Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/PsBNfjRSFaY7mIaghUdvMKnqAZc.roa
File: PsBNfjRSFaY7mIaghUdvMKnqAZc.roa (raw, json)
Hash identifier: 0WIq8x7V3pGMco6U8SKqyEyf7ThI0kxq9T9WIlMrTTE=
Subject key identifier: 3E:C0:4D:7E:34:52:15:A6:3B:98:86:A0:85:47:6F:30:A9:EA:01:97
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01899BE46F6707D3F8485364B6E1FE841BEA
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/PsBNfjRSFaY7mIaghUdvMKnqAZc.roa
Signing time: Fri 28 Jul 2023 09:46:26 +0000
ROA not before: Fri 28 Jul 2023 09:46:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.246.37.0/24 maxlen: 24
194.247.44.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Aug 2023 02:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:e4:6f:67:07:d3:f8:48:53:64:b6:e1:fe:84:1b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jul 28 09:46:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ec04d7e345215a63b9886a085476f30a9ea0197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:9c:9c:a1:98:5b:63:76:8d:38:a0:0e:a9:
2c:d4:70:25:ea:e6:58:d2:4e:cd:9a:29:36:ad:e4:
b4:a8:71:cd:dc:06:08:a2:22:7e:3f:81:34:43:52:
48:56:3b:48:78:b5:89:c4:74:ae:ee:17:1d:5f:b4:
f0:eb:28:0c:ce:96:1b:ba:61:26:27:53:93:8b:89:
7b:5a:c5:6c:2d:94:d2:c2:b2:f0:b9:de:be:b7:95:
c0:52:ab:a9:5e:2d:d5:7f:72:58:39:a8:38:7f:c4:
c3:79:20:9a:21:0d:8f:5d:8a:a5:eb:be:3f:13:5d:
f9:48:01:38:ec:14:03:3a:7a:c2:b0:f2:f8:c3:72:
35:3d:27:d8:b6:8c:85:a5:45:67:26:45:5c:84:df:
36:45:1a:32:ac:76:83:5c:83:43:95:95:4d:47:67:
b8:1d:44:67:76:78:ae:28:56:9f:05:16:7f:93:3d:
dd:43:ee:a7:07:8b:d5:f6:ea:15:03:76:38:1c:89:
7b:17:a4:2a:d0:08:52:07:bb:87:b3:b8:aa:86:60:
4a:aa:d5:8a:b1:c1:cf:0e:ff:02:59:c8:99:37:0a:
71:09:5e:b8:4a:c0:18:6b:c5:49:79:68:40:79:21:
59:aa:bc:92:c0:22:ea:1f:fe:10:de:d0:0d:dc:50:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C0:4D:7E:34:52:15:A6:3B:98:86:A0:85:47:6F:30:A9:EA:01:97
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/PsBNfjRSFaY7mIaghUdvMKnqAZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.166.0/24
194.246.37.0/24
194.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5d:ab:b0:e3:7f:2a:b6:33:60:69:79:29:c2:8b:95:e7:ac:
aa:20:7e:2a:2f:30:62:07:1c:8b:b6:7b:07:7d:ae:41:02:e8:
e2:25:c9:1e:c7:0c:4b:1c:4d:5b:18:6e:fb:80:0e:31:5f:d7:
62:33:d9:98:4c:bb:08:77:e7:44:29:09:0b:be:0a:60:8b:06:
4b:c9:61:96:f8:5b:14:ba:2c:00:75:fd:74:52:6c:ea:ca:63:
6b:61:55:99:74:21:27:0c:d2:68:d4:db:a7:40:e3:18:5c:b7:
64:c5:96:8f:76:ce:29:cf:4c:d1:55:66:c3:96:f7:89:0f:d4:
89:65:cb:23:60:2c:c2:24:65:37:c0:49:cb:b5:ac:66:73:28:
5e:14:40:1a:bf:0c:d4:4f:33:50:02:1d:eb:5a:60:61:a2:d6:
3f:bb:e9:ab:3a:71:f5:39:8b:c4:b3:59:06:45:fc:5b:8d:5d:
a9:99:ae:36:a9:2b:1d:9c:cc:e7:65:c5:13:2f:0f:83:2d:f1:
45:cc:51:cf:15:b1:ce:97:db:14:c4:a4:73:64:3b:4d:44:75:
b0:a4:34:04:a1:cd:7b:f3:00:5c:19:0b:a9:50:40:d3:aa:e4:
21:b5:76:cc:49:e4:23:3d:60:04:3b:d8:66:2c:d3:6f:6d:80:
7a:a0:d0:91
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmb5G9nB9P4SFNktuH+hBvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwNzI4MDk0NjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWMwNGQ3ZTM0NTIxNWE2M2I5ODg2YTA4NTQ3NmYzMGE5ZWEwMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyGcnKGYW2N2jTigDqks1HAl6uZY
0k7Nmik2reS0qHHN3AYIoiJ+P4E0Q1JIVjtIeLWJxHSu7hcdX7Tw6ygMzpYbumEm
J1OTi4l7WsVsLZTSwrLwud6+t5XAUqupXi3Vf3JYOag4f8TDeSCaIQ2PXYql674/
E135SAE47BQDOnrCsPL4w3I1PSfYtoyFpUVnJkVchN82RRoyrHaDXINDlZVNR2e4
HURndniuKFafBRZ/kz3dQ+6nB4vV9uoVA3Y4HIl7F6Qq0AhSB7uHs7iqhmBKqtWK
scHPDv8CWciZNwpxCV64SsAYa8VJeWhAeSFZqrySwCLqH/4Q3tAN3FBC0wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD7ATX40UhWmO5iGoIVHbzCp6gGXMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvUHNCTmZqUlNGYVk3bUlhZ2hVZHZNS25xQVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZWmAwQA
wvYlAwQAwvcsMA0GCSqGSIb3DQEBCwUAA4IBAQBqXauw438qtjNgaXkpwouV56yq
IH4qLzBiBxyLtnsHfa5BAujiJckexwxLHE1bGG77gA4xX9diM9mYTLsId+dEKQkL
vgpgiwZLyWGW+FsUuiwAdf10UmzqymNrYVWZdCEnDNJo1NunQOMYXLdkxZaPds4p
z0zRVWbDlveJD9SJZcsjYCzCJGU3wEnLtaxmcyheFEAavwzUTzNQAh3rWmBhotY/
u+mrOnH1OYvEs1kGRfxbjV2pma42qSsdnMznZcUTLw+DLfFFzFHPFbHOl9sUxKRz
ZDtNRHWwpDQEoc178wBcGQupUEDTquQhtXbMSeQjPWAEO9hmLNNvbYB6oNCR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org