Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/OtW7_cMyujEjbUR6s8HCKdGmQWI.roa
File: OtW7_cMyujEjbUR6s8HCKdGmQWI.roa (raw, json)
Hash identifier: PrKdfKUNMphvkDtAbZ3qUbuse97D6I9p5D9rZJ4oL4g=
Subject key identifier: 3A:D5:BB:FD:C3:32:BA:31:23:6D:44:7A:B3:C1:C2:29:D1:A6:41:62
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018CC5DC113B3D4221586109292C6CA262E1
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/OtW7_cMyujEjbUR6s8HCKdGmQWI.roa
Signing time: Mon 01 Jan 2024 16:29:42 +0000
ROA not before: Mon 01 Jan 2024 16:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26636
IP address blocks: 194.246.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 25 Apr 2024 04:36:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:11:3b:3d:42:21:58:61:09:29:2c:6c:a2:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 16:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ad5bbfdc332ba31236d447ab3c1c229d1a64162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:75:2c:fa:d6:67:0a:fb:e7:0a:00:1b:f1:
7e:e3:b0:e6:20:ce:e8:0e:72:3b:07:aa:0c:eb:d3:
04:f2:0b:c3:0e:c5:d1:61:f4:94:e9:49:cc:9b:63:
af:97:ce:0f:14:01:a6:4c:26:29:79:7b:fe:54:e7:
d4:fb:13:b3:4a:07:c0:34:7e:18:f0:a0:31:e4:56:
bd:0e:da:b1:ac:03:f6:2f:f1:ff:cb:8e:c3:db:29:
c3:f2:1d:55:40:1f:c3:bc:05:81:17:cf:5c:50:97:
f8:df:c3:42:e5:7c:8b:11:f4:36:fb:4c:7f:cb:4d:
37:9c:70:79:95:6b:5d:01:a0:c9:38:c7:32:5e:0f:
8d:2c:ca:9e:3d:1b:87:87:b6:76:5c:ed:aa:a6:91:
ad:02:03:c5:66:b5:5c:1a:ac:36:52:67:85:70:69:
08:bc:4c:c0:29:c9:99:03:6b:f1:bd:83:b0:02:29:
2a:50:48:1a:46:5c:6b:c7:cc:b2:a5:a2:ec:39:1c:
b1:f5:df:42:76:e1:22:98:af:63:dd:52:57:6c:76:
3b:17:ed:ec:88:ef:5d:65:52:bd:13:8a:3b:53:cd:
85:eb:24:b3:06:df:e3:76:83:d6:a1:02:2c:7e:9a:
17:5f:45:13:d6:ec:ee:13:f6:b9:fd:4c:bb:2b:f5:
28:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D5:BB:FD:C3:32:BA:31:23:6D:44:7A:B3:C1:C2:29:D1:A6:41:62
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/OtW7_cMyujEjbUR6s8HCKdGmQWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:13:03:78:fb:e9:8b:72:e1:ff:d5:03:39:6d:ee:40:cf:38:
12:1f:ac:2a:b8:0f:c8:8d:17:cb:56:44:52:21:c4:01:67:5f:
c0:32:96:f3:c6:27:5c:0c:f2:a6:ad:d3:09:53:70:36:0b:cf:
dd:27:6a:d5:28:6b:3c:49:82:6c:57:06:de:b1:2c:98:26:f3:
24:96:59:76:39:65:ff:34:24:03:dc:af:61:4f:10:8c:75:06:
d9:49:a1:ea:3f:b1:76:9d:fe:f8:e3:f3:16:a8:37:19:e6:7a:
58:3c:5e:06:4d:41:0c:eb:a8:0c:1d:19:79:6d:16:5c:db:4a:
e0:7b:55:32:bb:31:f7:e7:2e:45:44:75:0a:b2:e2:fe:66:38:
c5:fc:d3:e1:a6:f3:d5:9d:58:4b:9a:5b:31:b1:c7:2d:7a:ee:
16:37:68:90:dc:ba:34:f0:a2:7e:ca:df:43:8e:f2:5a:fd:cb:
ad:0f:0c:fd:62:0c:18:b5:04:be:63:c9:e2:c6:b5:0f:53:69:
8b:95:5d:54:78:92:30:05:b9:f1:78:d0:f4:a9:fc:76:ba:e5:
6d:49:41:bc:1d:8f:bc:43:cc:04:99:34:1a:16:e8:c0:71:5c:
65:88:4c:47:dd:8b:4f:11:4f:8f:cf:3d:23:9e:5b:60:1a:4b:
2d:a0:14:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:37:51 2024 by rpki-client on console-ams.rpki-client.org