Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Q636nRBO84-sXxChrvBYia1___U.roa
File: Q636nRBO84-sXxChrvBYia1___U.roa (raw, json)
Hash identifier: AekcRjqw5N24vUs6zVgFsNRqiM3Gqd7ghFioxoMQ/q0=
Subject key identifier: 43:AD:FA:9D:10:4E:F3:8F:AC:5F:10:A1:AE:F0:58:89:AD:7F:FF:F5
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0187171729D005FDCFEFDABCF2659C4DC162
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Q636nRBO84-sXxChrvBYia1___U.roa
Signing time: Sat 25 Mar 2023 04:46:46 +0000
ROA not before: Sat 25 Mar 2023 04:46:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.246.36.0/24 maxlen: 24
45.143.160.0/24 maxlen: 24
45.143.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:17:17:29:d0:05:fd:cf:ef:da:bc:f2:65:9c:4d:c1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Mar 25 04:46:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43adfa9d104ef38fac5f10a1aef05889ad7ffff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:79:ef:7d:14:57:ee:5c:6e:ac:17:49:cd:
e0:70:ea:f7:4b:e3:f0:b6:65:4a:bd:7f:59:68:4c:
63:02:46:f1:dd:56:00:66:7d:9c:cb:e0:0d:70:de:
94:37:62:a9:95:e1:b7:97:17:ef:cb:39:77:94:5e:
17:64:05:4a:14:98:10:fe:1c:d7:36:82:40:18:da:
f0:77:0a:a7:8e:f7:e6:d9:c7:78:36:ee:49:fc:cc:
c2:92:60:37:79:dc:0f:c6:03:99:1f:7f:d3:67:30:
f5:2d:a2:00:47:46:c0:d0:05:68:72:c9:32:07:8f:
b0:50:d3:28:4a:c3:18:28:c4:50:1d:af:a3:7d:ff:
18:99:45:72:98:69:3e:1d:fa:80:a1:f0:62:e2:4d:
d8:d5:5e:2a:97:09:67:aa:41:bd:10:04:e0:43:ff:
a7:a3:6d:2f:9a:0a:b6:d2:f5:a9:00:da:e2:ad:a3:
a2:45:8b:b8:fa:f6:b8:d8:eb:cd:fd:96:4c:c9:2f:
1d:1b:63:97:b4:e0:b6:56:e6:ae:f6:03:3e:a1:71:
bd:4b:9c:88:d7:4c:1c:91:63:59:20:1e:7d:37:51:
00:f1:a2:78:7b:46:8b:ab:75:2e:94:91:b8:12:b2:
44:9d:0e:13:1b:d1:ef:e6:83:86:41:05:6a:23:3f:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:FA:9D:10:4E:F3:8F:AC:5F:10:A1:AE:F0:58:89:AD:7F:FF:F5
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Q636nRBO84-sXxChrvBYia1___U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/23
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
96:77:30:63:7b:e0:d9:80:71:a4:26:dc:bc:88:3e:3d:ce:ce:
e5:b7:6e:6e:06:4e:61:98:02:b1:57:e2:ca:1c:2a:99:37:8c:
f6:c8:7c:ca:bd:9b:87:22:58:46:d3:dc:46:05:20:a3:0f:95:
4f:85:0a:6c:a6:6f:e5:66:7b:88:c9:65:38:99:18:87:1f:78:
63:38:ce:08:84:ee:44:7f:02:8e:d6:aa:08:d7:9d:27:9c:87:
fc:81:4f:12:2d:dc:91:f7:d3:6e:59:4d:bf:38:44:a1:b2:9f:
b3:32:e8:03:c9:e9:33:7b:05:0d:34:cd:c7:75:33:1e:f7:ee:
08:67:6f:33:da:02:a8:bc:35:3a:fe:77:65:61:1e:38:be:88:
46:70:67:67:ad:d9:a1:2b:67:b5:25:ec:65:e9:6a:0b:23:fe:
9d:40:ea:5f:ff:c0:56:30:c2:ba:14:19:44:2a:db:da:fc:bb:
6d:47:46:69:b4:1c:94:f2:7b:e0:bd:71:63:98:ce:06:57:c8:
53:9f:6f:4a:af:06:f8:b6:e5:f5:5d:66:a7:e9:90:b3:f3:8d:
84:ab:77:ab:8a:16:63:07:fe:60:04:6f:3b:44:2d:44:aa:92:
3b:dd:82:f8:5b:63:94:c4:ed:01:d8:5e:bd:08:d1:db:fb:5e:
20:9a:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org