Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/S7999L9q72jidp_Pp1J76vJ2ipU.roa
File: S7999L9q72jidp_Pp1J76vJ2ipU.roa (raw, json)
Hash identifier: 329AKDk6oWvdbvY8AhHb9Ro5GnWFG8ZhAOhW56tAAxI=
Subject key identifier: 4B:BF:7D:F4:BF:6A:EF:68:E2:76:9F:CF:A7:52:7B:EA:F2:76:8A:95
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01856EA6CCD1D2D0A6B87D18B36A6D75E0D5
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/S7999L9q72jidp_Pp1J76vJ2ipU.roa
Signing time: Sun 01 Jan 2023 18:45:03 +0000
ROA not before: Sun 01 Jan 2023 18:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 194.246.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:cc:d1:d2:d0:a6:b8:7d:18:b3:6a:6d:75:e0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 18:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbf7df4bf6aef68e2769fcfa7527beaf2768a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:22:3e:22:95:7c:e2:de:db:21:d2:c6:7a:
9f:8c:48:32:e4:20:7e:c4:99:22:5d:f5:45:0c:da:
17:b9:38:55:92:42:02:ee:81:13:99:aa:50:a1:b6:
fd:04:65:4c:b4:ab:d6:07:6b:16:49:fe:85:44:a5:
bd:8d:9a:3b:99:2e:ec:5a:6e:fb:e8:f6:0b:b3:44:
30:1e:af:19:9e:67:93:ac:45:d5:a1:40:1c:10:30:
8a:36:a1:fa:26:c5:62:d3:e5:d2:9a:a3:ff:0a:98:
c9:b0:55:fa:71:38:7b:32:4f:22:a0:a5:3c:7d:c0:
a4:e8:b9:64:7a:ba:f0:d3:a8:6c:13:a5:45:2d:4e:
11:98:84:81:eb:b5:d6:3d:4e:ad:55:15:7e:e7:39:
cc:0e:f1:4a:73:e6:91:10:44:b9:43:9e:34:55:51:
21:51:e2:9f:d0:f8:25:c3:b9:f3:68:dc:32:28:c3:
bf:79:f8:b9:85:8d:5e:e1:87:ec:10:d6:a1:03:0c:
df:6e:1c:06:30:e5:84:d9:a9:45:0f:3b:d0:24:bc:
ea:9b:e8:df:31:22:e7:d2:4b:e7:6d:b0:87:b2:ab:
51:67:2e:33:9c:2f:8b:6a:84:cd:5c:fe:34:d9:b1:
3e:3e:ea:77:bf:c7:39:ae:62:e1:69:de:a0:9a:37:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:7D:F4:BF:6A:EF:68:E2:76:9F:CF:A7:52:7B:EA:F2:76:8A:95
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/S7999L9q72jidp_Pp1J76vJ2ipU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:85:95:6c:e5:66:2b:45:0b:58:9c:2d:d2:25:7b:94:3c:09:
36:d7:9d:f0:67:c1:d7:23:eb:95:9d:cf:65:eb:4b:90:0e:9e:
6d:ac:ba:97:c5:76:e8:3b:fb:56:05:5d:75:43:d1:d4:7b:d1:
9a:fd:a2:2d:c2:4e:cf:7e:7b:a9:3b:7d:f9:ca:36:ce:34:ea:
6f:9f:86:46:23:28:bd:3a:9d:6a:ed:eb:9c:73:19:6b:43:cc:
cf:3a:7a:10:e3:8f:72:f4:98:d4:8f:c7:4a:bb:64:e9:08:97:
fb:90:99:81:9f:56:a9:a5:2a:79:61:6b:05:a8:18:a5:83:43:
7a:f5:0e:49:94:ac:7d:55:f5:ec:d7:68:1b:a3:dd:ae:be:56:
22:e6:7e:7e:69:fa:0b:9f:84:3f:f6:dc:a7:a5:64:ba:5f:89:
16:85:35:96:36:f0:ad:6b:95:94:1f:fa:cf:38:8a:20:b5:b0:
c9:88:ba:19:1b:3c:56:46:a3:97:d9:94:4d:bb:89:d5:00:26:
2c:ed:90:48:18:77:fa:58:4e:31:83:6a:c8:9e:d7:5e:70:2f:
ab:de:f9:17:70:15:c4:67:3c:64:f5:c3:0b:1b:d3:c2:48:54:
b5:b2:69:f8:ae:0b:4d:39:c2:cb:fa:30:ea:1a:33:69:32:14:
96:c7:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org