c0:0d:
da:da:d0:27:62:25:f6:76:52:76:0c:0f:44:ec:78:
45:a0:c2:b9:65:ec:e8:e2:1d:88:64:4c:ba:74:52:
10:96:74:ee:4e:79:31:af:2a:c1:c8:59:09:ca:85:
06:37:9a:8a:19:93:d6:5f:8b:5c:fc:9d:95:cc:62:
e1:03:ab:44:90:43:f8:a7:52:35:84:3b:51:37:20:
8f:ca:f8:cb:93:44:e6:6a:12:2d:96:ad:1a:4f:61:
55:79:79:8d:b4:83:ca:21:f4:ec:7a:96:dc:8d:61:
f9:86:8f:c1:9e:1a:a1:36:b0:35:7d:65:a2:00:40:
2c:d9:08:e5:7f:9d:84:2b:c4:ee:ee:d2:51:ed:75:
08:12:d1:34:3d:31:f6:da:9e:5d:df:16:f4:72:0b:
32:b0:f4:b5:af:98:86:a4:57:18:df:ec:85:7e:ee:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6B:65:FE:57:8C:41:84:99:0B:DA:CB:3A:D8:12:73:3E:C5:4F:8C
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/F2tl_leMQYSZC9rLOtgScz7FT4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:49:1b:72:ce:0b:17:e8:0b:33:44:14:67:b2:2f:13:2f:a6:
14:74:aa:c2:27:31:d9:a5:57:18:7b:5d:56:1e:77:92:a8:15:
d0:da:df:0a:2f:32:03:bc:ab:35:43:9a:f5:b5:22:53:9a:4f:
b3:2f:18:41:94:e9:ed:06:ae:d1:80:10:5c:a2:cf:3e:20:99:
3f:44:81:c0:ed:d9:83:2f:f8:6f:5b:4f:db:bd:64:de:9e:2b:
87:26:f8:eb:82:2a:ca:6a:e8:d4:66:8f:ba:fc:5d:c1:1b:a0:
7d:19:7f:a3:b5:50:c7:c7:19:7f:5a:12:87:2f:31:a3:9d:18:
92:b5:aa:29:2e:fa:a9:2f:0f:bb:3d:94:c0:86:02:bc:ae:36:
68:3e:b0:27:ed:49:08:27:1e:9c:8a:09:89:06:aa:0b:c3:26:
81:73:4d:a1:a6:14:c5:5f:f2:c9:5f:cc:5d:8e:4b:6b:34:50:
c6:9b:33:e0:7e:87:0c:50:ea:81:90:b3:05:2d:22:e8:2a:23:
70:5c:b6:f7:22:44:5d:ff:1f:cc:ae:70:37:7e:3e:bb:e3:7c:
05:0d:85:e5:c8:06:f2:e5:a6:a7:b4:b6:e6:c4:8a:7a:3f:64:
89:92:2c:a4:ee:6c:f1:8f:00:6e:6b:4c:f8:d7:f0:b9:3c:ae:
00:8f:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 06:58:36 2024 by rpki-client on console-fra.rpki-client.org