Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LpVJL3Qr0ysAdzJMn9VKIWrmOtY.roa
File: LpVJL3Qr0ysAdzJMn9VKIWrmOtY.roa (raw, json)
Hash identifier: 4tgVXzITh+nRMhxQ0PMGDH18T+EnWaWYOcSQxDICU8k=
Subject key identifier: 2E:95:49:2F:74:2B:D3:2B:00:77:32:4C:9F:D5:4A:21:6A:E6:3A:D6
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0186BCBD7F5CDAB42DC3B83F5903313A3A28
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LpVJL3Qr0ysAdzJMn9VKIWrmOtY.roa
Signing time: Tue 07 Mar 2023 15:43:00 +0000
ROA not before: Tue 07 Mar 2023 15:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.36.0/24 maxlen: 24
45.143.160.0/24 maxlen: 24
45.143.162.0/24 maxlen: 24
45.143.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:bd:7f:5c:da:b4:2d:c3:b8:3f:59:03:31:3a:3a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 7 15:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e95492f742bd32b0077324c9fd54a216ae63ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:a5:4d:14:c4:85:f5:fe:2f:c3:7b:96:5c:
f9:a7:cc:d2:d9:90:75:e8:6a:5b:07:33:e1:08:fd:
72:08:b7:21:55:9a:3f:3e:18:31:09:0c:71:ad:4d:
e0:26:5e:83:8c:d1:53:65:41:c0:23:d4:71:0e:7b:
7a:cb:18:9c:33:da:32:bf:d9:cf:72:22:97:09:85:
0b:0a:95:26:c1:18:19:c0:5a:d4:21:d0:92:45:45:
ce:4e:90:2a:db:db:45:a7:8e:f6:7f:19:b9:00:20:
51:3d:68:a0:57:e3:b2:03:c9:e8:90:32:81:92:62:
47:cb:ea:1f:d5:19:c7:8d:87:5e:19:90:24:5e:02:
b8:e3:00:71:14:7e:a0:98:1a:e4:52:b2:72:01:60:
88:65:63:b6:2d:d3:e3:3b:0d:f0:cb:3e:9b:3f:95:
c4:fa:82:b4:5e:d0:6c:48:c5:e2:e0:2c:b9:ca:20:
e0:41:09:09:30:b6:b7:85:ca:d8:05:51:41:ba:42:
f0:2d:87:7b:71:3a:be:2b:1a:c7:c2:9a:ca:68:9a:
bf:8f:78:c3:64:6f:60:26:43:00:11:b6:93:13:2d:
9b:da:0f:3e:6c:3e:0e:84:a8:50:09:35:8a:b5:90:
f5:20:ed:cb:18:a0:09:cd:ab:59:b4:47:0f:3e:ce:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:95:49:2F:74:2B:D3:2B:00:77:32:4C:9F:D5:4A:21:6A:E6:3A:D6
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/LpVJL3Qr0ysAdzJMn9VKIWrmOtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0-45.143.162.255
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8d:1b:89:ad:46:ab:7f:f0:ac:10:01:14:85:a1:16:4c:3b:
8a:90:65:49:d0:7b:3d:82:da:66:eb:21:22:1a:37:a5:82:d8:
56:d7:43:cf:bc:a8:63:0c:d0:13:06:76:53:be:12:1c:fc:99:
99:38:da:27:a1:49:34:22:06:10:bc:7f:e6:0b:0d:1a:ff:52:
2f:3f:72:bd:4b:ad:bb:22:13:0e:66:ae:ed:0e:cb:35:79:38:
10:d9:3a:34:c7:d8:b8:6c:2d:eb:5a:fd:a1:0f:63:df:b0:aa:
bd:94:c0:99:64:fc:a4:db:0b:a0:fa:cc:9e:ec:33:c9:79:db:
fc:36:77:d7:5f:e7:01:92:ba:3c:96:54:ad:a9:1a:6c:9f:23:
1a:c0:7c:52:b7:6e:9d:f6:8e:73:54:48:04:df:6c:8e:7f:87:
b7:15:51:dc:5d:2d:de:b0:31:70:09:a3:28:cb:04:b2:90:a7:
00:3f:98:71:f0:0d:8f:c2:09:d8:38:ca:35:64:cd:06:3b:05:
bd:e6:ef:ea:ee:f5:2d:8f:dc:78:95:b3:58:d6:fb:7d:5c:2e:
4c:94:15:eb:da:9b:b7:d7:50:4f:71:ad:9f:be:8f:de:e4:95:
71:5a:41:19:bb:c4:d3:60:81:1c:44:08:c0:c0:41:6c:3e:cc:
82:75:98:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org