Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/HZuEefYpPexlzH3rQ7o1C_cckkA.roa
File: HZuEefYpPexlzH3rQ7o1C_cckkA.roa (raw, json)
Hash identifier: CjPKrr+vaj87/K+uEzB0L7d0gAoEVnfkOJ2kK36Qco8=
Subject key identifier: 1D:9B:84:79:F6:29:3D:EC:65:CC:7D:EB:43:BA:35:0B:F7:1C:92:40
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01856EA6CF08E94E8637724D41091695B705
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/HZuEefYpPexlzH3rQ7o1C_cckkA.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 194.246.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:cf:08:e9:4e:86:37:72:4d:41:09:16:95:b7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d9b8479f6293dec65cc7deb43ba350bf71c9240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:59:eb:74:91:e0:72:1e:30:49:4f:6d:c3:4c:
6e:69:ba:75:d2:01:04:ee:9d:b9:77:40:df:c9:1e:
76:eb:07:98:cf:a3:f1:cd:08:a4:39:d4:66:45:90:
fb:b3:a1:34:f4:7c:79:97:05:43:de:19:23:c9:21:
d7:be:55:af:89:55:51:10:ae:0b:c6:41:68:e4:2a:
9c:2f:de:a0:88:a0:3a:5f:63:79:29:58:6a:4f:73:
f7:86:70:64:19:e9:0f:23:fe:b4:dd:16:ba:fe:25:
82:89:ad:10:46:76:4c:eb:30:7f:15:6c:0c:f3:bb:
2b:c1:f7:7b:c9:e5:5e:5c:77:c9:9c:3f:a2:1c:3c:
dc:af:95:85:5a:65:aa:82:71:de:82:12:0d:02:75:
d2:b7:c0:df:63:41:9c:82:27:94:ae:bc:78:34:db:
9f:1e:01:e4:11:1e:26:b8:7c:ce:8a:1c:84:2a:72:
98:42:a8:22:6e:33:fc:f4:51:a6:af:96:cb:40:eb:
19:ba:b2:97:b9:a9:84:91:90:52:87:03:34:27:a6:
98:1e:94:ff:f7:fa:31:cf:f5:9a:09:4f:72:bd:35:
78:b9:dd:7e:5b:ac:de:15:44:da:e5:89:74:15:c4:
85:ee:d7:90:75:66:85:51:58:b6:66:4b:69:bf:01:
03:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:84:79:F6:29:3D:EC:65:CC:7D:EB:43:BA:35:0B:F7:1C:92:40
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/HZuEefYpPexlzH3rQ7o1C_cckkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
20:67:75:4f:f5:46:24:25:51:0c:00:c7:a2:1a:6a:60:dc:8a:
bd:c4:44:3d:05:f0:26:3d:e6:c7:ee:73:d7:20:ea:79:08:8b:
ab:66:b8:f4:ce:39:67:e4:6b:2d:ff:4c:b6:9b:5d:3c:cf:80:
42:79:6a:4d:ae:b7:7b:4a:88:ac:29:f9:0e:fc:a6:03:a6:44:
7e:7f:64:14:cc:e1:a8:7c:51:56:ec:60:96:a5:92:54:86:ea:
18:94:4f:ae:87:4c:36:c1:53:0e:44:81:26:98:83:f6:b5:ab:
80:55:47:5a:cc:78:59:70:f7:86:f7:0f:f8:8a:48:84:23:07:
74:2d:77:f6:5c:a0:6a:0b:72:b0:ad:37:cf:4e:fb:d8:e7:e6:
0f:cd:cc:c0:1c:85:6a:b7:2c:3d:f2:f5:84:c3:b7:f0:17:b4:
5b:1c:27:85:0b:a0:0f:c5:69:ae:fb:89:f5:5f:68:da:12:e3:
32:2c:9c:ef:cd:66:f9:57:a4:3f:f1:d2:30:40:85:1d:93:26:
e3:0c:86:4a:93:8e:1d:23:00:7a:90:2b:48:72:74:94:96:84:
d9:3b:11:3a:75:09:8a:40:a2:d3:2d:46:af:d5:93:ca:80:98:
83:92:97:b1:f6:14:ae:18:c1:cb:f4:20:7f:70:23:61:c4:24:
3e:1f:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:46 2023 by rpki-client on console-ams.rpki-client.org